
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BBA31/79870596893D11F0BCE7A720C4F9AE02/D7F890AE893D11F0AE546821C4F9AE02.roa
File: D7F890AE893D11F0AE546821C4F9AE02.roa (raw, json)
Hash identifier: YG5RTRA5/Y84ll917HVam9J8suUEN9L30KUhKDgXpZc=
Subject key identifier: 4D:74:82:80:FB:6F:D2:69:52:5A:B0:73:9B:6E:92:A3:B7:35:D9:83
Certificate issuer: /CN=A91BBA31/serialNumber=12097AAF857B62BD34AA273D3F9B3ED9CE6DF161
Certificate serial: B9
Authority key identifier: 12:09:7A:AF:85:7B:62:BD:34:AA:27:3D:3F:9B:3E:D9:CE:6D:F1:61
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Egl6r4V7Yr00qic9P5s-2c5t8WE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA31/79870596893D11F0BCE7A720C4F9AE02/D7F890AE893D11F0AE546821C4F9AE02.roa
Signing time: Tue 25 Aug 2026 06:57:11 +0000
ROA not before: Tue 25 Aug 2026 06:57:11 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 154089
IP address blocks: 192.135.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBA31/79870596893D11F0BCE7A720C4F9AE02/Egl6r4V7Yr00qic9P5s-2c5t8WE.crl
rsync://rpki.apnic.net/member_repository/A91BBA31/79870596893D11F0BCE7A720C4F9AE02/Egl6r4V7Yr00qic9P5s-2c5t8WE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Egl6r4V7Yr00qic9P5s-2c5t8WE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 06:53:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185 (0xb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBA31, serialNumber=12097AAF857B62BD34AA273D3F9B3ED9CE6DF161
Validity
Not Before: Aug 25 06:57:11 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a8d3cc7-524a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:61:11:8e:b7:d8:a6:ff:bb:a5:ec:8d:6e:6d:
79:d1:81:b5:d4:95:7e:5c:b9:c8:24:cd:cc:f6:ad:
15:86:0d:90:2b:bf:cc:66:d7:77:b2:ba:5c:a1:83:
8a:75:54:ab:17:f0:d5:ea:39:0a:d8:76:0d:db:91:
15:db:80:b1:cc:ad:ef:92:6f:5a:e8:d6:e7:7d:61:
2a:25:fc:fd:6c:0a:dc:f1:c9:4a:c0:ef:7c:29:37:
eb:33:3c:0a:b1:ac:59:46:30:08:06:fe:5d:c4:98:
4c:3c:83:ba:01:4b:68:97:cc:e2:da:05:40:1d:70:
19:a8:5e:06:e0:23:68:9b:65:8c:d3:fd:8f:c4:81:
e6:d6:77:b1:a4:09:00:bb:39:28:47:7e:92:e9:da:
0e:5d:0c:60:77:c9:61:4c:ef:5c:bd:8d:b1:08:fa:
48:1c:b8:62:4c:80:cf:1e:1f:c1:3e:77:18:41:20:
a5:35:5e:0c:c7:e5:ae:72:e2:15:0c:b2:f9:82:b2:
3c:ce:ca:7f:4e:3c:fd:6a:56:5f:57:03:2e:ad:cd:
fa:4b:2f:fa:df:fa:6e:70:2a:e8:08:f6:5d:40:ef:
3d:5c:a5:e7:8f:f0:97:13:63:91:ed:11:ec:ce:59:
33:b0:61:d1:7d:3b:63:a2:a0:6e:08:6e:07:b9:16:
3f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:74:82:80:FB:6F:D2:69:52:5A:B0:73:9B:6E:92:A3:B7:35:D9:83
X509v3 Authority Key Identifier:
keyid:12:09:7A:AF:85:7B:62:BD:34:AA:27:3D:3F:9B:3E:D9:CE:6D:F1:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBA31/79870596893D11F0BCE7A720C4F9AE02/Egl6r4V7Yr00qic9P5s-2c5t8WE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Egl6r4V7Yr00qic9P5s-2c5t8WE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA31/79870596893D11F0BCE7A720C4F9AE02/D7F890AE893D11F0AE546821C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
192.135.89.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:cf:a0:66:06:f3:14:74:db:a2:65:79:92:1c:a9:ae:8b:5d:
67:82:45:90:58:a0:26:38:ba:d2:31:ee:b5:19:ff:5f:92:e0:
61:02:5d:be:a9:4d:71:84:d8:d5:c2:bb:61:b2:3a:0a:a6:ae:
16:36:ac:30:34:2a:21:0c:04:ea:f7:4a:35:93:f3:7b:d1:c0:
ca:16:7e:f4:69:5d:a1:b5:b9:7a:de:a2:28:43:a5:5d:4a:cf:
07:f8:66:36:fb:60:ac:02:55:03:ab:37:87:50:7b:bf:41:20:
8c:88:31:7d:c9:16:4f:fc:ce:fe:c0:eb:18:75:7d:13:c2:be:
d7:2a:f8:ce:db:55:e6:4a:40:69:6c:f3:19:f9:cd:64:c4:a9:
6d:0b:51:64:bf:16:ff:ae:47:dc:a2:ec:78:83:25:2a:89:85:
b6:4d:0e:e0:cc:97:61:a5:d6:07:7c:0a:e0:88:ec:35:60:0a:
02:e6:22:33:e5:29:48:64:b3:75:12:e1:77:5d:cc:07:a8:f7:
ca:7e:0c:03:29:a8:64:be:5d:62:d2:6c:75:b9:10:13:43:9d:
e1:fa:2e:79:7b:c8:8c:dc:95:84:3b:8c:c5:62:02:64:00:0a:
07:36:4f:63:da:a3:3c:0c:21:1d:9c:9d:e4:d6:78:44:6c:08:
5c:1a:f9:27
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkJBMzExMTAvBgNVBAUTKDEyMDk3QUFGODU3QjYyQkQzNEFBMjczRDNGOUIzRUQ5
Q0U2REYxNjEwHhcNMjYwODI1MDY1NzExWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YThkM2NjNy01MjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1mERjrfYpv+7peyNbm150YG11JV+XLnIJM3M9q0Vhg2QK7/MZtd3srpcoYOK
dVSrF/DV6jkK2HYN25EV24CxzK3vkm9a6NbnfWEqJfz9bArc8clKwO98KTfrMzwK
saxZRjAIBv5dxJhMPIO6AUtol8zi2gVAHXAZqF4G4CNom2WM0/2PxIHm1nexpAkA
uzkoR36S6doOXQxgd8lhTO9cvY2xCPpIHLhiTIDPHh/BPncYQSClNV4Mx+WucuIV
DLL5grI8zsp/Tjz9alZfVwMurc36Sy/63/pucCroCPZdQO89XKXnj/CXE2OR7RHs
zlkzsGHRfTtjoqBuCG4HuRY/HwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFE10goD7
b9JpUlqwc5tukqO3NdmDMB8GA1UdIwQYMBaAFBIJeq+Fe2K9NKonPT+bPtnObfFh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkEzMS83OTg3MDU5Njg5
M0QxMUYwQkNFN0E3MjBDNEY5QUUwMi9FZ2w2cjRWN1lyMDBxaWM5UDVzLTJjNXQ4
V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0VnbDZyNFY3WXIwMHFpYzlQNXMtMmM1dDhXRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkJBMzEvNzk4NzA1OTY4OTNEMTFGMEJDRTdBNzIwQzRGOUFFMDIvRDdGODkwQUU4
OTNEMTFGMEFFNTQ2ODIxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAwIdZMA0GCSqGSIb3DQEBCwUAA4IBAQBqz6BmBvMUdNuiZXmSHKmu
i11ngkWQWKAmOLrSMe61Gf9fkuBhAl2+qU1xhNjVwrthsjoKpq4WNqwwNCohDATq
90o1k/N70cDKFn70aV2htbl63qIoQ6VdSs8H+GY2+2CsAlUDqzeHUHu/QSCMiDF9
yRZP/M7+wOsYdX0Twr7XKvjO21XmSkBpbPMZ+c1kxKltC1Fkvxb/rkfcoux4gyUq
iYW2TQ7gzJdhpdYHfArgiOw1YAoC5iIz5SlIZLN1EuF3XcwHqPfKfgwDKahkvl1i
0mx1uRATQ53h+i55e8iM3JWEO4zFYgJkAAoHNk9j2qM8DCEdnJ3k1nhEbAhcGvkn
-----END CERTIFICATE-----
Generated at Fri Sep 25 16:27:56 2026 by rpki-client