
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/B88C85348C0411F196792E7B4011F970.roa
File: B88C85348C0411F196792E7B4011F970.roa (raw, json)
Hash identifier: og2FsMI+6JRvqJvW9dRUgtuwJbUJvfXWEyBkZvtW874=
Subject key identifier: 4F:54:98:DF:31:14:B0:80:8F:1D:5D:CE:3A:CC:73:7C:8D:FC:5B:72
Certificate issuer: /CN=A91EC167/serialNumber=369189ADA1995B020FAB86D77598C60C29747755
Certificate serial: 16
Authority key identifier: 36:91:89:AD:A1:99:5B:02:0F:AB:86:D7:75:98:C6:0C:29:74:77:55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpGJraGZWwIPq4bXdZjGDCl0d1U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/B88C85348C0411F196792E7B4011F970.roa
Signing time: Thu 30 Jul 2026 10:52:13 +0000
ROA not before: Thu 30 Jul 2026 10:52:13 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 154723
IP address blocks: 2001:df7:4a40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.crl
rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpGJraGZWwIPq4bXdZjGDCl0d1U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:38:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC167, serialNumber=369189ADA1995B020FAB86D77598C60C29747755
Validity
Not Before: Jul 30 10:52:13 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a6b2cdd-5fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:16:64:71:0a:0f:b0:8f:6a:6e:ea:54:60:7e:
c2:51:7a:72:ee:52:63:e0:ca:cc:71:2e:3f:c7:be:
05:54:5b:22:e5:99:68:03:ac:42:61:a7:6b:cd:c0:
66:e3:63:c9:f6:68:72:20:84:ed:bc:8a:5c:2a:78:
0b:f5:6a:d0:e8:59:04:a7:cc:33:1b:66:db:8f:3a:
2a:83:00:bb:1a:a6:54:77:9f:f5:c0:3c:17:26:ae:
d9:c7:0d:f7:3b:aa:ae:79:f8:05:94:a4:62:16:f8:
30:f7:8b:64:aa:f4:07:3a:e5:a2:b3:dc:53:24:15:
f8:2a:95:01:ba:5b:ab:84:72:ed:a5:41:55:cc:b8:
ce:81:de:db:da:08:22:54:c5:96:4d:7e:99:b2:55:
c6:e6:ca:34:44:0e:4e:04:41:91:c2:b0:e1:f7:a2:
ba:6f:81:8c:32:bf:20:5e:78:cd:67:8b:10:80:8c:
d4:83:1e:ca:c0:8f:82:27:56:ab:db:90:b1:65:f7:
5b:81:66:e0:3a:67:5f:65:d9:f3:83:ac:0b:dc:ce:
ca:92:74:22:f3:37:df:9d:b7:bf:dd:c7:ee:6e:12:
50:a4:a9:7a:c6:a9:d4:be:5a:4e:52:01:cd:7c:8c:
6e:ff:4f:be:80:93:0e:5c:84:b3:98:f5:eb:7b:39:
bb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:54:98:DF:31:14:B0:80:8F:1D:5D:CE:3A:CC:73:7C:8D:FC:5B:72
X509v3 Authority Key Identifier:
keyid:36:91:89:AD:A1:99:5B:02:0F:AB:86:D7:75:98:C6:0C:29:74:77:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpGJraGZWwIPq4bXdZjGDCl0d1U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/B88C85348C0411F196792E7B4011F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:4a40::/48
Signature Algorithm: sha256WithRSAEncryption
93:1e:f3:23:73:71:d4:da:32:65:35:df:2f:9d:64:81:ae:a7:
40:4e:ea:78:50:5b:7f:78:00:57:9e:b0:2f:1e:c6:4d:90:c2:
e4:00:00:8f:9b:5f:bb:ec:b6:52:ba:66:c8:82:c1:f0:a3:7b:
6b:dd:40:e1:e9:a9:2e:51:c4:89:ac:c9:6b:e9:3a:f8:56:2e:
a3:b4:ec:08:c3:e9:48:50:21:87:2b:27:d3:68:4e:5d:0a:3d:
39:af:73:04:ff:4f:ce:49:91:dd:68:e8:f6:0a:5e:a1:f4:65:
ea:15:d7:ac:04:b7:55:71:35:55:ec:ec:44:c7:95:fc:ee:8e:
b2:88:5d:9c:88:f6:ba:09:d8:a4:b8:e6:e4:ac:2f:ee:de:5c:
49:53:4d:28:c0:ae:a5:d5:66:d1:b0:28:02:ad:4a:c7:6d:e7:
9d:93:0a:e4:4d:23:b7:e4:19:86:d3:d4:41:e5:b5:35:5a:c1:
8a:b2:5f:2f:57:ef:df:cc:62:94:1c:54:39:1a:f8:dc:c7:b3:
e0:f4:cc:3e:d3:af:b9:2f:d8:1d:9d:30:2b:44:45:4b:26:56:
57:40:be:6c:01:d0:19:ad:e9:19:47:3a:87:26:e1:5f:5f:aa:
fb:aa:19:7a:a1:48:b8:5c:4d:fb:c1:bd:9b:24:a5:37:5b:4d:
81:c8:11:93
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
QzE2NzExMC8GA1UEBRMoMzY5MTg5QURBMTk5NUIwMjBGQUI4NkQ3NzU5OEM2MEMy
OTc0Nzc1NTAeFw0yNjA3MzAxMDUyMTNaFw0yNzA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhNmIyY2RkLTVmYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDoFmRxCg+wj2pu6lRgfsJRenLuUmPgysxxLj/HvgVUWyLlmWgDrEJhp2vNwGbj
Y8n2aHIghO28ilwqeAv1atDoWQSnzDMbZtuPOiqDALsaplR3n/XAPBcmrtnHDfc7
qq55+AWUpGIW+DD3i2Sq9Ac65aKz3FMkFfgqlQG6W6uEcu2lQVXMuM6B3tvaCCJU
xZZNfpmyVcbmyjREDk4EQZHCsOH3orpvgYwyvyBeeM1nixCAjNSDHsrAj4InVqvb
kLFl91uBZuA6Z19l2fODrAvczsqSdCLzN9+dt7/dx+5uElCkqXrGqdS+Wk5SAc18
jG7/T76Akw5chLOY9et7ObudAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUT1SY3zEU
sICPHV3OOsxzfI38W3IwHwYDVR0jBBgwFoAUNpGJraGZWwIPq4bXdZjGDCl0d1Uw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDMTY3L0IyREY4MjJBNkYw
RTExRjE5NjhFN0M0ODgzQTMwRkJDL05wR0pyYUdaV3dJUHE0YlhkWmpHRENsMGQx
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTnBHSnJhR1pXd0lQcTRiWGRaakdEQ2wwZDFVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QzE2Ny9CMkRGODIyQTZGMEUxMUYxOTY4RTdDNDg4M0EzMEZCQy9CODhDODUzNDhD
MDQxMUYxOTY3OTJFN0I0MDExRjk3MC5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAgAQ33SkAwDQYJKoZIhvcNAQELBQADggEBAJMe8yNzcdTaMmU13y+d
ZIGup0BO6nhQW394AFeesC8exk2QwuQAAI+bX7vstlK6ZsiCwfCje2vdQOHpqS5R
xImsyWvpOvhWLqO07AjD6UhQIYcrJ9NoTl0KPTmvcwT/T85Jkd1o6PYKXqH0ZeoV
16wEt1VxNVXs7ETHlfzujrKIXZyI9roJ2KS45uSsL+7eXElTTSjArqXVZtGwKAKt
Ssdt552TCuRNI7fkGYbT1EHltTVawYqyXy9X79/MYpQcVDka+NzHs+D0zD7Tr7kv
2B2dMCtERUsmVldAvmwB0Bmt6RlHOocm4V9fqvuqGXqhSLhcTfvBvZskpTdbTYHI
EZM=
-----END CERTIFICATE-----
Generated at Wed Aug 19 14:25:19 2026 by rpki-client