
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/E67F9A6229F311F1A8F3E0E1A2833773.roa
File: E67F9A6229F311F1A8F3E0E1A2833773.roa (raw, json)
Hash identifier: XEZVL7Alh83OFsk2zI0eWKkX8Eqh/6+6slghZIlo1CU=
Subject key identifier: D4:8A:0C:60:B4:1F:C5:5F:89:80:9E:D8:13:28:EE:ED:E8:4F:83:52
Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial: 50
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/E67F9A6229F311F1A8F3E0E1A2833773.roa
Signing time: Fri 27 Mar 2026 15:44:55 +0000
ROA not before: Fri 27 Mar 2026 15:44:55 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 10082
IP address blocks: 63.217.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 17:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Validity
Not Before: Mar 27 15:44:55 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69c6a5f6-2d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e2:85:ea:0e:c4:5e:fb:47:c7:42:93:ce:97:
9c:e2:99:69:b6:c7:45:a1:61:e9:c9:cc:61:48:1a:
46:38:6f:17:ad:16:44:57:12:20:75:20:f0:dc:c2:
d1:83:68:a4:82:d4:5f:7c:41:ac:22:18:1c:4b:d2:
12:f4:93:d8:b8:61:ef:7d:26:34:8f:94:20:cb:17:
0f:65:c9:3e:7c:76:35:cd:9c:d6:fb:b7:80:8b:8d:
d8:01:81:ef:86:fa:fa:46:41:b9:dc:db:4a:3c:46:
12:69:5b:9e:6b:a7:2c:b5:48:3b:bf:59:61:c0:b7:
b0:43:43:a0:08:19:ac:01:6a:dd:80:6a:5b:8b:a8:
98:bc:f5:63:6f:b8:fd:e1:38:22:06:23:6f:6f:e4:
f4:2b:e9:3a:33:35:db:2f:1d:b3:40:f9:83:0f:aa:
66:b1:d6:ab:3b:0b:69:4e:ff:73:a7:02:38:f4:f2:
e1:c2:8f:0d:b5:96:27:6f:3b:c0:50:70:df:81:e2:
f6:f6:45:82:05:78:f0:a1:a5:86:d3:49:ea:c7:0b:
74:3e:7d:aa:85:be:1e:7c:a7:0c:af:15:b8:f3:97:
27:00:3d:78:3d:93:43:05:e4:1d:cb:45:36:aa:37:
c9:b5:60:ab:74:b0:09:f5:8c:ce:2f:c4:3e:22:29:
bf:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8A:0C:60:B4:1F:C5:5F:89:80:9E:D8:13:28:EE:ED:E8:4F:83:52
X509v3 Authority Key Identifier:
keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/E67F9A6229F311F1A8F3E0E1A2833773.roa
sbgp-ipAddrBlock: critical
IPv4:
63.217.82.0/24
Signature Algorithm: sha256WithRSAEncryption
12:be:41:7f:9b:34:3c:2d:d5:19:61:3a:69:ac:40:a1:c6:b1:
6e:1e:e3:8c:0b:d0:51:6a:2b:40:5a:5f:d9:36:cc:6d:2b:ab:
ee:84:12:39:25:c8:26:29:ec:09:8f:f0:ca:9e:39:3f:bc:22:
c6:52:b4:01:6f:34:18:77:8c:99:c4:e3:82:5e:6e:47:fb:9c:
0e:da:8e:01:63:95:8e:9e:69:43:ca:78:b4:c1:03:a5:7f:c8:
c9:9f:2c:10:56:89:97:26:ec:2e:f8:16:fa:f6:16:0e:8d:72:
d2:ea:2a:4a:ad:1e:e2:18:59:81:ff:29:4d:54:87:43:f7:bc:
a3:6a:20:eb:59:9c:5d:48:c3:a6:67:5f:33:e0:d1:8f:d5:72:
8a:77:75:ad:79:4d:65:ef:d7:07:5c:0f:9a:b0:5e:11:4b:02:
f3:ff:d5:65:26:a8:19:e4:fe:9a:9c:a7:b7:7d:3a:3c:d1:a1:
f2:84:1d:28:18:75:54:62:f7:29:e7:14:10:a3:d6:44:a1:c5:
e7:14:6d:7f:43:f5:37:b5:3b:65:fa:4e:e8:9b:81:36:65:2c:
0c:7b:70:9f:67:cf:1e:aa:fc:94:37:91:4e:5c:85:65:b1:ba:
61:59:a1:bb:30:ce:5e:6e:99:56:9b:9e:70:b0:91:24:9d:6b:
12:8a:47:bf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Mar 28 19:00:21 2026 by rpki-client