
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/D2A3A988902511F0B63B0A6EC4F9AE02.roa
File: D2A3A988902511F0B63B0A6EC4F9AE02.roa (raw, json)
Hash identifier: dmuwaSGWHJEp3qUCeEei6uqK+13TFdbeP+m8d7qkuQ4=
Subject key identifier: 61:BD:22:6B:FB:73:82:E2:3B:18:1A:6C:FD:95:BE:30:DD:2C:73:42
Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial: 3828
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/D2A3A988902511F0B63B0A6EC4F9AE02.roa
Signing time: Thu 08 Oct 2026 15:15:13 +0000
ROA not before: Thu 08 Oct 2026 15:15:13 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 22773
IP address blocks: 175.29.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 14:28:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14376 (0x3828)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Validity
Not Before: Oct 8 15:15:13 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ac7b381-d34c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a0:54:2e:0a:d7:25:0c:c0:12:97:0b:c4:4b:
60:6f:fe:3d:4c:6c:e5:e0:29:7b:d9:d2:b7:d7:23:
6b:e9:85:e3:d2:4a:f7:37:eb:51:59:b2:0c:a6:d2:
f6:2f:d3:83:73:a9:d2:da:11:02:db:3e:24:55:98:
9f:20:32:7a:01:63:38:18:9b:ea:bb:ce:a3:b1:5b:
fb:d6:3f:4d:80:23:2c:32:4c:94:90:f2:ff:4c:be:
b6:a8:73:50:64:2a:93:e2:62:49:c0:32:61:eb:4d:
e6:b4:7b:d8:92:e1:84:57:41:b9:e6:ad:01:18:b3:
08:10:37:38:4f:3b:f3:49:85:2a:fd:a2:06:fe:5c:
d3:c3:df:56:a2:01:33:c2:51:c5:54:ee:67:7e:0a:
1e:de:53:7d:38:e6:af:0d:37:0a:6a:28:db:2c:8c:
78:e7:4b:80:f8:bb:6f:83:55:ab:69:09:5c:d6:5d:
42:9c:be:bb:e5:80:98:8d:55:79:29:5b:ea:19:b1:
ee:7e:45:25:b0:52:bc:83:9a:8b:9d:05:05:98:2f:
c0:1c:36:4f:10:ce:d0:e9:1a:aa:d3:b0:03:aa:b5:
06:1c:88:f5:e7:81:13:89:fb:65:f4:32:73:67:04:
9e:29:c5:50:f7:fe:7a:7e:75:2e:94:fd:70:d7:f2:
9d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BD:22:6B:FB:73:82:E2:3B:18:1A:6C:FD:95:BE:30:DD:2C:73:42
X509v3 Authority Key Identifier:
keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/D2A3A988902511F0B63B0A6EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
175.29.4.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:ac:23:c3:9d:ca:ba:35:6f:9f:1c:af:34:ee:c3:b6:db:5c:
fe:54:92:58:ab:4e:7d:33:94:0b:1f:8c:7f:8a:bb:e2:cd:bc:
13:b6:eb:d0:6f:92:ac:ab:de:2b:6a:db:f1:ef:ca:39:af:e8:
5f:b0:4e:f5:bd:6b:6a:e2:b1:7c:ab:e2:60:21:a2:69:ff:8b:
fa:91:f9:44:62:28:70:01:8c:3a:de:a3:46:f3:7c:94:a7:60:
83:b7:86:c5:94:32:c4:03:17:06:ca:73:fb:21:14:96:dd:08:
a7:aa:c5:75:bf:9e:c6:6e:cf:a4:ac:8f:40:d6:82:42:c0:71:
be:0f:f5:da:7d:35:e9:27:45:bd:b9:bb:f4:90:92:af:d6:63:
15:70:cc:57:a4:27:18:23:eb:d9:cf:26:49:92:9c:f8:6d:33:
3f:63:cb:c7:68:9d:2f:4a:1d:e7:7f:a6:4a:12:f7:7c:1e:ac:
99:28:84:d4:42:cc:fc:04:7f:01:39:a4:b6:5a:2c:b6:df:4e:
64:94:29:38:72:8e:f3:ff:dd:a2:62:78:df:c9:b8:26:60:33:
12:ac:8b:1c:a8:5b:52:97:d6:bf:1b:c5:c7:ee:d8:2a:70:0a:
2a:8a:32:eb:b5:65:42:d1:83:58:34:fe:e0:bf:dd:ea:92:cb:
04:67:2c:6f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICOCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTEwQUQxMTAvBgNVBAUTKEUxRTY5MDhBMTZFQzgxM0RBQTBCRDY0Nzk3QUU5REJE
RUIwOTIyNTcwHhcNMjYxMDA4MTUxNTEzWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWM3YjM4MS1kMzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArqBULgrXJQzAEpcLxEtgb/49TGzl4Cl72dK31yNr6YXj0kr3N+tRWbIMptL2
L9ODc6nS2hEC2z4kVZifIDJ6AWM4GJvqu86jsVv71j9NgCMsMkyUkPL/TL62qHNQ
ZCqT4mJJwDJh603mtHvYkuGEV0G55q0BGLMIEDc4TzvzSYUq/aIG/lzTw99WogEz
wlHFVO5nfgoe3lN9OOavDTcKaijbLIx450uA+Ltvg1WraQlc1l1CnL675YCYjVV5
KVvqGbHufkUlsFK8g5qLnQUFmC/AHDZPEM7Q6Rqq07ADqrUGHIj154ETiftl9DJz
ZwSeKcVQ9/56fnUulP1w1/KdbwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGG9Imv7
c4LiOxgabP2VvjDdLHNCMB8GA1UdIwQYMBaAFOHmkIoW7IE9qgvWR5eunb3rCSJX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTBBRC84QjVFNzVGRTFE
ODcxMUUyODRCMzgzREYwOEIwMkNEMi80ZWFRaWhic2dUMnFDOVpIbDY2ZHZlc0pJ
bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRlYVFpaGJzZ1QycUM5WkhsNjZkdmVzSklsYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTEwQUQvOEI1RTc1RkUxRDg3MTFFMjg0QjM4M0RGMDhCMDJDRDIvRDJBM0E5ODg5
MDI1MTFGMEI2M0IwQTZFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCrx0EMA0GCSqGSIb3DQEBCwUAA4IBAQCKrCPDncq6NW+fHK807sO2
21z+VJJYq059M5QLH4x/irvizbwTtuvQb5Ksq94ratvx78o5r+hfsE71vWtq4rF8
q+JgIaJp/4v6kflEYihwAYw63qNG83yUp2CDt4bFlDLEAxcGynP7IRSW3QinqsV1
v57Gbs+krI9A1oJCwHG+D/XafTXpJ0W9ubv0kJKv1mMVcMxXpCcYI+vZzyZJkpz4
bTM/Y8vHaJ0vSh3nf6ZKEvd8HqyZKITUQsz8BH8BOaS2Wiy2305klCk4co7z/92i
YnjfybgmYDMSrIscqFtSl9a/G8XH7tgqcAoqijLrtWVC0YNYNP7gv93qkssEZyxv
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:22:42 2026 by rpki-client