
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB5C6/AD41B9AE329C11F196D7EBCCCB833773/B2F04F54329D11F1814FCAC1CD833773.roa
File: B2F04F54329D11F1814FCAC1CD833773.roa (raw, json)
Hash identifier: c1HGW6qmai4ndDBMyu/L+uqjA6+S0djztkoymydZqqo=
Subject key identifier: 23:7F:96:B7:41:10:28:3E:51:AE:4F:BE:CD:67:CC:A8:34:0C:94:01
Certificate issuer: /CN=A91FB5C6/serialNumber=C2E8821AEE361FBAD7FDECE11C57536D394BC1EF
Certificate serial: 04
Authority key identifier: C2:E8:82:1A:EE:36:1F:BA:D7:FD:EC:E1:1C:57:53:6D:39:4B:C1:EF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wuiCGu42H7rX_ezhHFdTbTlLwe8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB5C6/AD41B9AE329C11F196D7EBCCCB833773/B2F04F54329D11F1814FCAC1CD833773.roa
Signing time: Tue 07 Apr 2026 16:20:32 +0000
ROA not before: Tue 07 Apr 2026 16:20:32 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 136768
IP address blocks: 138.252.76.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB5C6/AD41B9AE329C11F196D7EBCCCB833773/wuiCGu42H7rX_ezhHFdTbTlLwe8.crl
rsync://rpki.apnic.net/member_repository/A91FB5C6/AD41B9AE329C11F196D7EBCCCB833773/wuiCGu42H7rX_ezhHFdTbTlLwe8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wuiCGu42H7rX_ezhHFdTbTlLwe8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:52:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB5C6, serialNumber=C2E8821AEE361FBAD7FDECE11C57536D394BC1EF
Validity
Not Before: Apr 7 16:20:32 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69d52ed0-797d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2a:4b:83:69:52:11:09:a6:a1:d1:a3:c3:79:
bf:9b:14:e7:35:0c:b5:d1:cf:34:63:d1:31:ee:cc:
a8:7f:e9:cc:d3:62:54:cf:5f:fe:62:75:97:9d:b2:
40:aa:53:36:de:c7:f7:ed:6f:f8:38:d0:ff:15:4c:
81:b1:02:f8:fc:04:42:50:ec:b5:46:8d:f7:8f:99:
5e:53:d9:d0:62:6e:57:2d:7b:b4:04:5e:14:ee:10:
78:b3:32:e6:3b:15:84:36:06:ab:0c:1a:85:ff:c1:
62:16:ed:ae:71:44:b7:b7:8e:3c:98:77:75:48:b4:
f7:3c:ac:9e:88:81:64:ea:ae:3f:88:d6:ae:47:24:
42:42:48:89:e3:89:53:a7:14:eb:e6:6a:8a:bd:8f:
64:41:82:3e:9e:5e:49:c4:e4:e2:3e:08:02:39:ed:
a9:e6:6b:8b:90:71:70:0e:1e:86:50:a8:8d:8e:15:
3e:28:1b:f6:03:e2:51:dd:94:8a:62:71:56:60:03:
75:8f:f8:fb:88:dd:6d:fc:8c:a2:6a:89:4c:53:ce:
60:84:83:10:d7:ab:d0:a4:c5:44:ab:04:37:a7:7c:
0d:13:65:91:94:44:42:24:22:4b:4a:f4:0d:21:a6:
25:06:61:71:67:8b:15:cd:96:a0:06:0e:2a:00:09:
82:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7F:96:B7:41:10:28:3E:51:AE:4F:BE:CD:67:CC:A8:34:0C:94:01
X509v3 Authority Key Identifier:
keyid:C2:E8:82:1A:EE:36:1F:BA:D7:FD:EC:E1:1C:57:53:6D:39:4B:C1:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB5C6/AD41B9AE329C11F196D7EBCCCB833773/wuiCGu42H7rX_ezhHFdTbTlLwe8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wuiCGu42H7rX_ezhHFdTbTlLwe8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB5C6/AD41B9AE329C11F196D7EBCCCB833773/B2F04F54329D11F1814FCAC1CD833773.roa
sbgp-ipAddrBlock: critical
IPv4:
138.252.76.0/23
Signature Algorithm: sha256WithRSAEncryption
07:32:3a:e5:0c:6a:3e:b1:8d:ff:71:27:a7:50:a3:cf:9e:7c:
75:ca:7a:5b:f6:4e:d2:53:fb:59:e2:77:2e:0b:12:6c:49:64:
74:df:53:0f:a2:5b:c7:8b:fb:25:8e:58:7b:a3:4e:e8:7d:36:
1b:2d:e2:8f:fb:33:1d:0e:1c:97:cb:8a:11:07:cd:69:31:9a:
18:19:cb:1d:1f:78:70:bc:49:e5:3f:38:11:3e:8a:a8:57:85:
63:46:a6:c2:b6:a0:fa:a4:3f:65:89:d2:af:3d:b7:ce:1d:d6:
35:08:a9:4d:8a:37:0b:98:b6:b7:ff:ff:61:e1:43:2f:16:b7:
21:a8:c8:44:40:6e:cf:ba:7f:f0:aa:0b:98:b0:1d:2c:01:17:
15:4c:91:37:c0:30:a5:f4:0b:d2:96:77:83:3b:b3:bb:38:c3:
ea:86:45:01:21:38:06:dd:e0:b3:4e:eb:ae:e9:e4:c8:cc:b9:
7a:df:01:a9:41:ab:71:6e:a3:01:d8:99:f4:25:f3:cf:19:3b:
7c:57:31:d9:55:f6:8b:44:03:3d:fb:66:10:94:82:27:89:72:
78:bf:28:6d:91:7b:34:d0:4b:c9:ba:33:75:d4:44:61:16:16:
00:46:14:f7:5c:17:69:62:87:63:bb:51:e6:4e:8a:a1:d6:1d:
1f:f7:49:2f
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
QjVDNjExMC8GA1UEBRMoQzJFODgyMUFFRTM2MUZCQUQ3RkRFQ0UxMUM1NzUzNkQz
OTRCQzFFRjAeFw0yNjA0MDcxNjIwMzJaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5ZDUyZWQwLTc5N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCvKkuDaVIRCaah0aPDeb+bFOc1DLXRzzRj0THuzKh/6czTYlTPX/5idZedskCq
Uzbex/ftb/g40P8VTIGxAvj8BEJQ7LVGjfePmV5T2dBiblcte7QEXhTuEHizMuY7
FYQ2BqsMGoX/wWIW7a5xRLe3jjyYd3VItPc8rJ6IgWTqrj+I1q5HJEJCSInjiVOn
FOvmaoq9j2RBgj6eXknE5OI+CAI57anma4uQcXAOHoZQqI2OFT4oG/YD4lHdlIpi
cVZgA3WP+PuI3W38jKJqiUxTzmCEgxDXq9CkxUSrBDenfA0TZZGUREIkIktK9A0h
piUGYXFnixXNlqAGDioACYLbAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUI3+Wt0EQ
KD5Rrk++zWfMqDQMlAEwHwYDVR0jBBgwFoAUwuiCGu42H7rX/ezhHFdTbTlLwe8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCNUM2L0FENDFCOUFFMzI5
QzExRjE5NkQ3RUJDQ0NCODMzNzczL3d1aUNHdTQySDdyWF9lemhIRmRUYlRsTHdl
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvd3VpQ0d1NDJIN3JYX2V6aEhGZFRiVGxMd2U4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QjVDNi9BRDQxQjlBRTMyOUMxMUYxOTZEN0VCQ0NDQjgzMzc3My9CMkYwNEY1NDMy
OUQxMUYxODE0RkNBQzFDRDgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGK/EwwDQYJKoZIhvcNAQELBQADggEBAAcyOuUMaj6xjf9xJ6dQo8+e
fHXKelv2TtJT+1nidy4LEmxJZHTfUw+iW8eL+yWOWHujTuh9Nhst4o/7Mx0OHJfL
ihEHzWkxmhgZyx0feHC8SeU/OBE+iqhXhWNGpsK2oPqkP2WJ0q89t84d1jUIqU2K
NwuYtrf//2HhQy8WtyGoyERAbs+6f/CqC5iwHSwBFxVMkTfAMKX0C9KWd4M7s7s4
w+qGRQEhOAbd4LNO667p5MjMuXrfAalBq3FuowHYmfQl888ZO3xXMdlV9otEAz37
ZhCUgieJcni/KG2RezTQS8m6M3XURGEWFgBGFPdcF2lih2O7UeZOiqHWHR/3SS8=
-----END CERTIFICATE-----
Generated at Sat Apr 18 22:15:47 2026 by rpki-client