
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/B9712F3A95FB11F1A9B800575611F970.roa
File: B9712F3A95FB11F1A9B800575611F970.roa (raw, json)
Hash identifier: x5BuCZTyVNZFBSc1/v493t+7C+Ef8YquC3PYrbla2xM=
Subject key identifier: 46:33:B7:E1:84:ED:BB:4E:88:7C:CE:B7:59:48:B9:97:9B:F3:0E:E8
Certificate issuer: /CN=A91E8556/serialNumber=2FBEEC118B53613E1542F33FFC36118E562D472E
Certificate serial: 75
Authority key identifier: 2F:BE:EC:11:8B:53:61:3E:15:42:F3:3F:FC:36:11:8E:56:2D:47:2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L77sEYtTYT4VQvM__DYRjlYtRy4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/B9712F3A95FB11F1A9B800575611F970.roa
Signing time: Wed 12 Aug 2026 03:13:01 +0000
ROA not before: Wed 12 Aug 2026 03:13:01 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 399468
IP address blocks: 114.119.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.crl
rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L77sEYtTYT4VQvM__DYRjlYtRy4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 08:13:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117 (0x75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8556, serialNumber=2FBEEC118B53613E1542F33FFC36118E562D472E
Validity
Not Before: Aug 12 03:13:01 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a7be4bc-5b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:33:f6:17:7d:b1:3c:22:34:05:d3:a7:3b:2b:
95:76:b8:78:fc:46:46:d2:51:a7:c4:16:6f:03:78:
3e:01:a5:1f:42:e3:0f:a6:ff:55:8a:2d:d6:e4:76:
e8:82:4c:dc:39:02:89:0a:7f:34:01:14:d9:a7:26:
e2:01:ac:d5:2e:dd:10:72:f7:52:53:7d:96:05:96:
d8:6f:ea:bd:ce:6c:40:5c:d2:86:fa:5f:0c:5b:f8:
ac:1d:20:f6:3a:c6:d2:6d:32:75:6a:5a:1d:cc:67:
68:8c:38:0a:0f:cb:49:8e:f9:01:a7:6e:f8:02:a3:
b2:15:7f:cc:26:3c:bb:2a:3d:32:70:1c:9f:88:6a:
ac:52:11:f8:ce:38:29:e3:fb:b8:49:76:6d:21:0e:
f8:44:73:3b:e6:94:c1:86:ea:c0:cc:1a:6c:75:1f:
e2:51:7a:4b:fc:af:b6:c9:6a:ba:48:11:c3:b8:ca:
a7:4e:a4:f1:46:c8:77:6a:63:7c:cf:47:8c:f0:ae:
20:48:a5:24:64:79:b1:5a:21:1b:a6:a6:74:94:7b:
64:95:cd:cf:0f:5f:64:e3:99:b1:d5:c4:27:95:68:
9e:33:ed:6a:86:30:10:cc:16:42:18:ad:33:82:f8:
20:f9:5a:0c:d5:b3:0a:d6:6e:e2:08:69:08:ed:8b:
90:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:33:B7:E1:84:ED:BB:4E:88:7C:CE:B7:59:48:B9:97:9B:F3:0E:E8
X509v3 Authority Key Identifier:
keyid:2F:BE:EC:11:8B:53:61:3E:15:42:F3:3F:FC:36:11:8E:56:2D:47:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L77sEYtTYT4VQvM__DYRjlYtRy4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/B9712F3A95FB11F1A9B800575611F970.roa
sbgp-ipAddrBlock: critical
IPv4:
114.119.200.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:f3:2d:ad:11:5d:64:9a:b2:d0:17:d1:1c:11:a9:7e:43:91:
0b:2c:43:22:85:4e:c8:5f:40:e1:3e:3f:77:3d:1e:6b:72:fb:
95:80:f9:2d:29:91:3b:67:6e:2f:87:5d:44:5e:bd:82:7e:cc:
09:cb:53:6f:42:77:be:83:ff:83:2e:77:d5:a7:ef:41:81:d5:
1a:6e:e8:aa:4a:7f:4f:d4:4c:e9:d6:a1:4c:2c:19:de:0e:3d:
ed:58:48:7e:58:a2:7c:ce:3c:13:42:a6:ae:72:6e:30:ae:b8:
13:95:01:f6:26:5e:63:2e:f2:20:d9:8c:c3:99:96:36:8d:14:
cd:a2:cd:6a:72:9e:1e:f2:f4:b7:51:0e:9b:e3:ca:4f:73:e2:
a1:9e:dd:19:b5:9c:3c:c4:b7:2b:d6:1d:51:f1:51:a0:71:0f:
de:b1:21:f0:ec:6b:49:1b:13:f5:cd:ea:36:e0:8f:04:c3:4e:
2a:f6:05:46:47:ef:7d:58:51:59:48:76:f8:b2:cc:e4:ca:70:
cd:71:25:0c:94:77:1f:34:bb:bf:05:59:07:8a:13:cf:18:e2:
16:ff:e4:74:b5:4e:a7:6d:69:33:35:d9:5d:2f:64:25:e9:8f:
1d:0e:98:7d:ef:56:1f:8e:6d:39:08:2f:cc:46:4b:8a:c9:80:
a3:32:c8:36
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:40:17 2026 by rpki-client