
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/47D255C8572811ECBE150619C4F9AE02.roa
File: 47D255C8572811ECBE150619C4F9AE02.roa (raw, json)
Hash identifier: uWkp09s7yGSzXGuY3Dy3+U0rw2K9bYSVVtki+9GQvL0=
Subject key identifier: 78:0B:AC:11:C4:E0:35:04:09:18:44:62:CA:31:4B:04:82:FD:01:BB
Certificate issuer: /CN=A91EF24F/serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D
Certificate serial: 0841
Authority key identifier: C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/47D255C8572811ECBE150619C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:43:57 +0000
ROA not before: Mon 06 Oct 2025 21:22:52 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 55705
IP address blocks: 188.209.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl
rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 20:35:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2113 (0x841)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF24F, serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D
Validity
Not Before: Oct 6 21:22:52 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a45ebd-118c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d1:ae:71:46:e9:a2:19:33:bb:7f:f9:d4:30:
ac:f7:60:a5:33:57:70:91:b6:dc:f5:90:d9:d4:80:
70:b9:18:59:c4:e3:f0:21:a8:f0:d6:b3:25:dd:65:
53:fe:18:d2:b3:fd:28:37:0d:f2:d4:54:c6:e1:f8:
51:fa:a8:95:ab:98:98:b6:f1:f2:83:f0:b3:60:75:
4f:23:dc:83:97:f1:90:ee:e8:1b:b2:6b:2b:e2:26:
9d:75:f4:6f:5b:ea:f2:68:3f:99:05:42:90:12:10:
69:61:b0:63:5e:e6:9d:10:75:8a:d1:02:e9:92:e2:
90:d1:bf:12:a9:b5:2a:a1:ec:e1:3f:e9:70:67:76:
1f:2d:65:0a:e7:0a:5a:45:2a:1d:ca:b6:fe:ef:c5:
ae:fe:0f:c9:02:ac:24:9c:f5:6a:ee:51:0e:39:62:
eb:af:43:52:a2:73:e9:a6:8c:64:9a:a7:8a:3c:aa:
42:9e:26:86:c1:1a:83:bd:79:5e:35:89:86:90:c1:
0d:64:71:98:5a:99:37:c2:8b:5e:57:27:07:33:b4:
37:5f:00:57:9b:ae:8a:45:10:c4:8f:be:cc:70:f3:
cc:7d:45:00:53:55:59:46:53:c4:c8:25:16:24:82:
31:af:19:7e:d2:0a:4b:9f:fd:df:84:03:cc:8e:09:
47:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0B:AC:11:C4:E0:35:04:09:18:44:62:CA:31:4B:04:82:FD:01:BB
X509v3 Authority Key Identifier:
keyid:C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/47D255C8572811ECBE150619C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
188.209.154.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:9d:0f:17:31:60:d6:5a:83:fe:00:8c:02:87:45:bd:f8:61:
a1:8e:f6:22:8a:ca:f9:9a:bc:d5:84:2b:6b:c4:d3:e4:31:bd:
1b:f4:46:b9:15:a9:94:96:07:4f:06:49:ae:63:7b:c4:43:d7:
e5:cb:c4:ce:42:69:0a:43:1b:15:21:8d:87:2c:19:47:89:be:
7a:58:a1:9b:11:e1:ec:6d:62:07:56:6b:d1:da:1d:ce:bd:05:
12:50:b6:6d:db:d2:94:45:20:a7:9c:46:57:26:9c:76:f6:f3:
8d:4c:94:df:78:91:3c:25:d2:24:bb:de:c0:4c:9e:53:e2:af:
70:23:c5:f0:fe:47:7f:da:4f:2a:c7:27:5c:67:cf:45:d7:47:
ec:14:72:f9:62:04:d9:b9:13:f4:0d:c3:32:e5:42:26:8c:92:
90:09:c6:26:ce:63:51:c1:f4:e4:c4:28:be:1e:5b:31:d9:33:
f1:a9:ea:df:2b:db:f8:4e:a4:35:b7:69:12:69:79:49:5a:5d:
36:fb:6d:37:8b:da:ec:9b:35:1c:0c:97:40:71:dd:0f:42:6d:
77:6e:33:90:d7:57:af:b8:79:d4:17:ef:10:3f:db:cc:15:c5:
ef:10:3f:43:32:15:ab:2c:ba:2a:2e:50:8e:64:4d:14:7e:40:
5e:31:8e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 16:16:25 2026 by rpki-client