
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/28D471BA06B611EBBBFD6B2CC4F9AE02.roa
File: 28D471BA06B611EBBBFD6B2CC4F9AE02.roa (raw, json)
Hash identifier: UDmShs5ErpF7g+pJqqDV/YHq/rjSCvUODX6lHEx/JXo=
Subject key identifier: A7:25:80:EA:7E:68:25:8D:0C:7C:5B:2B:CB:2A:4E:44:8B:9F:97:5A
Certificate issuer: /CN=A91DA13E/serialNumber=67F3B9FAAA10D20CB017F07FCC9A154D88B663A0
Certificate serial: 083C
Authority key identifier: 67:F3:B9:FA:AA:10:D2:0C:B0:17:F0:7F:CC:9A:15:4D:88:B6:63:A0
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/28D471BA06B611EBBBFD6B2CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:37:53 +0000
ROA not before: Wed 02 Jul 2025 22:01:24 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 55720
IP address blocks: 185.93.164.0/24 maxlen: 24
185.93.165.0/24 maxlen: 24
185.93.166.0/24 maxlen: 24
185.93.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl
rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 20:45:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2108 (0x83c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA13E, serialNumber=67F3B9FAAA10D20CB017F07FCC9A154D88B663A0
Validity
Not Before: Jul 2 22:01:24 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a408f0-2eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:32:4c:38:10:de:80:b0:8c:42:ab:8f:1b:a6:
45:09:30:a9:1b:20:4f:8b:54:06:5d:6a:ab:7e:4c:
29:f4:d6:68:be:fb:91:e1:10:2f:d7:d1:b8:57:97:
ef:f0:6d:16:a5:a8:c1:3a:2f:de:b3:d2:05:a2:86:
bd:0b:09:39:96:d6:f3:b3:7c:a6:c8:31:4e:29:c6:
86:9a:aa:99:b3:be:7e:d6:ea:a9:3f:0b:6c:4a:af:
5f:63:aa:4f:aa:ce:55:87:1d:ca:8c:26:b4:67:95:
cd:c1:18:55:74:ea:46:8c:4f:be:41:a3:6a:d3:79:
c0:7c:54:e9:30:b4:34:b3:1e:01:fb:7e:69:43:fd:
54:43:4b:c6:4b:de:be:2c:44:ca:5c:a0:25:1b:cd:
7a:c0:1e:03:58:28:26:02:1b:b9:5a:ee:10:76:54:
8e:21:6e:80:0a:43:5c:76:be:9a:69:f7:3c:5c:9d:
34:42:d2:f6:3f:cd:aa:28:80:ab:4b:f3:22:31:19:
de:64:04:8b:ed:34:a1:a9:0f:9d:16:d6:9b:54:4f:
0d:a3:d4:2f:cb:5a:70:eb:ed:63:c7:0e:0d:ce:93:
c0:2d:25:0d:17:24:2d:97:f3:14:14:86:cf:cc:8a:
58:34:da:85:88:d0:77:4f:24:3e:cb:4b:6e:2e:17:
ef:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:25:80:EA:7E:68:25:8D:0C:7C:5B:2B:CB:2A:4E:44:8B:9F:97:5A
X509v3 Authority Key Identifier:
keyid:67:F3:B9:FA:AA:10:D2:0C:B0:17:F0:7F:CC:9A:15:4D:88:B6:63:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/28D471BA06B611EBBBFD6B2CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
185.93.164.0/22
Signature Algorithm: sha256WithRSAEncryption
25:b8:55:ac:7e:47:d9:b2:b8:10:96:93:84:e4:ff:d5:36:03:
39:65:71:15:73:50:f1:d0:4c:e5:da:84:96:72:cb:d2:55:68:
37:73:46:20:8d:b1:3f:e8:61:66:60:af:09:03:0e:55:8b:f5:
d5:ea:b8:49:b6:4b:7e:df:d3:7c:94:67:66:75:5f:ce:f3:5a:
98:5a:38:c0:4e:6a:bc:0b:87:f7:e9:a2:0e:56:d1:d8:73:be:
57:60:9f:65:7b:85:84:e6:8b:29:e5:3e:51:23:f5:a6:2c:71:
c3:09:cc:6b:47:32:de:2b:39:95:b7:f6:9a:73:b5:13:e3:7d:
11:01:41:c7:f2:07:e4:14:0a:0f:f9:8f:f5:ca:44:eb:ed:17:
b3:05:bb:e8:66:32:43:d5:c0:4e:91:4c:43:b6:4c:be:35:6c:
a4:56:b0:9f:2b:86:f1:7f:ef:d7:c0:63:44:66:1d:48:3b:9d:
b9:a2:f4:6d:75:a5:59:ab:46:87:67:78:8f:4d:4b:ab:63:cb:
32:88:83:8e:ae:98:0b:3b:ae:f2:6f:87:0d:d3:d5:db:71:4b:
b3:68:ac:d4:9e:05:fd:ca:02:91:8a:36:bb:bf:fe:33:98:f2:
aa:a6:48:08:45:7f:b3:70:12:4a:d5:25:0f:18:0b:ec:9d:db:
0f:d3:4e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 13:13:28 2026 by rpki-client