
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/30857DB6CBA211ECAE233133C4F9AE02.roa
File: 30857DB6CBA211ECAE233133C4F9AE02.roa (raw, json)
Hash identifier: IXVHf+2WBfW6oS9Q18tT00qCn3zKH5TAOtknryxx7jA=
Subject key identifier: 7D:26:85:5B:9E:63:84:6D:F2:C0:9C:A0:CA:6C:36:9A:30:E8:23:D1
Certificate issuer: /CN=A91F731E/serialNumber=90603E354DB568B3CA42900E703011E79662892E
Certificate serial: 06E9
Authority key identifier: 90:60:3E:35:4D:B5:68:B3:CA:42:90:0E:70:30:11:E7:96:62:89:2E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/30857DB6CBA211ECAE233133C4F9AE02.roa
Signing time: Thu 06 Aug 2026 16:29:06 +0000
ROA not before: Thu 06 Aug 2026 16:29:06 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 149812
IP address blocks: 72.9.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.crl
rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1769 (0x6e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F731E, serialNumber=90603E354DB568B3CA42900E703011E79662892E
Validity
Not Before: Aug 6 16:29:06 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a74b652-764a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:55:3f:2e:28:eb:0f:35:04:c5:5f:16:49:4b:
54:9c:dd:be:87:da:d0:38:b3:20:2e:9d:a5:92:99:
0d:0c:5f:4f:ab:eb:ba:6e:8c:31:bd:6c:2e:a7:5e:
c3:32:f8:87:87:08:80:09:8b:39:91:76:7f:86:0c:
19:05:43:af:87:b8:ac:51:c8:c7:c9:b7:fb:65:c1:
00:21:36:ce:e4:e7:11:04:ab:c0:de:84:3f:d2:25:
78:f9:57:5c:0b:f2:6b:70:80:27:ee:d2:af:da:42:
21:43:7d:46:fd:17:5d:b4:18:2a:1d:5b:e4:95:42:
c5:95:a6:07:75:b9:4b:fc:1b:ec:1b:cd:86:54:c1:
27:3f:20:d9:90:7e:b2:3c:3e:a5:28:91:0e:c4:36:
14:59:b2:47:f6:5a:cb:07:63:9a:ce:b7:40:4a:50:
6f:83:18:db:71:87:5c:23:37:10:e2:9d:3f:b1:85:
56:b1:27:65:e1:57:b3:f3:36:b0:17:75:c3:5f:2c:
b5:9f:60:76:1b:37:2d:ee:29:f7:8d:e9:ac:ce:b8:
69:59:55:55:11:0f:71:95:78:51:1a:95:dc:76:f0:
b6:bb:07:e9:35:1a:24:06:79:2d:6d:4c:7a:f8:49:
28:95:f2:c9:7e:c2:d6:b7:f6:08:4e:ea:db:2e:b2:
34:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:26:85:5B:9E:63:84:6D:F2:C0:9C:A0:CA:6C:36:9A:30:E8:23:D1
X509v3 Authority Key Identifier:
keyid:90:60:3E:35:4D:B5:68:B3:CA:42:90:0E:70:30:11:E7:96:62:89:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/30857DB6CBA211ECAE233133C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
72.9.143.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:70:00:5c:9f:5e:6f:d6:96:7d:c3:35:7d:e8:0f:0c:95:28:
84:16:20:33:d1:d2:cc:3b:27:2b:5b:ca:85:f0:96:cb:3b:26:
12:26:43:3d:3f:10:6a:36:67:6f:d3:50:63:0f:58:bb:ad:93:
e6:d0:3e:89:f9:ff:ab:24:b2:70:36:e0:09:48:7b:6f:6c:e8:
ec:5d:25:79:28:01:5c:0d:b7:3d:be:3f:24:83:e7:80:8e:52:
d5:55:f5:94:a6:dd:f5:8f:4e:9d:ea:56:0a:99:57:5f:5d:cb:
70:01:25:c2:3c:b3:34:88:16:64:96:4f:eb:fd:2f:ee:af:72:
73:ea:3f:82:7c:47:07:4e:a9:5e:0e:b8:a4:a5:93:3e:6d:b8:
b8:4e:10:30:71:a5:49:65:26:db:59:ed:37:ee:b0:52:20:6c:
81:ec:64:54:0b:11:fb:32:65:7c:3b:ad:d3:ee:1a:ea:a6:59:
72:3b:3c:96:be:3d:04:a8:69:e7:f4:03:aa:98:db:c5:6b:bd:
32:83:2f:c5:9a:96:0d:ca:94:70:6a:1a:db:9b:37:98:06:82:
b2:0b:45:2b:a1:d0:d7:90:05:79:2a:25:e4:db:cd:d1:df:28:
d6:7d:34:03:a2:4e:d9:0b:8b:25:96:9e:7e:24:25:3e:f6:13:
00:78:0a:e2
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjczMUUxMTAvBgNVBAUTKDkwNjAzRTM1NERCNTY4QjNDQTQyOTAwRTcwMzAxMUU3
OTY2Mjg5MkUwHhcNMjYwODA2MTYyOTA2WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTc0YjY1Mi03NjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn1U/LijrDzUExV8WSUtUnN2+h9rQOLMgLp2lkpkNDF9Pq+u6bowxvWwup17D
MviHhwiACYs5kXZ/hgwZBUOvh7isUcjHybf7ZcEAITbO5OcRBKvA3oQ/0iV4+Vdc
C/JrcIAn7tKv2kIhQ31G/RddtBgqHVvklULFlaYHdblL/BvsG82GVMEnPyDZkH6y
PD6lKJEOxDYUWbJH9lrLB2OazrdASlBvgxjbcYdcIzcQ4p0/sYVWsSdl4Vez8zaw
F3XDXyy1n2B2Gzct7in3jemszrhpWVVVEQ9xlXhRGpXcdvC2uwfpNRokBnktbUx6
+EkolfLJfsLWt/YITurbLrI08wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFH0mhVue
Y4Rt8sCcoMpsNpow6CPRMB8GA1UdIwQYMBaAFJBgPjVNtWizykKQDnAwEeeWYoku
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxRS9FQUExOUNCNEIy
REMxMUVCODYyMUNCNTZDNEY5QUUwMi9rR0EtTlUyMWFMUEtRcEFPY0RBUjU1Wmlp
UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2tHQS1OVTIxYUxQS1FwQU9jREFSNTVaaWlTNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjczMUUvRUFBMTlDQjRCMkRDMTFFQjg2MjFDQjU2QzRGOUFFMDIvMzA4NTdEQjZD
QkEyMTFFQ0FFMjMzMTMzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQASAmPMA0GCSqGSIb3DQEBCwUAA4IBAQBPcABcn15v1pZ9wzV96A8M
lSiEFiAz0dLMOycrW8qF8JbLOyYSJkM9PxBqNmdv01BjD1i7rZPm0D6J+f+rJLJw
NuAJSHtvbOjsXSV5KAFcDbc9vj8kg+eAjlLVVfWUpt31j06d6lYKmVdfXctwASXC
PLM0iBZklk/r/S/ur3Jz6j+CfEcHTqleDrikpZM+bbi4ThAwcaVJZSbbWe037rBS
IGyB7GRUCxH7MmV8O63T7hrqpllyOzyWvj0EqGnn9AOqmNvFa70ygy/FmpYNypRw
ahrbmzeYBoKyC0UrodDXkAV5KiXk283R3yjWfTQDok7ZC4sllp5+JCU+9hMAeAri
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:08:16 2026 by rpki-client