
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/E64F585A060111F0BCBC7237C4F9AE02.roa
File: E64F585A060111F0BCBC7237C4F9AE02.roa (raw, json)
Hash identifier: MTYW3WZ5bmFwcXuZyuU6mJSaDv2kg390mgtMrX2qGao=
Subject key identifier: 57:6C:6B:4F:DD:83:F3:B6:CE:B6:0E:B9:1C:E3:DA:55:45:FC:53:37
Certificate issuer: /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4
Certificate serial: 0C09
Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/E64F585A060111F0BCBC7237C4F9AE02.roa
Signing time: Tue 02 Jun 2026 19:22:55 +0000
ROA not before: Tue 02 Jun 2026 19:22:55 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 5065
IP address blocks: 45.126.84.0/24 maxlen: 24
45.126.85.0/24 maxlen: 24
103.18.228.0/24 maxlen: 24
103.18.229.0/24 maxlen: 24
103.18.230.0/24 maxlen: 24
103.18.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl
rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Jun 2026 18:58:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3081 (0xc09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBB5B, serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4
Validity
Not Before: Jun 2 19:22:55 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a1f2d8f-ec1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:93:59:43:80:26:cd:33:39:1c:8d:70:44:96:
3e:02:8f:93:db:5d:8d:31:6d:c4:6b:24:ae:48:0d:
dc:e0:7c:42:a9:f9:57:53:71:f5:c5:f8:dc:3b:e4:
44:5c:12:21:ef:de:26:30:c7:13:40:e5:93:8c:bc:
78:b9:7a:73:ac:c2:93:0c:15:15:f8:c7:a1:17:d5:
47:a3:10:c8:2e:32:ae:8f:e1:d7:bc:53:79:7a:83:
92:7b:c5:09:f7:90:39:f4:c6:ac:16:e0:0a:66:7a:
33:75:4d:d9:2e:f5:d7:2b:7d:9d:a2:de:23:8f:5c:
0b:56:28:fe:b5:4f:10:3a:fa:b9:a0:95:be:7c:79:
f2:33:02:7c:32:e0:22:9f:90:00:76:be:3f:2a:8d:
36:12:cb:af:93:e1:2e:0c:ac:a2:2d:ad:4b:0b:ed:
81:3f:79:d7:47:57:b8:d0:45:72:d3:23:b0:bc:4d:
51:f6:65:d3:c6:42:60:35:04:13:c9:95:6b:a6:26:
b5:69:e4:dc:c6:b6:b4:7a:7d:17:29:32:3e:03:4e:
39:63:8c:79:cd:03:0a:0d:61:7c:c3:43:20:94:fd:
d7:56:59:70:49:1a:ab:41:e6:c0:b7:67:0a:f8:53:
b6:de:eb:ed:0e:4f:2f:82:a1:be:72:a9:c0:94:09:
a6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6C:6B:4F:DD:83:F3:B6:CE:B6:0E:B9:1C:E3:DA:55:45:FC:53:37
X509v3 Authority Key Identifier:
keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/E64F585A060111F0BCBC7237C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.126.84.0/23
103.18.228.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:d0:3b:de:ff:60:23:f2:5b:b7:ca:8b:c5:aa:5b:9b:16:0a:
f1:a9:2e:17:f4:a4:b8:6a:ed:30:b3:80:1b:11:30:40:3c:6f:
f8:e1:d7:8f:4a:53:bd:af:56:72:8e:66:00:b6:b4:b0:d8:c8:
85:31:6b:2f:c1:c8:62:d4:da:6b:0b:aa:6a:54:4e:70:13:e1:
f7:bb:dd:56:c0:3a:2d:39:02:03:3d:8d:f1:cb:41:b5:4e:1b:
cc:0a:30:58:2a:23:98:f9:a4:00:09:bb:45:20:02:ae:50:d2:
43:57:18:48:cb:59:69:53:e6:78:45:a6:29:06:2a:d6:c6:f9:
e6:ad:0e:f1:04:95:fc:17:8e:65:a2:cc:bf:b0:c5:cb:d2:2a:
8b:45:c8:a2:e7:d2:45:44:fa:04:fe:20:cc:70:44:19:90:e9:
aa:77:3d:b1:a9:af:a5:a9:54:7e:40:f0:99:72:c7:d8:b2:a7:
8e:65:b5:72:be:a6:ec:13:38:ba:3e:c2:fc:05:d4:8f:35:8f:
69:9b:62:94:4d:6f:b7:22:d2:07:15:4f:be:70:d1:de:2c:95:
8e:46:bf:a7:0e:03:93:fd:0d:ec:56:22:85:65:b2:fd:8d:87:
fd:14:31:37:a9:8e:f4:df:5a:b0:a0:15:29:40:a8:90:0c:98:
e6:1f:5d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 10:46:57 2026 by rpki-client