
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/A194680629DA11F1A7234B1B9B833773.roa
File: A194680629DA11F1A7234B1B9B833773.roa (raw, json)
Hash identifier: m+d8rKrNikI8my7pp1HxKiLAoYdPJmoBfyQi7R0kHN4=
Subject key identifier: 54:E9:D0:DA:39:6A:38:D5:A3:25:D3:A1:15:61:B8:45:91:1C:6B:B0
Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial: 25
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/A194680629DA11F1A7234B1B9B833773.roa
Signing time: Fri 27 Mar 2026 12:44:02 +0000
ROA not before: Fri 27 Mar 2026 12:44:02 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 4515
IP address blocks: 206.161.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 17:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Validity
Not Before: Mar 27 12:44:02 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69c67b91-eaf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:19:47:5e:b5:19:7b:34:19:f6:a1:cb:0a:79:
5e:fa:1a:84:0d:5e:36:60:99:80:1a:30:33:0e:85:
a5:84:cb:b8:14:1f:eb:43:ec:10:8c:41:26:da:49:
c3:c7:99:3d:05:ac:80:26:6c:34:e6:aa:8e:0f:0d:
df:a5:0d:e1:81:4c:5a:1d:2d:8c:20:1f:12:7e:9f:
b7:b9:d9:a3:dd:a4:78:cd:24:59:4b:b4:56:49:77:
2a:04:91:75:57:f9:62:43:e9:4c:a7:79:0b:f0:b5:
bf:e6:03:d7:fb:d9:9b:20:e1:5c:a8:e7:40:cc:58:
e0:4d:8f:0b:e7:1e:80:f2:e7:85:c7:0e:76:6c:a8:
f8:7e:ed:e5:fc:23:ff:63:f1:f6:52:39:00:8b:46:
05:10:53:31:09:23:e7:d7:d6:db:4b:2a:bf:29:ef:
7d:80:cc:13:d6:f4:6e:eb:03:56:b9:e8:86:15:b7:
77:64:ec:5c:8f:42:9a:7e:24:fb:9a:f9:92:63:6b:
20:98:77:49:0e:f1:00:97:41:9a:14:63:c0:71:92:
b9:72:b6:1f:69:3e:21:85:13:36:1e:e4:63:0e:60:
98:88:a6:e0:b5:49:d3:40:c3:dd:de:61:f7:57:20:
95:95:26:64:ae:59:bf:b5:02:07:e8:dd:fa:34:2f:
79:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E9:D0:DA:39:6A:38:D5:A3:25:D3:A1:15:61:B8:45:91:1C:6B:B0
X509v3 Authority Key Identifier:
keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/A194680629DA11F1A7234B1B9B833773.roa
sbgp-ipAddrBlock: critical
IPv4:
206.161.62.0/24
Signature Algorithm: sha256WithRSAEncryption
65:44:1f:bf:d6:e3:7d:e2:7e:d5:41:fc:34:b1:17:d2:b9:3e:
4a:63:fd:cf:26:9a:12:a2:eb:92:87:63:03:0f:6f:ca:08:f3:
3f:41:e4:56:45:9c:93:4c:24:77:c3:e6:a3:16:cb:66:13:53:
ee:73:65:e8:2f:c2:6b:9c:ed:bc:94:39:d2:3e:32:bd:5f:23:
88:69:0c:fa:8c:a8:4e:73:02:d8:43:8f:e5:10:fe:d8:cf:81:
06:9f:8d:c8:5c:de:bc:2a:57:30:91:ec:bd:cf:30:6b:54:be:
42:dc:dc:4a:36:51:fc:6b:11:e8:c4:55:be:06:e0:7d:85:aa:
7a:2e:84:6f:c4:da:e1:f2:51:98:4d:c0:6c:0e:ca:69:fc:3c:
4a:91:09:12:58:88:8f:0b:b8:5b:e3:50:cf:91:e1:25:aa:a8:
f0:94:d9:ed:f0:36:d1:a1:42:93:7c:b8:3f:5a:73:a3:1f:45:
61:7f:b1:8c:5f:18:e2:13:e4:a7:f7:1b:11:8c:64:54:0c:c9:
74:4e:7b:7c:4e:a9:fe:aa:27:b8:92:84:ac:bd:3b:5d:56:57:
ff:38:d1:47:cc:f1:34:6e:2e:fc:88:5f:b0:a7:be:af:f5:37:
ee:91:a0:7f:44:ad:f9:da:42:f8:f0:86:3b:89:69:88:39:92:
99:df:4d:75
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Mar 28 19:00:22 2026 by rpki-client