
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/484AAA6E29E711F18BEDC2D19E833773.roa
File: 484AAA6E29E711F18BEDC2D19E833773.roa (raw, json)
Hash identifier: m35r5GwPvKh9akKr8JCnjaTv1XElnieMLAOq4dk9R0Q=
Subject key identifier: 1D:7B:C7:3F:3E:1F:2B:BA:ED:B4:50:0D:AD:55:DA:D8:3C:14:29:22
Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial: 2D
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/484AAA6E29E711F18BEDC2D19E833773.roa
Signing time: Fri 27 Mar 2026 14:14:35 +0000
ROA not before: Fri 27 Mar 2026 14:14:35 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 63199
IP address blocks: 205.177.85.0/24 maxlen: 24
205.177.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 17:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Validity
Not Before: Mar 27 14:14:35 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69c690cb-78ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f1:c9:4e:fb:d5:78:b2:c5:9b:56:57:a6:85:
55:7c:21:50:d8:54:23:e5:9b:62:bc:23:4b:00:a7:
6a:f1:90:5c:44:9a:03:32:d7:2a:03:97:fd:56:81:
38:89:cd:09:5e:f0:9e:c6:36:cc:6a:8d:b4:db:c7:
15:25:35:79:37:78:37:1d:a0:a6:80:2a:53:e9:67:
a8:be:5c:d7:65:68:d1:b9:af:1e:cc:df:c2:b6:5d:
50:72:82:39:fc:d3:47:7f:85:88:98:97:ea:4f:40:
a0:20:99:3b:bc:2b:b7:3c:25:36:8b:36:ec:9f:7e:
cc:41:db:5e:be:f3:09:c0:ec:61:ca:05:70:b2:fe:
6e:d0:7e:8a:23:35:56:03:37:59:db:d9:77:8d:cc:
17:36:31:cc:5f:53:e7:41:67:c9:ec:84:05:5f:8d:
69:9a:f4:15:0e:11:15:55:db:32:d3:df:da:7d:e6:
31:55:d1:91:4f:38:51:77:77:f1:05:99:ef:08:4b:
6b:73:ff:cd:5c:b8:51:9b:74:dc:7b:2b:bd:99:99:
4e:5e:f3:21:45:a2:73:e8:dd:0f:42:d5:79:83:51:
20:f6:a0:81:70:54:de:d6:1f:a7:0e:55:02:8f:86:
53:74:4d:f7:5a:a8:32:72:75:bb:8a:9e:5d:07:b8:
11:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7B:C7:3F:3E:1F:2B:BA:ED:B4:50:0D:AD:55:DA:D8:3C:14:29:22
X509v3 Authority Key Identifier:
keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/484AAA6E29E711F18BEDC2D19E833773.roa
sbgp-ipAddrBlock: critical
IPv4:
205.177.85.0-205.177.86.255
Signature Algorithm: sha256WithRSAEncryption
88:e6:da:d0:f3:69:f3:8f:1a:78:ca:de:f2:3b:c6:b1:16:a2:
85:16:c4:8c:75:66:11:5e:a9:8a:10:6a:f4:9c:7c:89:ee:39:
82:de:9f:12:3a:d1:77:a0:87:b3:de:53:56:fc:eb:10:41:62:
b5:a1:73:d6:a3:08:a0:6f:24:96:53:08:94:bc:87:1a:71:fe:
7b:18:22:19:71:c4:c0:c3:17:8f:63:d3:34:e4:50:09:0d:dc:
87:56:10:7b:ca:1f:5c:86:ab:49:a1:96:ab:fe:c9:84:5e:39:
4d:4b:cc:c2:67:47:bf:07:67:86:ea:a5:13:26:3c:43:23:69:
2c:21:50:09:dd:f5:dc:5b:92:eb:ff:15:08:77:6f:24:60:1f:
57:26:6e:fc:5d:76:d0:09:92:3a:6f:bb:0c:db:63:65:5e:41:
a7:9e:4c:02:e7:06:f4:e1:d7:ae:7f:59:31:c9:61:94:45:54:
50:ff:9f:f4:aa:76:bc:0e:27:93:01:71:83:d2:2f:9d:53:5d:
f5:28:6f:40:86:2e:9d:90:93:aa:ec:c4:94:71:45:28:64:54:
c3:79:b9:2c:3e:a4:7e:3e:90:1a:87:71:b0:1b:f0:07:60:67:
3f:52:72:a6:72:62:c7:76:86:08:0e:69:46:4c:23:ce:f2:6d:
f1:27:32:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 18:55:42 2026 by rpki-client