
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/AEA7C9C0818911EA81577016C4F9AE02.roa
File: AEA7C9C0818911EA81577016C4F9AE02.roa (raw, json)
Hash identifier: zQccTnouDv5A6wclfHfEY6cMmKILAn1V1UJrrTmuOMo=
Subject key identifier: D7:1B:61:42:04:DD:A0:80:BC:A4:A3:C1:22:79:43:CB:70:98:BB:DD
Certificate issuer: /CN=A91D1691/serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51
Certificate serial: 197A
Authority key identifier: DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/AEA7C9C0818911EA81577016C4F9AE02.roa
Signing time: Sat 08 Aug 2026 16:23:28 +0000
ROA not before: Sat 08 Aug 2026 16:23:28 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 45352
IP address blocks: 212.8.230.0/24 maxlen: 24
212.8.231.0/24 maxlen: 24
212.8.254.0/24 maxlen: 24
212.8.255.0/24 maxlen: 24
212.92.102.0/24 maxlen: 24
212.92.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl
rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6522 (0x197a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1691, serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51
Validity
Not Before: Aug 8 16:23:28 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a775800-b337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4d:bf:83:84:a0:e8:5a:c2:c0:de:45:98:62:
18:22:29:13:86:94:8c:9b:92:85:9c:c2:d3:ff:fa:
05:d3:a2:38:ab:ad:37:ba:28:97:c5:b2:d6:20:e1:
18:0a:f2:c7:a1:fc:82:12:52:e1:84:c5:90:33:bf:
81:6e:44:6c:d9:ba:f1:11:03:fa:7f:aa:6f:b2:97:
3c:10:ef:60:67:64:36:3e:f0:a4:81:af:cb:27:40:
d3:bc:75:a2:48:fe:04:5f:91:2e:cd:70:d9:da:7f:
a2:82:76:f7:14:9f:26:84:f2:ce:cb:71:87:b1:ed:
e4:ec:e5:7f:74:ab:82:f5:13:ce:70:0a:44:a5:26:
6a:9f:7d:06:d5:f6:98:64:bf:53:a0:3f:fd:1b:7b:
62:88:66:e8:e8:21:43:a5:d0:2a:c2:b5:c6:2d:a7:
33:7a:24:6e:88:bf:b6:5d:c0:35:1c:ff:93:91:71:
39:f0:e5:fc:54:58:d2:6d:d6:61:7f:88:6b:2c:ff:
36:b7:c4:d1:79:d1:99:38:4c:0a:14:b4:f3:96:bf:
59:45:0e:5f:ef:fd:42:35:15:e3:05:5a:66:91:6f:
56:e8:ef:6f:58:78:1c:74:11:e1:c2:8c:8a:12:07:
03:9e:38:97:56:32:31:c1:8f:db:b9:c6:50:d5:87:
cc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1B:61:42:04:DD:A0:80:BC:A4:A3:C1:22:79:43:CB:70:98:BB:DD
X509v3 Authority Key Identifier:
keyid:DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/AEA7C9C0818911EA81577016C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
212.8.230.0/23
212.8.254.0/23
212.92.102.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:c4:ef:9e:c3:ee:ff:c2:31:35:af:f4:ce:0f:f6:86:d0:d3:
74:e4:4c:b3:7f:0b:ea:6d:1e:c3:a1:a8:a0:ea:eb:74:d1:9e:
0a:1f:96:f7:af:16:67:16:b4:1f:2a:2e:d8:a9:1c:e6:d1:92:
66:e8:e4:54:c4:cc:4e:26:f1:49:39:01:86:65:0e:2a:82:0b:
d9:cd:b0:8b:9b:91:27:0b:8d:1f:05:be:25:c9:16:e9:19:3d:
e4:0c:3e:e6:ac:aa:b2:d0:24:0f:0d:5a:e1:c0:13:81:42:0b:
50:52:6d:f4:ae:bf:99:8b:af:b2:ce:7f:d7:7f:c5:5b:be:72:
91:5e:3c:ac:31:ba:4e:0b:af:e0:c2:6b:4b:1f:de:a9:e8:51:
ba:67:52:70:64:ac:f4:11:5d:79:92:50:a9:ce:09:c0:2e:08:
27:9a:ef:e5:67:b3:4a:74:1d:0f:fa:70:39:e0:f7:4a:51:c6:
ff:92:db:0b:81:7e:f5:dc:7b:02:43:8a:44:da:b2:68:93:a7:
92:5a:a5:f5:fa:da:9b:73:51:70:41:18:4f:55:09:bc:9f:11:
53:2e:ea:83:62:3e:fe:79:87:c8:25:f5:32:8c:d1:02:29:08:
90:49:ea:5b:60:e3:6a:7e:47:35:8f:a9:6b:05:ed:72:e1:fb:
50:06:93:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:54:39 2026 by rpki-client