
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/09F2A296A02E11F08BC71221C4F9AE02.roa
File: 09F2A296A02E11F08BC71221C4F9AE02.roa (raw, json)
Hash identifier: SOUc2IXOvl/L1pMPWSJBgclEArQVhHSL8F26Jssjy60=
Subject key identifier: 05:B4:3D:86:AD:BF:BB:5E:54:DD:F5:32:B1:C1:7C:66:0E:B0:DD:74
Certificate issuer: /CN=A91CEE6D/serialNumber=224721876A11E2D3A4B98B21BC84F78E64FEC846
Certificate serial: 55
Authority key identifier: 22:47:21:87:6A:11:E2:D3:A4:B9:8B:21:BC:84:F7:8E:64:FE:C8:46
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/09F2A296A02E11F08BC71221C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:44:58 +0000
ROA not before: Fri 03 Oct 2025 07:53:24 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 38083
IP address blocks: 134.7.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.crl
rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 07:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEE6D, serialNumber=224721876A11E2D3A4B98B21BC84F78E64FEC846
Validity
Not Before: Oct 3 07:53:24 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a5a26a-9f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2e:e4:3b:9b:e8:56:bb:46:cf:a4:22:70:34:
16:6c:a5:dc:cb:50:09:b5:24:85:da:76:d4:57:4e:
7b:77:3e:56:96:34:05:73:fa:e4:d5:8b:81:84:88:
a5:5a:3f:3f:03:20:72:f5:05:3d:39:03:a9:52:bc:
0a:3a:2c:6b:f4:a0:fd:71:51:1d:a5:0f:3c:7e:19:
c3:88:ad:19:d4:b2:01:bc:eb:b2:a5:89:f9:68:e0:
75:7f:11:bb:3a:fb:ce:23:ed:b8:e0:b0:4c:b5:85:
3c:ae:8c:7b:94:d1:87:8f:5b:0c:b6:e4:47:81:5c:
39:4a:c3:2e:68:c6:d0:d4:1c:3e:b2:4d:43:f5:a8:
55:bb:60:1a:e1:66:27:e7:48:d4:7a:6e:ae:23:1a:
af:cc:80:9c:3d:88:11:10:fc:46:29:5e:ee:b6:54:
54:fa:0b:ec:69:f5:b2:bc:db:41:32:86:fe:0d:9d:
43:32:14:e3:34:b5:0f:9d:2a:b2:08:2b:5a:c4:7e:
0e:15:7c:8b:a5:de:44:d7:06:57:c8:6b:79:ea:3c:
35:b2:f7:ec:2f:99:75:4b:93:f0:c5:bd:6c:d3:43:
ba:f5:20:a4:25:2a:fe:72:9f:87:80:7c:19:44:68:
3f:59:c6:ca:04:86:bf:d1:aa:e8:3a:c9:27:18:8b:
64:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B4:3D:86:AD:BF:BB:5E:54:DD:F5:32:B1:C1:7C:66:0E:B0:DD:74
X509v3 Authority Key Identifier:
keyid:22:47:21:87:6A:11:E2:D3:A4:B9:8B:21:BC:84:F7:8E:64:FE:C8:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/09F2A296A02E11F08BC71221C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
134.7.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0e:82:04:f3:a3:a1:75:95:03:66:af:38:2f:01:e0:30:00:cb:
d7:9d:a9:a1:d8:c9:83:fd:d6:88:e9:55:f0:63:d1:33:7c:09:
52:90:d8:e1:9f:4d:e6:0f:dc:af:64:0e:28:fb:f8:ea:5a:3f:
bb:9d:90:71:b9:36:d8:25:3e:46:ec:c7:99:e8:05:60:f7:3f:
df:88:c8:c6:9b:c3:f4:69:9e:dc:26:1a:88:38:04:53:c6:c5:
af:a5:9b:cc:f4:60:16:9f:4d:d1:42:b3:b5:ce:51:99:09:16:
7b:78:28:28:29:36:16:c6:8d:d3:5f:31:b7:52:66:e3:6a:cc:
d2:c6:1c:c8:a1:21:2a:1b:da:5c:45:99:38:39:94:ac:47:77:
ab:6f:20:83:bf:20:82:9b:77:ce:46:f2:52:b5:b4:8b:3d:68:
50:e6:1b:84:d9:07:42:fa:db:e2:8e:27:1d:ef:97:4c:7c:7e:
b8:12:1b:af:5b:a2:e3:b6:9d:eb:35:84:34:28:fc:fc:4e:b7:
9e:2a:13:88:26:b8:05:97:ad:53:d6:fb:7f:28:d2:e4:d9:c7:
31:c0:a4:2e:ce:c8:8b:4d:0d:38:f1:95:65:be:9a:19:11:36:
60:70:e0:92:62:f8:2f:f7:6e:8d:13:9d:ce:0c:c2:59:26:14:
ff:f4:a6:12
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:16 2026 by rpki-client