
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9D8295BE2E5111F1BDCC7CFB97833773.roa
File: 9D8295BE2E5111F1BDCC7CFB97833773.roa (raw, json)
Hash identifier: xtVOmi9fr1vP0neC3ym9m1tf5wYAPnM7AR6VSuRSgYY=
Subject key identifier: 24:4F:50:FC:6F:D4:F2:54:5E:70:9A:0C:A7:47:E0:8A:F1:1E:EE:34
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 2D46
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9D8295BE2E5111F1BDCC7CFB97833773.roa
Signing time: Thu 02 Apr 2026 05:05:50 +0000
ROA not before: Thu 02 Apr 2026 05:05:49 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 22773
IP address blocks: 43.254.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11590 (0x2d46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Apr 2 05:05:49 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69cdf92d-2cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e5:bf:3f:de:26:44:ca:d2:c6:7c:5a:0c:85:
25:a1:ff:f9:b6:66:33:ec:2c:4b:bd:b7:5e:7c:39:
12:34:38:35:58:70:d0:e7:3a:d9:80:98:10:c5:e2:
92:0c:62:bb:53:d9:ae:20:4b:ec:63:08:a0:0e:2f:
fc:a2:c1:dc:15:6d:57:96:8e:d7:a4:b2:30:29:15:
a6:f1:04:58:9e:50:fb:e1:fa:a1:ad:fd:e0:44:c9:
fb:da:fa:53:86:ed:2f:9b:3b:02:5e:69:22:76:cf:
e7:4e:b5:58:f3:c6:58:b1:d0:f6:03:e0:d6:30:52:
cd:6a:d2:32:35:0f:c7:07:78:24:12:25:85:76:95:
aa:eb:3c:70:6e:22:53:26:ee:cb:cf:fc:bb:26:2f:
4a:6a:a0:d9:86:4c:b5:cb:21:b3:76:bd:df:68:c6:
fd:88:c4:61:0a:8a:53:65:68:e3:88:78:fa:45:f1:
6d:da:df:08:0c:4e:2f:04:6f:48:59:31:5e:5c:2a:
79:3b:57:0e:5e:ca:6f:b6:0a:5b:88:40:2c:f6:ef:
6d:ee:ea:79:48:75:bd:cc:67:27:29:ce:cf:2d:c5:
9d:f2:c8:82:21:84:8f:8f:0c:4d:66:04:f7:db:47:
06:b9:16:db:0d:44:b7:99:d3:3d:86:02:89:4e:69:
4a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4F:50:FC:6F:D4:F2:54:5E:70:9A:0C:A7:47:E0:8A:F1:1E:EE:34
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9D8295BE2E5111F1BDCC7CFB97833773.roa
sbgp-ipAddrBlock: critical
IPv4:
43.254.12.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:aa:7d:c0:17:21:6a:ce:de:87:c2:79:e1:f8:8b:1f:6e:23:
f8:85:3e:fe:7a:a1:20:a5:c3:a4:14:1d:61:9c:6f:93:fa:be:
c6:45:74:df:33:56:6c:d6:ba:a2:3e:18:34:b6:78:60:b7:4f:
f8:e4:d1:11:c2:10:aa:85:3b:c8:a1:3c:3c:0e:13:bc:9e:fe:
86:bb:a8:da:ad:ad:b7:54:6d:bd:f8:4b:97:73:b1:2b:43:a3:
d1:18:16:dc:32:76:52:86:44:71:80:14:fc:ea:31:fa:52:d0:
b2:76:98:94:69:78:6d:1c:34:85:fe:4f:a1:e8:bb:dc:18:54:
47:0d:d1:06:06:17:08:17:9f:08:4f:fa:bf:6e:41:65:82:f9:
d4:9c:e0:ae:0a:b0:dc:45:46:99:91:b6:a3:bc:ca:ae:6e:79:
a6:d8:fc:f6:ea:f1:87:67:c5:63:f3:c7:ea:cb:19:92:9c:f1:
6b:41:d7:69:f5:bd:f9:79:51:a3:c2:e0:96:69:d4:f2:7e:02:
a7:95:34:6c:28:21:ef:b1:12:b3:3a:0f:eb:65:54:d2:f6:28:
97:5e:2b:6d:32:c6:e5:80:0d:5c:18:e6:8b:6d:78:76:c0:e1:
e8:dc:bf:87:93:a7:63:cd:5b:02:a5:ee:ab:ab:72:71:67:ab:
be:fc:88:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 15:21:45 2026 by rpki-client