
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/5551B690BC2611F18E1A37534111F970.roa
File: 5551B690BC2611F18E1A37534111F970.roa (raw, json)
Hash identifier: iHdIx5XaEqK3qr1ho8BECYGGWY4JspohQGOjyI+UfjY=
Subject key identifier: 20:24:51:88:1B:BF:CD:43:DC:09:96:98:73:72:0D:F0:01:6F:E0:36
Certificate issuer: /CN=A91E3493/serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114
Certificate serial: DE
Authority key identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/5551B690BC2611F18E1A37534111F970.roa
Signing time: Tue 29 Sep 2026 16:53:45 +0000
ROA not before: Tue 29 Sep 2026 16:53:45 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 14618
IP address blocks: 199.247.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl
rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 23:13:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3493, serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114
Validity
Not Before: Sep 29 16:53:45 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6abbed19-c261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ce:38:fc:64:87:c4:96:83:f9:5d:35:a8:51:
1e:cd:7f:8d:37:ba:52:9a:fb:c1:5e:c1:d6:16:49:
49:42:25:f8:fb:44:f7:ba:8b:2e:cb:a0:d2:fc:c6:
b9:19:b1:4c:08:8a:82:26:6e:2c:72:f3:ce:e3:2f:
46:0c:f6:70:84:ea:bd:0e:3a:4d:fe:c4:c7:b6:db:
6a:e7:9f:cc:3d:1f:e4:38:72:5a:5a:05:6c:76:e9:
75:3b:df:d0:87:3b:1b:5f:f7:b9:53:7a:39:6b:ce:
f5:2e:ca:4e:88:0a:48:72:96:02:4b:d2:3c:20:86:
b2:eb:fd:1d:a5:06:1e:47:0f:a9:d0:b5:80:f9:13:
59:ac:c0:4d:3f:d9:42:49:b1:29:30:db:43:5b:3d:
62:8a:51:6a:8a:be:75:1b:08:2a:ae:f4:fd:2a:95:
3f:70:f1:1f:1f:f6:8c:02:4f:3e:d4:92:47:96:88:
cd:55:a3:2d:ee:42:4e:ee:ff:cc:3f:43:44:27:f9:
4b:4a:34:b9:a6:a0:ba:04:cd:3a:59:f7:9d:d2:62:
65:96:6a:b7:e9:0e:05:04:cb:2b:07:c0:e7:56:f9:
cc:83:79:75:46:38:64:32:09:0f:6c:eb:93:65:79:
01:bc:dd:f5:9f:d1:50:80:a2:94:7e:7f:b1:65:76:
a7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:24:51:88:1B:BF:CD:43:DC:09:96:98:73:72:0D:F0:01:6F:E0:36
X509v3 Authority Key Identifier:
keyid:31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/5551B690BC2611F18E1A37534111F970.roa
sbgp-ipAddrBlock: critical
IPv4:
199.247.171.0/24
Signature Algorithm: sha256WithRSAEncryption
91:b0:d2:09:53:ec:c7:9c:2c:81:ef:2c:25:15:48:62:a2:02:
fa:ea:9b:da:e6:b6:91:c8:c8:5e:7a:20:ed:53:f6:36:0b:d0:
6b:f7:4b:b8:03:8b:23:1e:23:e1:bb:d8:ac:83:bf:6b:b4:dd:
c1:a2:35:f4:32:78:e8:06:1f:07:4a:01:2e:98:c4:53:01:9e:
17:83:1c:6f:1a:45:b7:65:c3:8a:46:e8:a2:1e:8a:2a:f4:a1:
81:0e:45:7f:8f:5d:9b:a7:c5:75:87:89:14:ac:f8:67:09:bc:
d7:8d:53:c3:65:a5:2b:58:74:27:de:e1:d6:ed:cb:34:51:c5:
64:e8:8c:f4:a6:d9:e6:37:f9:60:82:b7:13:34:73:8c:97:82:
06:e3:4b:f0:09:2e:5d:95:40:4b:ab:96:1e:93:f5:82:b1:2b:
a6:67:35:39:55:db:9b:72:b3:46:92:d0:22:91:4e:c4:4b:22:
52:49:24:9b:14:31:1e:65:5e:8e:a9:cf:25:84:ae:ea:cc:5a:
ee:29:08:c7:09:26:18:55:15:0e:28:54:c8:80:0f:6f:cb:a8:
1e:96:40:11:91:5b:d3:fe:36:ce:b7:40:9a:90:db:10:74:cf:
86:7d:24:20:8d:52:a7:51:75:83:1e:8d:db:4c:ec:da:8c:cb:
a1:b0:1c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:39:05 2026 by rpki-client