
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/8C8CCAC624B311EFB8698E5CC4F9AE02.roa
File: 8C8CCAC624B311EFB8698E5CC4F9AE02.roa (raw, json)
Hash identifier: F/XQxEFwGQsBKLmtNj03euu07+zMmvl3Qe8G7hy1VMQ=
Subject key identifier: B3:7B:E9:56:5D:DE:F8:83:6D:3F:FD:EC:E8:C8:B9:0B:5A:4C:DC:A9
Certificate issuer: /CN=A91E1022/serialNumber=76AA20CA24A6C2E328876D004D1314E117A6E7D0
Certificate serial: 0285
Authority key identifier: 76:AA:20:CA:24:A6:C2:E3:28:87:6D:00:4D:13:14:E1:17:A6:E7:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqogyiSmwuMoh20ATRMU4Rem59A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/8C8CCAC624B311EFB8698E5CC4F9AE02.roa
Signing time: Tue 29 Sep 2026 02:52:51 +0000
ROA not before: Tue 29 Sep 2026 02:52:51 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 398704
IP address blocks: 45.123.192.0/24 maxlen: 24
103.192.36.0/23 maxlen: 23
103.192.36.0/24 maxlen: 24
103.192.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/dqogyiSmwuMoh20ATRMU4Rem59A.crl
rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/dqogyiSmwuMoh20ATRMU4Rem59A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqogyiSmwuMoh20ATRMU4Rem59A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 02:26:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 645 (0x285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1022, serialNumber=76AA20CA24A6C2E328876D004D1314E117A6E7D0
Validity
Not Before: Sep 29 02:52:51 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abb2802-f866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:43:2f:68:cb:e1:aa:5e:ea:1d:2b:1e:f2:
15:97:48:b5:98:6f:d6:27:a5:6a:4f:4f:22:5e:ea:
0c:2c:5a:e2:50:7f:24:51:a4:4a:91:22:dc:cd:2a:
49:02:5f:98:03:85:f3:04:fc:2c:4e:31:5e:93:82:
26:e8:11:b5:96:a3:86:7f:52:c5:03:57:ea:79:c8:
15:6f:de:fd:39:51:d2:56:4a:6a:69:59:fd:ed:de:
a1:6a:58:38:e4:0e:5b:b5:93:b6:de:83:63:8e:bf:
92:97:3c:e0:c3:b2:f1:42:5f:cb:05:dd:41:e7:d2:
ff:74:78:74:3e:48:ff:4c:b1:53:9e:80:34:53:b9:
b5:d3:91:7c:2a:2a:51:90:78:3e:1b:29:5e:6b:dc:
ea:f8:d2:48:1d:cb:df:51:68:cf:d4:e3:c7:91:2b:
7b:51:51:55:a2:5f:b1:8a:be:e5:7b:aa:85:44:64:
96:38:d5:41:f8:12:54:95:98:a7:37:46:49:a6:c7:
1d:f2:b8:4f:6c:54:ed:21:f2:46:e8:d4:5f:f4:ee:
a3:49:1c:a6:1e:c7:d4:db:c4:df:c4:45:a1:12:f9:
a1:25:a4:71:62:f8:be:e4:66:7d:0d:4e:2d:9a:d2:
8e:37:5c:e8:c0:76:65:64:e8:31:4d:e4:94:7a:68:
c0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7B:E9:56:5D:DE:F8:83:6D:3F:FD:EC:E8:C8:B9:0B:5A:4C:DC:A9
X509v3 Authority Key Identifier:
keyid:76:AA:20:CA:24:A6:C2:E3:28:87:6D:00:4D:13:14:E1:17:A6:E7:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/dqogyiSmwuMoh20ATRMU4Rem59A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqogyiSmwuMoh20ATRMU4Rem59A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/8C8CCAC624B311EFB8698E5CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.123.192.0/24
103.192.36.0/23
Signature Algorithm: sha256WithRSAEncryption
15:e5:c6:c7:f0:ff:42:db:53:2b:7c:90:e2:23:65:05:8c:4d:
7c:42:ce:20:e8:41:16:4b:41:33:0e:da:34:ed:d9:fa:f4:eb:
8f:4a:49:39:fb:1c:a8:d2:75:44:3c:15:ec:d8:95:3d:4f:5a:
37:6b:fa:2d:ad:6b:73:96:84:06:75:5b:b8:51:2a:67:91:93:
5f:85:72:c0:fe:e8:f2:e8:2f:56:d5:29:83:7a:bf:fa:cf:37:
89:db:3d:e6:6f:05:5b:39:bd:72:ba:be:a3:df:c8:88:7d:ba:
14:bb:67:c6:97:e9:13:d4:a5:c3:ef:ca:95:ea:af:41:ef:f1:
fd:04:44:28:5a:4c:25:58:8a:34:98:27:01:d2:b9:ec:8d:9a:
ff:b6:44:45:87:4c:d3:72:7f:a9:2b:0a:ae:61:8e:db:74:61:
54:74:6f:3c:34:3f:24:83:00:cc:02:8a:63:19:a4:a0:32:29:
28:78:78:26:75:4c:4d:ad:97:a6:b5:34:b2:1f:51:9f:61:50:
83:71:1c:f8:bb:98:59:f7:ad:c7:1e:23:4b:d1:8a:63:39:a3:
70:75:fc:41:a9:aa:34:4f:04:8d:db:53:38:d0:24:34:cc:0c:
84:2e:25:db:1f:14:52:28:f6:e7:e8:e1:98:b5:26:de:e3:d4:
60:ab:fa:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:15:02 2026 by rpki-client