
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/B2306182F3F911EAB9D11D26C4F9AE02.roa
File: B2306182F3F911EAB9D11D26C4F9AE02.roa (raw, json)
Hash identifier: 0N8+UfH8NuaA9qjC81UIdofpt+ivc/1OzKhyAWBOmEo=
Subject key identifier: 3D:50:F9:F7:CE:81:64:F1:38:A8:35:DF:24:51:77:7A:C2:E8:E6:84
Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8
Certificate serial: 3562
Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/B2306182F3F911EAB9D11D26C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:21:55 +0000
ROA not before: Fri 08 Aug 2025 15:21:00 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 14618
IP address blocks: 116.214.100.0/24 maxlen: 24
116.214.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl
rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Mar 2026 14:53:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13666 (0x3562)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEAA2, serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8
Validity
Not Before: Aug 8 15:21:00 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a467a3-4109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b6:73:33:b6:0e:18:35:71:62:8e:57:26:bb:
e2:5c:79:ac:7a:22:07:61:e0:a5:92:af:d0:d9:ab:
91:db:a8:df:8f:90:68:2a:59:65:5a:3a:32:c7:31:
ad:ac:16:93:ae:55:1c:ca:5c:0b:bb:66:dc:49:30:
66:d6:3b:ba:26:c6:a3:01:0e:80:1c:ae:c9:4d:e1:
6f:fa:3a:ff:88:05:42:07:66:f9:3e:3e:1e:59:9c:
47:66:58:85:2f:2b:a4:99:79:40:df:bf:d6:5b:26:
26:c6:51:2c:25:d7:32:b5:26:67:d9:39:a2:a3:56:
cf:f0:5e:c9:5f:2c:f5:51:51:36:f3:ed:43:90:d3:
09:bb:1b:25:ff:d8:c7:5c:29:cc:4f:2e:29:99:2c:
b2:a0:c4:c0:1a:db:1c:32:c5:80:f1:da:7c:55:c4:
d7:54:38:90:50:8a:5d:49:03:db:24:5c:e6:99:72:
65:e3:ae:5c:c9:f4:9d:a6:42:eb:4a:25:a0:2c:53:
97:fd:8b:1d:46:aa:b1:27:a8:1a:f4:3a:55:88:36:
85:f3:56:b0:ba:92:9f:5e:c1:a6:79:ca:2b:0c:06:
0b:1c:90:db:ea:5c:51:e6:76:fb:9f:f0:31:c3:f0:
4a:ee:0e:b1:92:75:83:6e:4c:91:17:6c:bc:b1:a3:
d3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:50:F9:F7:CE:81:64:F1:38:A8:35:DF:24:51:77:7A:C2:E8:E6:84
X509v3 Authority Key Identifier:
keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/B2306182F3F911EAB9D11D26C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
116.214.100.0/23
Signature Algorithm: sha256WithRSAEncryption
58:72:4c:03:29:a6:34:bc:ac:36:50:1e:29:03:12:49:bd:eb:
08:ce:2d:08:6d:5b:39:e9:64:e9:a6:01:aa:ec:a2:d7:36:40:
91:83:ae:ea:2b:92:14:26:22:11:f9:97:52:60:f6:77:e7:f7:
fc:27:85:f2:eb:06:c4:76:fd:ff:e7:e5:28:87:a6:e0:7b:d5:
b0:0e:a0:ec:ab:b0:22:86:24:d8:e5:fb:f0:a6:d5:78:29:03:
12:68:17:8d:96:f1:aa:9d:5f:1a:d0:0b:8f:06:f1:2e:19:ff:
b9:56:26:0d:66:98:3f:85:e4:e7:16:ea:3e:12:bc:18:92:8d:
9c:7b:25:09:79:c6:2c:58:10:fa:34:6a:7b:45:83:22:9e:e0:
eb:1d:7e:de:7d:ea:7f:9e:66:9a:67:3b:41:f1:1a:34:3c:6c:
92:4e:e9:cb:a6:05:1e:40:4e:02:f8:50:5b:87:e9:60:e6:05:
64:51:94:b2:d2:d5:2f:6f:76:8e:97:5b:43:ac:d4:50:0f:50:
f2:d9:d5:cf:ba:8c:26:d1:18:ed:72:60:20:e2:d4:e0:5f:94:
1f:b6:e8:7c:19:92:f6:ce:2b:bd:4d:53:92:01:8a:0e:4b:c2:
65:9b:09:84:31:52:a5:93:d9:e6:85:9e:d0:28:fa:04:ce:60:
50:35:eb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 17:51:44 2026 by rpki-client