
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/267CF8CC718D11F1BF4206FD8FA30FBC.roa
File: 267CF8CC718D11F1BF4206FD8FA30FBC.roa (raw, json)
Hash identifier: Bd1cYScj4fmX7aTgDmb2/IxRcYhuT72/NjHechdCWsI=
Subject key identifier: 7C:39:0E:7B:10:6C:C0:AE:3E:CD:94:83:34:72:20:E7:FA:61:A4:DE
Certificate issuer: /CN=A91DD92D/serialNumber=E5733B13FD86A23694702C3E28F3FF09497A9371
Certificate serial: 43
Authority key identifier: E5:73:3B:13:FD:86:A2:36:94:70:2C:3E:28:F3:FF:09:49:7A:93:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/267CF8CC718D11F1BF4206FD8FA30FBC.roa
Signing time: Fri 26 Jun 2026 18:30:49 +0000
ROA not before: Fri 26 Jun 2026 18:30:49 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 136396
IP address blocks: 163.128.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.crl
rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 16 Jul 2026 10:49:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD92D, serialNumber=E5733B13FD86A23694702C3E28F3FF09497A9371
Validity
Not Before: Jun 26 18:30:49 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a3ec558-2874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5e:f2:dd:96:f3:31:42:e4:66:53:bc:7a:3f:
33:35:b2:3e:d9:4a:41:8f:b7:cc:b5:bf:1c:90:aa:
9c:26:3c:d9:7d:ff:87:87:34:c6:49:56:30:69:25:
d9:b2:3c:7a:0c:91:b1:24:ac:03:56:cd:08:76:ea:
bc:b0:a6:61:3f:a2:02:88:5d:76:3d:ef:58:77:d6:
5c:c0:cf:39:7d:70:c8:55:b6:92:1d:5c:17:64:15:
41:3a:73:20:ba:3e:8a:fe:5a:d4:aa:4b:5c:9b:91:
3d:84:04:77:6d:d2:68:bf:29:21:82:ca:7a:4e:3c:
6e:ea:17:cc:e0:e6:32:15:6c:8e:1e:cb:4a:c3:45:
43:58:69:f0:61:bb:30:f3:dd:f3:7c:6b:c9:56:bc:
c4:c2:b0:07:9b:04:a7:74:f3:bc:4b:5f:73:72:11:
1d:37:90:f9:74:fa:93:06:25:37:11:96:d9:1c:67:
90:59:46:f9:3e:95:10:8f:f3:52:63:42:82:da:2d:
51:23:7c:99:44:b5:70:35:a2:93:15:2f:3f:b6:29:
d2:df:4f:24:8f:78:51:92:e4:2a:44:78:16:d2:be:
db:a2:a6:7e:cd:8b:6a:37:e5:83:5b:89:5e:36:35:
71:c3:13:21:2e:84:be:fd:bd:f3:73:5a:f7:2c:0f:
89:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:39:0E:7B:10:6C:C0:AE:3E:CD:94:83:34:72:20:E7:FA:61:A4:DE
X509v3 Authority Key Identifier:
keyid:E5:73:3B:13:FD:86:A2:36:94:70:2C:3E:28:F3:FF:09:49:7A:93:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/267CF8CC718D11F1BF4206FD8FA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
163.128.216.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:41:32:75:92:95:81:1f:ac:d0:42:f6:46:7d:73:62:e9:e2:
d1:29:9b:b1:7e:4e:42:18:27:a5:82:c6:95:05:b9:43:39:ec:
ff:3f:45:43:75:f5:cf:33:f5:df:88:f7:05:45:6e:a1:dc:45:
1d:8a:6e:1c:6f:ce:96:29:3c:c5:24:05:94:04:32:c2:68:33:
1d:f4:d4:4c:92:4f:2e:df:9f:d3:f7:81:a7:13:9e:30:af:97:
c5:2d:fc:a6:30:5e:46:b7:17:6c:82:a4:99:68:2f:40:59:53:
8f:d9:9a:8f:e0:f6:8a:43:62:9f:4f:9a:f3:6b:3b:87:7e:26:
08:17:97:eb:44:3c:f1:96:3e:52:87:40:a1:0c:d0:87:f2:aa:
fb:78:87:df:1d:3c:36:51:08:64:6e:de:c8:e2:bb:8c:c7:7f:
31:c6:17:c3:d6:60:fb:c7:c6:cf:52:ec:c6:ea:5e:83:53:57:
b7:96:8a:67:49:c1:20:9f:01:c6:60:32:94:e8:7d:7d:3a:ee:
89:a8:14:13:ab:3e:a1:65:73:10:17:9e:99:7b:f2:6a:d0:b6:
a7:7b:d4:14:4e:6c:16:fc:f6:3d:3b:6a:7b:5a:36:ba:33:4a:
0f:be:8d:8a:d7:7d:0b:4d:ad:e9:3b:6a:14:9d:9c:7f:91:3d:
36:cd:f3:b1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 10 21:40:06 2026 by rpki-client