
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/2FD77F7E621511F09070587CC4F9AE02.roa
File: 2FD77F7E621511F09070587CC4F9AE02.roa (raw, json)
Hash identifier: ol5yFCZOBiVTvk8E7fVatGRyyicC3FHaDbYq9ITTPLY=
Subject key identifier: 4F:E8:87:7D:B3:9D:EC:D3:FF:03:45:70:E0:63:AE:00:F8:8E:CB:79
Certificate issuer: /CN=A91F5756/serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2
Certificate serial: CD
Authority key identifier: 40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/2FD77F7E621511F09070587CC4F9AE02.roa
Signing time: Mon 03 Aug 2026 08:57:36 +0000
ROA not before: Mon 03 Aug 2026 08:57:36 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 140666
IP address blocks: 160.187.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl
rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 06:52:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5756, serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2
Validity
Not Before: Aug 3 08:57:36 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6a705800-7ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:36:2b:22:5b:f9:b5:97:2f:0d:6e:92:fa:ae:
99:33:75:b3:f5:90:c7:89:72:78:89:1c:2d:6a:9e:
7b:23:5a:54:de:4b:2e:65:6c:5c:64:de:2f:1b:cb:
b1:6d:75:f3:1c:c3:4c:83:30:8e:fa:65:6e:15:c6:
55:cb:1f:1b:9a:6f:c1:73:30:56:b9:ab:1a:55:8a:
b6:02:5a:78:d4:4f:2c:1f:63:20:c2:fa:e2:8e:81:
9b:95:c8:bb:40:89:e3:17:f6:2f:db:72:be:bb:7e:
e6:2b:4e:b4:69:4c:cc:f4:5c:af:f0:e9:8c:37:e1:
3f:62:71:ef:b3:6a:eb:8c:72:02:ae:25:cf:ef:b1:
9a:cb:10:9c:a1:f0:ec:4c:fe:e0:0b:11:a3:4b:98:
4b:be:58:a9:73:64:4c:54:a5:a4:da:c3:88:cd:8c:
8c:8a:0a:f4:fc:1f:d6:65:df:ea:90:d4:ad:4f:31:
e1:8b:43:fe:9c:e7:5e:f4:9f:2f:1f:d5:2b:f7:41:
56:23:af:10:b8:00:36:a3:be:38:5d:e9:2f:17:a4:
cb:b3:b0:7e:7c:30:b3:35:2b:a9:6e:1c:62:6a:d4:
4d:f3:cc:f9:8a:fd:ea:d2:d4:ab:c3:5e:06:8c:54:
66:3a:c8:8c:38:fc:92:46:de:52:13:e8:82:a2:64:
d2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E8:87:7D:B3:9D:EC:D3:FF:03:45:70:E0:63:AE:00:F8:8E:CB:79
X509v3 Authority Key Identifier:
keyid:40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/2FD77F7E621511F09070587CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.187.134.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:98:5a:44:af:d6:6a:c7:8f:73:26:39:57:40:13:fe:cb:b7:
99:a9:44:19:74:b6:fc:d8:1e:b0:60:2f:c8:de:32:8d:a0:0f:
4f:8f:7c:de:3f:1f:53:5b:3c:81:08:05:74:90:6e:4e:b5:7c:
8b:2c:76:09:8e:fc:8a:d1:73:c3:41:4e:69:f5:67:98:9e:71:
9b:a2:d9:9b:76:8b:55:08:bc:ed:ca:2a:f8:0c:45:27:6c:c9:
57:49:6c:10:91:60:6c:7a:11:76:4b:cd:90:14:cc:87:00:bb:
49:b6:5d:6b:3e:df:ba:f7:c2:65:75:61:44:da:84:24:a0:29:
9c:d1:74:eb:ca:25:52:92:ea:e7:cb:42:33:05:b8:04:c5:f4:
6b:a7:67:0e:75:92:11:80:d1:48:2b:12:3c:b3:68:18:20:17:
3b:f6:d2:ad:33:8e:48:65:cb:59:c5:a7:e2:d5:cf:00:b8:d1:
9f:84:03:84:dc:19:c4:80:63:ed:2b:e8:c0:87:57:4e:79:fe:
fb:bf:fb:ad:c4:ab:0d:16:7b:2f:13:c3:92:70:58:0b:c7:9c:
cc:7d:60:58:76:02:bb:e0:73:8a:04:ae:cf:ad:ee:37:6e:37:
c5:d7:87:0b:7c:dc:97:85:d4:80:d7:3a:94:b4:72:0c:db:6e:
39:b1:bc:98
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjU3NTYxMTAvBgNVBAUTKDQwMUQ4QkRDODJBMzI0NDhDOTNCQTNBMEZFOTNBRjEw
NjQyMzYyQTIwHhcNMjYwODAzMDg1NzM2WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTcwNTgwMC03ZWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyTYrIlv5tZcvDW6S+q6ZM3Wz9ZDHiXJ4iRwtap57I1pU3ksuZWxcZN4vG8ux
bXXzHMNMgzCO+mVuFcZVyx8bmm/BczBWuasaVYq2Alp41E8sH2MgwvrijoGblci7
QInjF/Yv23K+u37mK060aUzM9Fyv8OmMN+E/YnHvs2rrjHICriXP77GayxCcofDs
TP7gCxGjS5hLvlipc2RMVKWk2sOIzYyMigr0/B/WZd/qkNStTzHhi0P+nOde9J8v
H9Ur90FWI68QuAA2o744XekvF6TLs7B+fDCzNSupbhxiatRN88z5iv3q0tSrw14G
jFRmOsiMOPySRt5SE+iComTS5QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFE/oh32z
nezT/wNFcOBjrgD4jst5MB8GA1UdIwQYMBaAFEAdi9yCoyRIyTujoP6TrxBkI2Ki
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTc1Ni82QjcyN0YzMjYy
MTIxMUYwOENBNkMxNTRDNEY5QUUwMi9RQjJMM0lLakpFakpPNk9nX3BPdkVHUWpZ
cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FCMkwzSUtqSkVqSk82T2dfcE92RUdRallxSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjU3NTYvNkI3MjdGMzI2MjEyMTFGMDhDQTZDMTU0QzRGOUFFMDIvMkZENzdGN0U2
MjE1MTFGMDkwNzA1ODdDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoLuGMA0GCSqGSIb3DQEBCwUAA4IBAQAemFpEr9Zqx49zJjlXQBP+
y7eZqUQZdLb82B6wYC/I3jKNoA9Pj3zePx9TWzyBCAV0kG5OtXyLLHYJjvyK0XPD
QU5p9WeYnnGbotmbdotVCLztyir4DEUnbMlXSWwQkWBsehF2S82QFMyHALtJtl1r
Pt+698JldWFE2oQkoCmc0XTryiVSkurny0IzBbgExfRrp2cOdZIRgNFIKxI8s2gY
IBc79tKtM45IZctZxafi1c8AuNGfhAOE3BnEgGPtK+jAh1dOef77v/utxKsNFnsv
E8OScFgLx5zMfWBYdgK74HOKBK7Pre43bjfF14cLfNyXhdSA1zqUtHIM2245sbyY
-----END CERTIFICATE-----
Generated at Thu Sep 3 18:27:36 2026 by rpki-client