
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/5415D510C68E11F0BC83973CC4F9AE02.roa
File: 5415D510C68E11F0BC83973CC4F9AE02.roa (raw, json)
Hash identifier: aIjDJK06Sydwpu827vCSPgKtmMJrBazpUw0z+Gr+fHs=
Subject key identifier: 5B:CB:12:67:49:95:CB:4F:0A:6A:47:A3:07:7D:57:34:D0:94:A4:1E
Certificate issuer: /CN=A91D260A/serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E
Certificate serial: 0139
Authority key identifier: D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/5415D510C68E11F0BC83973CC4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:40:43 +0000
ROA not before: Fri 21 Nov 2025 03:58:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9650
IP address blocks: 192.88.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl
rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 05:04:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313 (0x139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D260A, serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E
Validity
Not Before: Nov 21 03:58:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a5854b-05b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:44:e0:c1:f6:64:09:83:94:0c:29:4b:c6:d7:
59:10:2a:5b:25:64:37:ad:42:e3:9c:82:3a:f3:a7:
a7:80:4f:a4:4b:9a:5b:f0:8c:41:db:9c:ab:58:bc:
dc:d7:fc:c4:f3:6e:16:2d:68:6c:12:69:e3:c2:83:
2e:2e:14:67:5b:3f:57:c2:fe:6b:6d:92:bf:1d:69:
23:6a:3b:47:22:fa:ea:e9:19:40:ae:c0:cb:d5:a0:
73:4c:30:dd:7c:aa:95:07:64:7b:71:1d:5f:bf:1a:
82:41:02:ee:21:c3:2c:02:0b:62:e2:7e:13:69:73:
79:5a:84:3e:04:ab:50:59:47:7a:de:69:74:d3:50:
ce:d6:f2:a4:0d:9f:2d:dc:31:1f:20:d6:74:df:48:
f2:ee:90:f6:7f:8f:e4:39:5d:cc:5e:8c:25:59:19:
55:df:36:97:ab:85:1b:82:ab:dd:32:d6:51:67:12:
90:25:a4:ea:0c:8b:4c:89:73:00:bf:b7:3a:45:09:
05:ec:7d:fb:f3:d6:27:a1:0f:45:9e:47:eb:ab:2a:
e9:70:9e:9d:c9:24:c2:a4:05:5c:d2:40:2e:61:9a:
79:a3:15:9d:58:a1:61:1e:60:44:41:03:b8:ad:c9:
1d:81:d6:05:d8:60:a4:05:12:95:36:95:07:45:3d:
1d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CB:12:67:49:95:CB:4F:0A:6A:47:A3:07:7D:57:34:D0:94:A4:1E
X509v3 Authority Key Identifier:
keyid:D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/5415D510C68E11F0BC83973CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
192.88.7.0/24
Signature Algorithm: sha256WithRSAEncryption
77:2b:0d:81:71:35:f2:61:01:c7:aa:26:9c:77:09:73:89:d5:
b8:45:7b:cd:9e:ed:0a:44:9a:88:df:b5:34:5e:4a:ab:fc:58:
52:34:4f:00:ae:3b:17:b6:0e:76:07:bf:65:dc:ac:35:68:dc:
c5:f8:ff:b1:a8:ae:00:e8:46:40:04:ce:a7:da:b5:61:0f:51:
22:9a:6f:56:2c:a2:20:91:2b:4a:d5:da:da:f2:7c:36:e2:3c:
42:5e:a2:61:f7:55:0a:11:c9:fa:9e:f5:59:fd:83:2b:66:e5:
30:49:a9:43:85:f6:e9:7f:58:b4:70:39:17:9d:75:54:09:83:
f0:77:8b:0f:2e:02:b0:be:3a:9d:37:87:3f:b7:fb:e9:84:65:
2d:75:6e:28:13:9b:80:27:6f:c6:28:0a:7f:0c:99:ce:46:74:
a1:20:2c:9c:9f:db:3d:f0:3b:d5:59:3f:fd:86:c6:5c:fe:b9:
9a:1e:bf:b4:0d:a0:00:67:12:ae:29:64:9b:94:50:ab:b2:e1:
43:e4:73:85:00:30:6c:13:f1:d6:6c:87:c4:9e:5f:a9:e7:a1:
44:fa:13:0f:40:30:15:bd:04:66:20:45:e8:ea:96:d3:02:35:
1f:ef:3a:82:18:7c:98:ec:da:21:0e:6b:f0:ce:55:3a:6a:96:
f1:c6:0b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:04 2026 by rpki-client