
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/B97B11B2C84211F0A053E068C4F9AE02.roa
File: B97B11B2C84211F0A053E068C4F9AE02.roa (raw, json)
Hash identifier: 4qRFCjnxENmZCJsvaf8pCtTsmkbUQtbzT+9x0GNwtBg=
Subject key identifier: B8:1E:F0:79:1E:C0:46:0D:B2:A5:F6:4B:9D:21:C9:26:63:72:D0:52
Certificate issuer: /CN=A91CCDAE/serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A
Certificate serial: 3E
Authority key identifier: 2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/B97B11B2C84211F0A053E068C4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:59:26 +0000
ROA not before: Sun 23 Nov 2025 08:02:15 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 401701
IP address blocks: 82.158.224.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl
rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:12:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCDAE, serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A
Validity
Not Before: Nov 23 08:02:15 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a589ae-2094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:61:19:12:8e:82:7c:40:39:2a:b6:cf:83:0a:
e0:bd:4e:d9:c4:9a:5b:0c:2c:61:f9:de:d2:a8:e3:
33:f8:de:38:16:ca:87:e9:a4:82:62:6f:26:e9:fa:
ec:34:dd:06:18:3c:a8:9a:95:8f:79:d1:9b:4e:31:
d2:34:03:d1:09:08:b3:a8:51:a7:5b:7d:b0:31:e2:
0e:5f:db:d3:74:32:41:21:ee:ac:68:a5:03:51:ba:
d6:9f:e1:ea:5b:5d:9d:66:e2:63:b5:d4:7a:a4:6b:
d7:6d:6c:60:cb:ac:58:2e:47:37:81:56:43:24:63:
45:1a:f4:b7:cf:88:84:62:78:72:bb:66:82:8b:50:
9d:c6:32:b7:c0:d4:1f:84:b0:10:58:89:7b:a3:c6:
ee:b8:c1:4b:4e:7c:b1:2b:e1:9a:dc:b5:e3:0f:d5:
70:5a:e6:96:5f:f9:b6:98:53:d2:0e:67:a3:38:bc:
d5:8d:a3:be:13:a0:49:59:1d:2e:f4:cd:e0:ed:48:
5f:95:ec:b4:8a:cb:01:4f:c1:40:eb:10:1c:f3:a5:
cd:fe:05:e9:19:b5:f4:ba:08:79:90:0d:7a:18:68:
c7:ed:8d:b5:d3:61:2e:47:54:a8:e1:67:1c:66:33:
c9:79:d5:75:9c:aa:63:f2:d6:fb:e3:dc:69:a1:c7:
c1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1E:F0:79:1E:C0:46:0D:B2:A5:F6:4B:9D:21:C9:26:63:72:D0:52
X509v3 Authority Key Identifier:
keyid:2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/B97B11B2C84211F0A053E068C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
82.158.224.0/21
Signature Algorithm: sha256WithRSAEncryption
86:7b:3a:19:d5:6c:b3:60:79:7d:99:5f:4f:a6:16:48:98:ea:
72:09:7e:62:25:0b:18:c6:82:d3:9f:6e:31:db:6a:64:bf:cd:
08:a8:7c:9c:db:8e:10:5a:c7:89:21:11:dc:5d:65:de:9f:07:
6a:11:57:20:1c:1c:40:03:2d:08:05:00:78:e9:9c:10:1e:02:
51:a2:33:51:2b:28:29:97:fe:40:c4:46:a0:b2:f3:6b:4c:eb:
20:7e:8f:09:51:c2:59:86:ec:d7:9c:60:98:94:48:7d:e0:6d:
90:dd:a6:40:e9:f4:73:c1:ee:48:d6:5e:eb:9d:ca:b1:27:10:
50:30:9a:1d:b8:ab:7f:32:1e:b7:0b:2c:58:38:0f:23:79:a1:
9b:65:f8:24:2e:f0:4f:29:bf:42:3a:75:4d:72:8f:98:51:68:
ba:aa:73:f0:cd:1b:b2:58:d6:cc:c6:66:d4:c7:d2:38:5d:ad:
8a:0b:bb:23:80:15:ba:fb:46:66:b2:f7:ed:e4:42:b6:44:db:
d4:aa:47:e9:6e:3b:8a:c6:72:80:7d:36:d8:97:c7:ca:92:7e:
4e:3f:eb:79:de:ea:7b:35:53:1d:54:b0:33:f5:82:00:ec:43:
60:33:39:4e:f7:35:76:73:1f:5e:ec:8b:ca:56:f1:89:fc:22:
39:53:d3:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 4 17:28:36 2026 by rpki-client