
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/C2E6D1F63C0911F19D18A1CEB2833773.roa
File: C2E6D1F63C0911F19D18A1CEB2833773.roa (raw, json)
Hash identifier: PLPriTbZpga1d0Ygy1kWk5OtBKo4jT5HT/wMgziotHQ=
Subject key identifier: BC:02:06:F6:AC:27:47:0D:68:4C:DD:8E:B9:88:AB:EC:2D:F1:E5:BB
Certificate issuer: /CN=A91BD7A3/serialNumber=312575DE4D4643FADFAE48876DF4567D7D7C6856
Certificate serial: 56
Authority key identifier: 31:25:75:DE:4D:46:43:FA:DF:AE:48:87:6D:F4:56:7D:7D:7C:68:56
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/C2E6D1F63C0911F19D18A1CEB2833773.roa
Signing time: Sun 19 Apr 2026 16:06:45 +0000
ROA not before: Sun 19 Apr 2026 16:06:45 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 154351
IP address blocks: 138.252.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.crl
rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:14:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD7A3, serialNumber=312575DE4D4643FADFAE48876DF4567D7D7C6856
Validity
Not Before: Apr 19 16:06:45 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69e4fd95-0393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:29:89:a2:be:e1:87:5d:f8:4d:d9:c4:08:b2:
5f:40:2e:01:91:b7:bc:91:2d:05:ac:42:45:1f:e4:
0a:b3:67:6c:a3:28:50:c8:71:40:8b:84:43:0b:fe:
b2:24:4d:4b:fd:77:b4:4f:ee:1b:3a:a8:6c:a0:55:
d9:b0:2f:d9:7d:9f:a2:5b:04:43:dc:f1:c2:c1:7e:
7b:a0:c4:00:cd:56:3b:6d:8b:ff:79:f6:ed:05:29:
09:a8:11:b2:61:c8:e9:fa:5b:44:f0:42:86:ad:d1:
a7:3c:93:85:1b:bb:ff:cc:71:f1:d2:a6:a7:4d:fe:
18:03:9e:78:9d:9b:5e:8f:fb:fa:4f:55:0c:66:b1:
67:60:ae:53:24:ad:42:d6:96:d8:3c:74:b5:74:16:
10:26:d4:8b:ba:bb:54:a9:49:be:bb:9b:3c:5a:80:
13:4b:32:6e:c1:2a:48:14:07:10:c6:db:9a:38:56:
24:12:b5:61:b3:36:96:8c:c9:b5:20:c3:13:5e:4e:
23:61:60:74:26:7e:b8:9e:9e:8a:a7:3c:01:3e:46:
ce:03:a9:48:0a:fe:5a:34:d7:52:26:39:bd:10:f7:
a6:c5:f8:09:d0:c3:c9:a5:68:0c:cf:8d:2f:29:66:
4a:20:02:53:b0:cf:21:af:e4:38:5a:34:3a:84:1f:
b4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:02:06:F6:AC:27:47:0D:68:4C:DD:8E:B9:88:AB:EC:2D:F1:E5:BB
X509v3 Authority Key Identifier:
keyid:31:25:75:DE:4D:46:43:FA:DF:AE:48:87:6D:F4:56:7D:7D:7C:68:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/C2E6D1F63C0911F19D18A1CEB2833773.roa
sbgp-ipAddrBlock: critical
IPv4:
138.252.184.0/24
Signature Algorithm: sha256WithRSAEncryption
41:5c:d5:9e:1c:42:b1:f6:24:5a:50:0b:e2:45:4c:2c:43:06:
28:63:c9:13:ae:e9:60:2e:b6:46:da:d7:ab:8f:d1:9a:24:8d:
d4:56:a6:c9:41:58:82:cd:81:c7:46:9d:40:ea:e6:cc:bd:fa:
a7:79:75:38:f5:ed:0c:df:75:b3:54:df:6a:2c:e8:57:21:3b:
43:73:2d:4c:1e:ec:8d:36:19:19:a2:e0:a2:74:73:9d:8b:29:
97:d2:c2:ab:42:c5:f4:2a:5d:ae:37:a0:36:2e:4f:56:a7:24:
48:cc:28:d6:31:cf:50:cc:7a:62:b3:48:21:cb:c1:e9:86:56:
85:d2:47:26:00:52:f2:a3:9a:47:aa:39:f9:6f:ec:05:91:b7:
dd:79:05:3f:41:c3:e2:5d:54:1e:72:d2:2e:bc:a1:d7:c1:d5:
67:b5:e6:f4:14:42:96:ca:2f:44:aa:34:36:78:8e:fe:65:d0:
9c:65:a2:84:ad:3f:ba:0f:9b:fc:64:d9:5d:5e:a9:b6:c8:5d:
37:bc:2c:e3:39:0e:62:c2:6a:65:33:69:c2:2f:ad:0a:f1:4e:
de:f0:c6:13:fe:e6:06:5a:9e:4d:fd:fb:b9:e8:ee:27:9b:c5:
95:ef:f6:dd:c3:10:31:13:f1:e5:32:e4:11:29:1d:c6:03:e3:
30:b6:55:9f
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
RDdBMzExMC8GA1UEBRMoMzEyNTc1REU0RDQ2NDNGQURGQUU0ODg3NkRGNDU2N0Q3
RDdDNjg1NjAeFw0yNjA0MTkxNjA2NDVaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5ZTRmZDk1LTAzOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDfKYmivuGHXfhN2cQIsl9ALgGRt7yRLQWsQkUf5AqzZ2yjKFDIcUCLhEML/rIk
TUv9d7RP7hs6qGygVdmwL9l9n6JbBEPc8cLBfnugxADNVjtti/959u0FKQmoEbJh
yOn6W0TwQoat0ac8k4Ubu//McfHSpqdN/hgDnnidm16P+/pPVQxmsWdgrlMkrULW
ltg8dLV0FhAm1Iu6u1SpSb67mzxagBNLMm7BKkgUBxDG25o4ViQStWGzNpaMybUg
wxNeTiNhYHQmfrienoqnPAE+Rs4DqUgK/lo011ImOb0Q96bF+AnQw8mlaAzPjS8p
ZkogAlOwzyGv5DhaNDqEH7RNAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUvAIG9qwn
Rw1oTN2OuYir7C3x5bswHwYDVR0jBBgwFoAUMSV13k1GQ/rfrkiHbfRWfX18aFYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJEN0EzLzg2MUIxMTEyQzUy
NDExRjA5NTZBREQxQUM0RjlBRTAyL01TVjEzazFHUV9yZnJraUhiZlJXZlgxOGFG
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvTVNWMTNrMUdRX3JmcmtpSGJmUldmWDE4YUZZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RDdBMy84NjFCMTExMkM1MjQxMUYwOTU2QUREMUFDNEY5QUUwMi9DMkU2RDFGNjND
MDkxMUYxOUQxOEExQ0VCMjgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACK/LgwDQYJKoZIhvcNAQELBQADggEBAEFc1Z4cQrH2JFpQC+JFTCxD
BihjyROu6WAutkba16uP0ZokjdRWpslBWILNgcdGnUDq5sy9+qd5dTj17QzfdbNU
32os6FchO0NzLUwe7I02GRmi4KJ0c52LKZfSwqtCxfQqXa43oDYuT1anJEjMKNYx
z1DMemKzSCHLwemGVoXSRyYAUvKjmkeqOflv7AWRt915BT9Bw+JdVB5y0i68odfB
1We15vQUQpbKL0SqNDZ4jv5l0JxlooStP7oPm/xk2V1eqbbIXTe8LOM5DmLCamUz
acIvrQrxTt7wxhP+5gZank39+7no7iebxZXv9t3DEDET8eUy5BEpHcYD4zC2VZ8=
-----END CERTIFICATE-----
Generated at Wed May 13 04:00:20 2026 by rpki-client