
$ rpki-client -vvf rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/B240CFC23F8A11F0B3F03A67C4F9AE02.roa
File: B240CFC23F8A11F0B3F03A67C4F9AE02.roa (raw, json)
Hash identifier: 1jd/x+c/FOgCs+jTMrNMeNYXR2ODxGAIH6mfN2rcKo4=
Subject key identifier: 06:B3:63:B2:75:29:B9:13:40:4C:C7:43:4A:24:FA:D1:9D:5F:38:9B
Certificate issuer: /CN=A91426E8/serialNumber=F3718957050C4BCE14A4EC38EAACEE9C74244C4F
Certificate serial: 94
Authority key identifier: F3:71:89:57:05:0C:4B:CE:14:A4:EC:38:EA:AC:EE:9C:74:24:4C:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/B240CFC23F8A11F0B3F03A67C4F9AE02.roa
Signing time: Tue 03 Mar 2026 07:44:52 +0000
ROA not before: Tue 03 Mar 2026 07:44:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132504
IP address blocks: 223.27.116.0/23 maxlen: 23
223.27.118.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.crl
rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:37:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148 (0x94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91426E8, serialNumber=F3718957050C4BCE14A4EC38EAACEE9C74244C4F
Validity
Not Before: Mar 3 07:44:52 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a69174-84a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ca:ce:61:d9:4a:57:98:ec:46:9f:5d:70:0e:
6e:cd:e2:50:5e:67:a8:3e:19:c2:7c:df:fd:d8:a8:
e5:58:7d:ed:ab:d7:26:31:74:ac:f6:07:64:3b:a6:
b1:aa:12:0c:7c:ac:ea:6a:0d:69:69:36:11:39:b5:
ae:7b:61:be:6e:2a:f6:6a:f4:8f:ed:1a:c2:c6:76:
09:55:7e:70:df:d1:14:86:f7:81:a5:6b:2e:b7:46:
8a:d9:66:91:45:05:c9:b0:c2:b7:9a:16:47:6d:71:
7f:7f:20:7a:58:7c:c5:b9:c3:80:ab:cd:53:24:82:
54:be:4f:11:76:f7:69:19:ae:97:f0:8b:fb:ad:a1:
63:43:72:1d:47:d9:fa:5b:88:25:2d:97:c2:3c:28:
a6:7b:47:39:ed:27:15:70:66:75:00:e5:bd:f8:46:
04:12:1a:8e:f0:0f:88:3d:27:09:08:a8:2a:16:67:
a7:d6:0e:19:e1:fd:8c:73:70:79:89:b7:72:76:e7:
36:0f:21:02:14:6f:14:98:f7:6c:e6:e3:a8:1b:c3:
c3:ad:53:20:99:26:df:d4:2c:fe:21:3b:9d:da:5e:
ee:41:f9:f7:b1:e7:3d:13:24:74:05:09:08:d8:ea:
89:db:5d:2b:98:db:71:17:04:79:68:b3:ba:07:09:
fd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B3:63:B2:75:29:B9:13:40:4C:C7:43:4A:24:FA:D1:9D:5F:38:9B
X509v3 Authority Key Identifier:
keyid:F3:71:89:57:05:0C:4B:CE:14:A4:EC:38:EA:AC:EE:9C:74:24:4C:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/B240CFC23F8A11F0B3F03A67C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
223.27.116.0/22
Signature Algorithm: sha256WithRSAEncryption
db:95:1f:bc:eb:f2:40:86:38:16:95:c3:f8:ea:f4:68:4f:29:
3b:7f:53:44:c2:d3:cb:47:53:90:ce:89:02:7b:1d:ab:94:7a:
9d:45:ff:b2:b8:df:40:9d:dc:d8:c8:1c:38:96:a7:a7:92:aa:
5e:8d:ff:72:48:85:f3:ad:7e:e3:0d:03:c6:41:58:a4:39:1a:
3e:d6:7a:cc:b7:f9:c9:a7:9b:19:2e:8d:72:14:7c:2c:e8:32:
8c:e1:9b:16:07:cf:d0:c1:25:13:85:0d:58:85:ce:e1:79:38:
b1:1c:20:14:cb:dc:a8:93:25:81:79:e9:14:91:7f:5b:77:e7:
3e:79:a4:04:4b:fb:d4:b3:fd:95:d1:0f:03:90:d2:20:89:42:
d1:91:48:35:a1:d3:43:fc:b5:68:ad:d9:a2:18:34:82:6d:c3:
1e:3a:ff:9b:a8:d0:9a:28:eb:8c:75:fe:35:1a:c4:42:26:9a:
64:7f:83:cb:e3:d0:70:85:58:1e:a8:94:50:a3:ad:e8:8d:ce:
cc:31:21:97:fd:e8:8e:33:e5:af:78:8b:dc:1f:a1:80:0a:66:
91:10:36:c0:d3:46:13:0c:14:dc:cf:2c:a5:c4:de:77:d1:22:
c9:b1:86:65:de:90:79:96:97:fe:b5:f1:27:09:9d:8e:c5:9a:
a5:4f:7a:05
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI2RTgxMTAvBgNVBAUTKEYzNzE4OTU3MDUwQzRCQ0UxNEE0RUMzOEVBQUNFRTlD
NzQyNDRDNEYwHhcNMjYwMzAzMDc0NDUyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2OTE3NC04NGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhsrOYdlKV5jsRp9dcA5uzeJQXmeoPhnCfN/92KjlWH3tq9cmMXSs9gdkO6ax
qhIMfKzqag1paTYRObWue2G+bir2avSP7RrCxnYJVX5w39EUhveBpWsut0aK2WaR
RQXJsMK3mhZHbXF/fyB6WHzFucOAq81TJIJUvk8RdvdpGa6X8Iv7raFjQ3IdR9n6
W4glLZfCPCime0c57ScVcGZ1AOW9+EYEEhqO8A+IPScJCKgqFmen1g4Z4f2Mc3B5
ibdyduc2DyECFG8UmPds5uOoG8PDrVMgmSbf1Cz+ITud2l7uQfn3sec9EyR0BQkI
2OqJ210rmNtxFwR5aLO6Bwn9iwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAazY7J1
KbkTQEzHQ0ok+tGdXzibMB8GA1UdIwQYMBaAFPNxiVcFDEvOFKTsOOqs7px0JExP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjZFOC84RDVBQTE3QTNG
NzUxMUYwOTYyMzJBMTFDNEY5QUUwMi84M0dKVndVTVM4NFVwT3c0NnF6dW5IUWtU
RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzgzR0pWd1VNUzg0VXBPdzQ2cXp1bkhRa1RFOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDI2RTgvOEQ1QUExN0EzRjc1MTFGMDk2MjMyQTExQzRGOUFFMDIvQjI0MENGQzIz
RjhBMTFGMEIzRjAzQTY3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQC3xt0MA0GCSqGSIb3DQEBCwUAA4IBAQDblR+86/JAhjgWlcP46vRo
Tyk7f1NEwtPLR1OQzokCex2rlHqdRf+yuN9AndzYyBw4lqenkqpejf9ySIXzrX7j
DQPGQVikORo+1nrMt/nJp5sZLo1yFHws6DKM4ZsWB8/QwSUThQ1Yhc7heTixHCAU
y9yokyWBeekUkX9bd+c+eaQES/vUs/2V0Q8DkNIgiULRkUg1odND/LVordmiGDSC
bcMeOv+bqNCaKOuMdf41GsRCJppkf4PL49BwhVgeqJRQo63ojc7MMSGX/eiOM+Wv
eIvcH6GACmaREDbA00YTDBTczyylxN530SLJsYZl3pB5lpf+tfEnCZ2OxZqlT3oF
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:58:20 2026 by rpki-client