
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/E3BDB79A422211F1A3DEFE36CE833773.roa
File: E3BDB79A422211F1A3DEFE36CE833773.roa (raw, json)
Hash identifier: 4cNB8HR7jBBzIhB59PKYMVnaRTQ1HFFB4LDOqYX8Kic=
Subject key identifier: F6:3E:1E:67:AE:32:85:B9:4B:97:64:25:52:0C:83:25:C0:34:E3:4E
Certificate issuer: /CN=A91AC5BC/serialNumber=F0CCF492065E93306D3BF3BEA3411AE4B687CF64
Certificate serial: 04
Authority key identifier: F0:CC:F4:92:06:5E:93:30:6D:3B:F3:BE:A3:41:1A:E4:B6:87:CF:64
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/E3BDB79A422211F1A3DEFE36CE833773.roa
Signing time: Mon 27 Apr 2026 10:21:44 +0000
ROA not before: Mon 27 Apr 2026 10:21:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149513
IP address blocks: 206.109.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.crl
rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC5BC, serialNumber=F0CCF492065E93306D3BF3BEA3411AE4B687CF64
Validity
Not Before: Apr 27 10:21:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69ef38b8-0070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c6:63:22:6a:e0:a8:c0:3b:fb:67:c8:41:e3:
c8:0c:d5:a6:74:c5:a0:30:b1:9c:da:39:c8:0b:b9:
0c:e4:59:8d:0f:9e:48:21:bc:5f:cf:6c:01:a6:be:
52:41:0f:a0:55:5f:d2:54:82:c4:fa:a4:04:df:6c:
1a:2c:e9:a4:20:7b:ff:a2:eb:6c:eb:25:04:f3:96:
76:cb:76:d8:3d:ce:16:72:69:d2:e0:19:0a:77:c5:
97:b8:16:f4:87:29:0e:fc:49:27:f3:65:63:08:a9:
ed:fd:60:49:b6:0e:88:4e:ce:02:f9:7e:5b:ce:b7:
e3:3f:e9:0c:60:70:56:22:88:12:d6:8d:3a:0f:4c:
ed:bc:11:80:b7:de:c9:fc:5d:d3:56:47:db:ae:2c:
59:c8:0d:dd:7e:ae:64:d5:bc:3e:f6:bf:60:a8:4d:
9e:c5:14:a0:3a:7c:25:fc:75:7e:1c:1d:c8:02:b5:
0b:c6:95:5d:0c:99:9d:6e:87:da:1a:77:0d:97:ee:
cb:1f:33:9b:f8:78:ae:28:47:69:17:4a:50:fc:9e:
82:20:b7:3d:1e:ab:95:d6:84:c8:3d:5c:06:8e:ce:
34:e7:c1:a8:74:56:72:85:18:91:da:a6:cf:5c:25:
d9:02:9a:c9:62:0b:aa:2d:ed:09:b5:78:1f:f4:e5:
36:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3E:1E:67:AE:32:85:B9:4B:97:64:25:52:0C:83:25:C0:34:E3:4E
X509v3 Authority Key Identifier:
keyid:F0:CC:F4:92:06:5E:93:30:6D:3B:F3:BE:A3:41:1A:E4:B6:87:CF:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/E3BDB79A422211F1A3DEFE36CE833773.roa
sbgp-ipAddrBlock: critical
IPv4:
206.109.68.0/22
Signature Algorithm: sha256WithRSAEncryption
61:91:cf:d8:26:4e:54:4b:cf:64:35:0f:de:c1:46:18:a3:24:
17:a3:78:3d:79:a8:f0:a8:00:54:9f:7e:c5:5a:08:25:17:50:
8d:d2:af:23:9e:d2:f2:95:ea:de:d9:ac:1b:92:76:f1:59:29:
8f:9f:2e:6e:a7:fd:63:f9:90:18:7f:cb:e7:87:93:49:7d:46:
6e:a9:82:9d:ee:ea:33:bf:57:b9:ad:a4:6d:a8:78:e8:7d:5a:
c0:8b:8b:49:f0:dc:03:cf:4f:08:2f:6d:df:cc:cb:2e:ba:66:
fd:db:3a:ec:45:4b:46:bc:38:89:f9:2c:d2:15:94:d3:62:c7:
3a:cf:82:60:4c:3d:99:03:58:e1:2d:e0:2e:a3:29:d6:73:28:
03:da:fa:23:cf:48:73:e5:97:ab:49:ec:27:bd:45:f3:f6:48:
2d:bd:78:5f:7b:a6:f9:2d:14:91:1c:74:a5:6c:6a:be:87:b5:
41:4c:17:d0:24:f0:da:51:3c:c3:74:1f:23:dd:36:a5:5e:37:
5c:3e:11:32:8d:f0:f6:e7:f3:72:d0:99:32:92:7a:4f:b4:bd:
63:d5:8b:fd:d2:0a:7d:f9:42:ff:25:af:9b:d7:91:34:4a:70:
11:49:73:cc:2b:09:b7:68:17:1f:04:07:c5:e1:1d:80:36:c2:
00:28:44:fb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 10:39:52 2026 by rpki-client