
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/E30E4FF605E511EF868E0F6DC4F9AE02.roa
File: E30E4FF605E511EF868E0F6DC4F9AE02.roa (raw, json)
Hash identifier: fPHnV7tC8/TIuQ+hNAsVmv5SckAHXIfMYlrVkbpdH1g=
Subject key identifier: 07:E9:E6:F3:68:84:82:6C:2B:65:63:B3:DE:39:E2:35:1F:C3:32:0F
Certificate issuer: /CN=A91A5213/serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416
Certificate serial: 0164
Authority key identifier: BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/E30E4FF605E511EF868E0F6DC4F9AE02.roa
Signing time: Mon 02 Mar 2026 15:05:00 +0000
ROA not before: Sat 19 Apr 2025 05:31:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152650
IP address blocks: 202.6.86.0/24 maxlen: 24
2001:df3:8ec0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl
rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:07:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 356 (0x164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5213, serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416
Validity
Not Before: Apr 19 05:31:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a5a71c-5530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:79:32:16:b8:6d:d4:55:7d:04:4d:3b:75:d5:
52:0c:e3:4e:d8:91:b5:ae:50:15:5d:fc:ec:0e:70:
3a:a9:a7:a1:4c:18:30:29:a4:3d:67:9f:49:cb:b9:
c9:50:c5:2d:27:55:1e:c9:ab:a7:18:20:65:b0:2b:
0d:1f:99:77:96:08:1a:16:d7:ea:af:e8:7f:93:bd:
ff:70:11:98:f6:5d:18:d4:56:b5:63:5d:c2:71:0f:
0e:72:3d:ec:84:db:60:7d:5e:48:9a:97:50:b0:56:
16:1b:ad:cb:b4:49:24:d8:54:c9:4a:54:c4:68:0f:
2c:11:5a:34:77:55:a3:30:37:92:c9:b8:6c:d9:e4:
a8:52:fa:1b:c2:ef:99:1b:c0:ca:76:7c:26:02:0e:
f8:37:ba:b6:f3:22:d3:54:69:ea:e0:d5:7a:34:63:
e2:7e:79:25:1a:fe:b4:2c:a2:df:d8:34:07:52:db:
10:ae:eb:29:3c:3e:4a:e0:1f:87:6a:a9:03:cf:20:
3d:ae:16:9c:1d:c4:c8:6a:ea:c0:4c:b9:2b:43:c2:
80:ba:bb:f8:82:0b:75:30:08:dc:92:46:e8:d8:ce:
f1:6b:f3:af:0b:e6:31:0a:e6:27:68:d1:a0:75:6b:
e9:56:4e:bb:d0:15:50:49:bd:65:17:0d:03:e8:f4:
06:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E9:E6:F3:68:84:82:6C:2B:65:63:B3:DE:39:E2:35:1F:C3:32:0F
X509v3 Authority Key Identifier:
keyid:BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/E30E4FF605E511EF868E0F6DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.6.86.0/24
IPv6:
2001:df3:8ec0::/48
Signature Algorithm: sha256WithRSAEncryption
65:9d:37:48:69:c2:e0:81:1c:39:48:de:63:06:81:b1:3f:92:
27:ac:8d:3e:e2:14:28:fb:fa:6a:bb:7e:dc:e9:3e:8a:d6:15:
c5:eb:d6:bc:7e:9d:94:01:ce:60:bc:32:6f:b6:8d:61:cb:6e:
b6:27:71:ba:0a:6a:f8:98:8d:d0:20:80:c6:d3:67:9b:8c:f1:
40:87:fb:18:ad:be:1f:00:8d:4b:f5:51:df:fb:b3:64:77:64:
10:dd:8f:cc:34:93:0f:17:bd:31:87:ab:9a:43:53:93:60:5d:
ab:31:9d:08:b9:ce:5d:75:ed:c5:4f:f9:ae:28:74:3b:75:76:
35:5d:af:f6:c7:94:d0:17:d0:5d:eb:53:09:bb:9a:37:de:e5:
2c:19:32:f0:02:12:2a:4e:4c:9f:f3:38:be:56:bc:6d:12:d7:
01:3c:06:4c:35:a5:e9:5b:85:93:8e:58:ba:19:83:63:48:88:
6f:f8:af:06:6f:c0:c3:fa:68:e1:3b:3f:c9:3f:aa:2c:82:f9:
17:69:cb:18:ba:27:0e:b4:10:ab:5b:42:f5:ff:d2:bb:00:08:
cc:17:07:7c:d9:6c:07:fc:c8:60:e3:64:05:5b:6e:b6:67:23:
92:85:2b:5e:95:a8:a0:bc:5e:b8:6b:bd:50:f6:97:01:ca:89:
fe:2f:60:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:55:54 2026 by rpki-client