
$ rpki-client -vvf rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/87695D32591811EE973B1058C4F9AE02.roa
File: 87695D32591811EE973B1058C4F9AE02.roa (raw, json)
Hash identifier: OI2+qJAVneFLGz/M4RVXmY/qZKzcprsapI3tIgHwYvc=
Subject key identifier: 2B:6E:C7:56:7C:4F:BD:61:8E:5B:49:75:F3:60:A9:4A:EC:10:B6:5E
Certificate issuer: /CN=A91884A1/serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB
Certificate serial: 0202
Authority key identifier: 8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/87695D32591811EE973B1058C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:33:25 +0000
ROA not before: Wed 09 Jul 2025 04:40:23 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 151469
IP address blocks: 210.56.140.0/23 maxlen: 23
210.56.140.0/24 maxlen: 24
210.56.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl
rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 02:33:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 514 (0x202)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91884A1, serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB
Validity
Not Before: Jul 9 04:40:23 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a3ebc5-b80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:86:f1:71:05:ef:25:b7:22:25:d2:b1:1a:8f:
58:c6:74:cf:c4:bb:09:b3:03:ee:10:98:72:98:8b:
99:91:6f:0d:71:64:3d:c5:6b:cd:86:83:8d:dc:29:
2a:f2:1b:9a:09:72:ad:6d:0c:64:cd:8c:8c:1c:5d:
ef:8d:7e:07:3e:2c:08:f1:1a:c8:85:6a:7a:9b:e6:
61:15:bb:6d:95:aa:8a:70:7f:2a:92:52:18:3a:8f:
27:4c:b6:5f:96:3e:d9:a8:dd:4e:ea:b6:20:bd:e4:
88:ad:2a:da:55:30:c8:10:92:57:92:64:ae:b9:9a:
48:dc:01:b7:c2:37:01:e9:db:66:94:df:21:8e:ee:
22:f5:f8:28:8a:62:99:24:e2:81:1a:dd:3c:ea:fe:
f0:42:b1:81:66:0a:98:f1:81:8e:93:13:e8:a3:8e:
ca:e5:0b:45:73:a1:ba:cd:8c:b9:e0:03:c4:7c:c2:
42:aa:25:3e:32:a5:f5:c6:70:bf:67:5a:de:28:7d:
d0:48:25:ee:80:0c:cb:4b:7f:78:50:50:19:e4:5b:
08:8d:87:18:b6:be:c5:0b:6d:4d:a0:03:aa:f2:c6:
71:a1:92:fc:7d:8d:15:b2:8f:92:8e:cf:83:35:0b:
53:ef:62:3f:62:13:53:65:39:6c:ac:3d:21:ab:d5:
ce:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6E:C7:56:7C:4F:BD:61:8E:5B:49:75:F3:60:A9:4A:EC:10:B6:5E
X509v3 Authority Key Identifier:
keyid:8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/87695D32591811EE973B1058C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.56.140.0/23
Signature Algorithm: sha256WithRSAEncryption
76:04:54:34:ad:9a:95:8d:e4:ad:f2:8d:b9:42:cd:8b:5d:b6:
78:7a:f1:20:8b:1e:08:79:44:d2:4b:40:90:4e:3b:17:60:24:
a1:ee:25:85:45:95:2c:37:b4:ce:20:59:7f:fd:29:04:20:eb:
40:ea:f6:a2:2d:a2:82:75:d2:64:cc:5d:40:36:f0:43:d9:e9:
6e:67:92:bb:03:eb:1c:80:ae:26:ef:a0:d7:a8:4d:38:d1:bb:
e9:37:cd:f8:9a:b1:ee:3f:86:13:37:3c:82:1f:0a:8b:79:ec:
f9:7d:d2:f3:23:21:7c:0a:a7:5e:c6:1c:18:5d:4e:9b:c6:97:
f3:42:93:9b:e3:ff:d6:6e:41:01:b8:aa:a0:11:6c:3d:97:74:
f2:45:4b:ef:18:04:3c:ad:f8:65:50:64:a2:4a:86:5f:77:40:
70:44:45:1d:32:5f:a4:56:2f:0d:3b:72:e3:29:80:36:cc:58:
7b:77:86:47:dd:78:97:0d:09:fe:0e:b7:28:b9:a9:dc:cb:db:
bd:17:d0:e5:00:7f:83:00:37:d1:4c:b2:b7:33:b5:15:db:da:
cd:43:04:89:10:0d:15:cb:78:13:92:08:84:23:b8:fd:ae:47:
72:64:8a:66:c5:c6:b4:f0:1b:15:c4:3b:7a:ee:97:10:8a:8c:
04:bb:70:f8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODg0QTExMTAvBgNVBAUTKDhGNzAxNkRBMjJGMjk2NEI1NkY0MkNGNDZEOUYxMjNB
RjM2ODMxQUIwHhcNMjUwNzA5MDQ0MDIzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZWJjNS1iODBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy4bxcQXvJbciJdKxGo9YxnTPxLsJswPuEJhymIuZkW8NcWQ9xWvNhoON3Ckq
8huaCXKtbQxkzYyMHF3vjX4HPiwI8RrIhWp6m+ZhFbttlaqKcH8qklIYOo8nTLZf
lj7ZqN1O6rYgveSIrSraVTDIEJJXkmSuuZpI3AG3wjcB6dtmlN8hju4i9fgoimKZ
JOKBGt086v7wQrGBZgqY8YGOkxPoo47K5QtFc6G6zYy54APEfMJCqiU+MqX1xnC/
Z1reKH3QSCXugAzLS394UFAZ5FsIjYcYtr7FC21NoAOq8sZxoZL8fY0Vso+Sjs+D
NQtT72I/YhNTZTlsrD0hq9XOOQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCtux1Z8
T71hjltJdfNgqUrsELZeMB8GA1UdIwQYMBaAFI9wFtoi8pZLVvQs9G2fEjrzaDGr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODRBMS9EN0RCMUM2MDE0
OUUxMUVFQUJEQzc1MzJDNEY5QUUwMi9qM0FXMmlMeWxrdFc5Q3owYlo4U092Tm9N
YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ozQVcyaUx5bGt0VzlDejBiWjhTT3ZOb01hcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODg0QTEvRDdEQjFDNjAxNDlFMTFFRUFCREM3NTMyQzRGOUFFMDIvODc2OTVEMzI1
OTE4MTFFRTk3M0IxMDU4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQB0jiMMA0GCSqGSIb3DQEBCwUAA4IBAQB2BFQ0rZqVjeSt8o25Qs2L
XbZ4evEgix4IeUTSS0CQTjsXYCSh7iWFRZUsN7TOIFl//SkEIOtA6vaiLaKCddJk
zF1ANvBD2eluZ5K7A+scgK4m76DXqE040bvpN834mrHuP4YTNzyCHwqLeez5fdLz
IyF8CqdexhwYXU6bxpfzQpOb4//WbkEBuKqgEWw9l3TyRUvvGAQ8rfhlUGSiSoZf
d0BwREUdMl+kVi8NO3LjKYA2zFh7d4ZH3XiXDQn+Drcouancy9u9F9DlAH+DADfR
TLK3M7UV29rNQwSJEA0Vy3gTkgiEI7j9rkdyZIpmxca08BsVxDt67pcQiowEu3D4
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:11:48 2026 by rpki-client