
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/B90F319AC84211F09A0BE068C4F9AE02.roa
File: B90F319AC84211F09A0BE068C4F9AE02.roa (raw, json)
Hash identifier: 0oflx8PpfYumWtaDNjRKvV2EgmoaxGKFDbpGgqR6stI=
Subject key identifier: 09:33:65:99:CE:5D:0A:1D:AB:9D:B8:3B:70:EF:3C:88:23:65:9F:D2
Certificate issuer: /CN=A91CCDAE/serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A
Certificate serial: 3D
Authority key identifier: 2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/B90F319AC84211F09A0BE068C4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:59:25 +0000
ROA not before: Sun 23 Nov 2025 08:02:15 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 401696
IP address blocks: 82.158.224.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl
rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:12:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61 (0x3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCDAE, serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A
Validity
Not Before: Nov 23 08:02:15 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a589ad-f1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c8:4b:ed:87:88:9f:3e:ed:07:1e:5f:e1:05:
f8:06:48:1f:03:ea:c5:01:df:c2:14:50:e0:59:86:
a0:25:f0:1a:b1:20:ab:09:a9:01:ff:a0:82:57:9f:
2e:3e:d4:71:17:9b:f6:a6:21:e8:4a:d1:df:69:b0:
d4:23:17:54:eb:d5:09:d0:47:9d:45:d9:fb:f9:5b:
f3:ad:95:88:78:d5:22:33:d7:91:8a:14:12:06:73:
7b:c0:0e:48:02:69:89:1e:e1:ee:e9:92:21:bb:65:
f0:6d:9f:39:c4:03:5e:a4:89:5d:ff:ea:3b:8b:b1:
96:af:a3:ea:05:7a:1a:9a:c6:b2:71:97:93:0e:af:
4d:f8:77:6f:f8:63:a2:ed:6d:28:09:49:36:1d:92:
39:a8:33:e0:a7:9b:95:bd:dd:82:38:51:47:1f:04:
95:61:87:b2:e3:ad:fe:3f:7f:0b:40:ed:40:b9:da:
53:2c:4c:e5:ce:75:c0:f7:9d:d8:15:6d:39:94:a3:
05:da:9a:26:32:24:fe:03:8b:10:59:61:b1:29:cf:
a0:5b:35:63:67:f5:8d:28:77:2c:fb:3d:4a:3e:40:
d3:41:19:bd:5b:db:1c:32:2d:4f:a1:05:30:89:06:
15:3e:90:17:72:77:73:38:92:b5:82:04:67:88:28:
bb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:33:65:99:CE:5D:0A:1D:AB:9D:B8:3B:70:EF:3C:88:23:65:9F:D2
X509v3 Authority Key Identifier:
keyid:2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/B90F319AC84211F09A0BE068C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
82.158.224.0/21
Signature Algorithm: sha256WithRSAEncryption
3d:ca:5e:d3:b0:48:3d:47:1e:37:c0:ec:8a:1a:28:e0:8e:3b:
e4:bd:dd:00:07:f7:95:d6:8d:bf:17:52:2c:67:8f:69:20:b4:
11:da:e0:69:d7:1c:87:08:52:44:92:ae:1a:6c:b3:f2:c9:5f:
e4:15:f6:65:72:0a:3d:62:6e:4b:57:2d:91:54:5d:44:93:a6:
f2:df:44:d5:c7:74:1b:35:97:f5:a8:fb:26:a4:38:b6:44:ca:
cb:e3:3a:3e:07:23:92:6c:fc:08:c6:5e:23:97:4f:f4:c9:9e:
5c:56:48:f5:8a:5d:ba:cd:c2:f4:3a:16:26:59:6b:e4:26:f3:
94:db:9e:c2:93:27:e3:24:b2:f5:ff:26:b6:44:a2:cf:47:f1:
54:c9:e1:83:82:b0:aa:4a:1f:7a:9d:bd:ff:4f:b2:4d:b2:3d:
cb:4c:64:6e:df:70:fc:77:60:70:c4:d6:d5:2c:3a:24:9b:af:
74:26:81:02:c0:e0:24:67:ac:63:4a:47:2b:3a:d6:43:a1:4a:
94:b0:1d:be:d7:d6:73:06:08:84:8c:69:b3:90:0f:82:63:25:
7b:88:df:e9:98:54:a5:7e:8e:80:66:0c:65:2f:c1:63:13:60:
9b:b8:58:0e:cd:23:c5:72:ea:ba:84:57:69:59:8b:7c:09:0e:
c0:7d:e1:2c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 4 14:22:26 2026 by rpki-client