
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/F3932912564E11F19B7E269A92833773.roa
File: F3932912564E11F19B7E269A92833773.roa (raw, json)
Hash identifier: vpokWY7VC0lN/QwXrFRth4crCd36REdtNnFL3WNKSEM=
Subject key identifier: 36:D8:DB:0D:2C:01:4B:09:6C:1E:BE:3D:EC:73:C8:B8:29:63:AF:CC
Certificate issuer: /CN=A91F1745/serialNumber=2A37AC3AB25A37DFB5D4EA10039968DE31BE34CA
Certificate serial: 10
Authority key identifier: 2A:37:AC:3A:B2:5A:37:DF:B5:D4:EA:10:03:99:68:DE:31:BE:34:CA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KjesOrJaN9-11OoQA5lo3jG-NMo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/F3932912564E11F19B7E269A92833773.roa
Signing time: Sat 23 May 2026 02:28:14 +0000
ROA not before: Sat 23 May 2026 02:28:14 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 135851
IP address blocks: 162.4.66.0/23 maxlen: 23
162.4.66.0/24 maxlen: 24
162.4.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.crl
rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KjesOrJaN9-11OoQA5lo3jG-NMo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 09:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1745, serialNumber=2A37AC3AB25A37DFB5D4EA10039968DE31BE34CA
Validity
Not Before: May 23 02:28:14 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a1110be-93bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3f:f4:89:36:f8:bd:bb:c4:b9:43:b6:cd:6f:
7f:53:69:e1:6f:09:74:6f:4a:9a:66:4f:09:35:43:
c5:21:9e:09:ee:ed:ea:10:d5:89:1c:41:6e:84:26:
f1:2a:f8:24:5b:0d:9d:b8:4a:bd:28:d5:b6:80:d9:
25:db:7f:11:36:39:81:7c:ab:03:d5:46:26:52:19:
61:48:ec:29:6d:a6:38:ab:81:21:f3:cd:e7:ee:9f:
de:06:8f:37:5c:e7:49:8e:b8:7a:56:87:c1:cc:ed:
b4:1f:87:6a:2a:5c:c1:0d:30:5a:78:e2:e5:c9:33:
3a:2c:7f:a5:8c:b3:1c:dc:b4:c3:fb:be:19:c7:4d:
db:fb:7a:fe:ce:d9:d0:8e:57:2b:d7:66:38:69:96:
88:a6:66:4d:c4:2a:86:67:4c:46:de:1a:d8:81:04:
95:87:d5:bb:6c:64:b3:3a:52:38:30:06:f0:98:51:
32:f9:bd:d0:30:fc:04:a7:8d:fd:1e:54:2c:68:00:
19:73:c8:cd:d8:0e:99:78:57:fd:3c:92:5f:b5:9b:
dc:ee:6a:e9:cb:28:ac:df:3c:c8:a5:03:a0:48:99:
ca:00:e9:8e:3c:50:ff:1f:85:04:8c:36:90:76:3a:
a0:1e:9d:70:61:7c:12:c1:8b:32:b6:83:04:db:91:
1b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D8:DB:0D:2C:01:4B:09:6C:1E:BE:3D:EC:73:C8:B8:29:63:AF:CC
X509v3 Authority Key Identifier:
keyid:2A:37:AC:3A:B2:5A:37:DF:B5:D4:EA:10:03:99:68:DE:31:BE:34:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KjesOrJaN9-11OoQA5lo3jG-NMo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/F3932912564E11F19B7E269A92833773.roa
sbgp-ipAddrBlock: critical
IPv4:
162.4.66.0/23
Signature Algorithm: sha256WithRSAEncryption
86:fa:2b:82:15:26:60:7e:5d:c2:ff:2a:ec:34:28:d0:0a:1b:
c3:b8:70:49:8b:b2:08:a4:46:f2:12:ea:2d:18:f5:c0:33:8f:
ce:b3:b5:7b:69:d2:00:bd:79:7d:8a:78:34:82:d0:4f:b4:eb:
c3:39:2f:e5:7c:4b:df:1e:4d:77:1a:5e:93:4d:85:f4:a9:e5:
6a:37:48:11:cc:eb:cd:27:39:9e:0b:53:7f:85:fe:50:7d:64:
2b:1d:c8:8b:48:bb:c1:a2:24:10:fd:45:db:2b:e6:6e:29:0c:
02:1d:5f:0a:24:51:cb:13:15:50:01:09:ab:73:e7:16:f4:9c:
ea:ff:c8:a8:4c:2f:e3:38:b2:bc:6c:ad:77:b2:eb:91:f6:8e:
46:74:e3:25:f3:d2:5b:05:43:08:07:22:82:d8:7a:e2:b6:93:
98:cc:3b:ed:69:f7:0d:3e:4d:52:3f:27:90:ad:53:a9:59:d8:
23:31:33:9b:be:c2:8d:9e:86:b1:a1:49:0c:33:7b:3f:34:6e:
82:39:19:f8:3b:99:75:2e:d1:45:30:82:50:84:54:4d:14:01:
a0:a6:b1:bb:c6:8d:8f:0c:58:88:8a:ed:d7:c4:67:3b:88:60:
72:56:b7:9e:4a:54:3e:93:9d:fe:4b:4b:47:c6:b9:9a:8a:45:
95:d0:1e:c7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:25:22 2026 by rpki-client