
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/87BF5BF6BD3411EB99D25F26C4F9AE02.roa
File: 87BF5BF6BD3411EB99D25F26C4F9AE02.roa (raw, json)
Hash identifier: n0xr/j2GP/MNMRFa7lf1tZ5ywaM4ttYHv9arSET9eaI=
Subject key identifier: 87:ED:7D:6A:94:09:31:4C:8E:B0:AF:C4:8C:17:D7:B9:58:34:00:C5
Certificate issuer: /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Certificate serial: 06FC
Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/87BF5BF6BD3411EB99D25F26C4F9AE02.roa
Signing time: Wed 16 Sep 2026 22:44:26 +0000
ROA not before: Wed 16 Sep 2026 22:44:26 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 38304
IP address blocks: 119.31.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 22:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1788 (0x6fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE146, serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Validity
Not Before: Sep 16 22:44:26 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aab1bca-6dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:04:33:b4:5f:c4:13:94:cb:f9:3a:0b:05:83:
fb:76:b4:90:02:0a:8c:b8:76:85:dd:0e:24:ef:df:
e6:69:e3:02:2e:ce:f8:3c:57:ec:31:b5:71:60:25:
79:f3:30:d9:b1:99:b6:56:4c:49:8b:37:15:97:08:
6a:4c:ae:40:a9:8e:54:14:b0:27:c2:e8:e3:69:93:
be:23:55:12:2d:13:49:4b:8b:e0:71:8d:d1:d9:5e:
97:2c:04:4c:ee:4a:fb:a5:20:2e:c1:86:0a:5c:d2:
56:10:f3:82:66:13:5d:57:ff:60:c4:8a:4e:7d:05:
07:4f:31:cf:2a:a4:7b:ab:a6:1b:7a:59:68:04:4f:
86:0d:12:f3:87:91:ef:6c:3a:10:9d:09:2b:ba:4c:
d8:e9:58:75:f6:1e:bc:98:6c:8d:32:d0:bc:e8:04:
32:fa:c9:97:bb:b2:d1:ad:ea:3c:5f:6f:f0:76:b1:
84:ec:22:89:a0:c1:29:2d:fb:c5:17:e8:f1:70:8d:
a1:98:4a:00:42:ae:6a:0a:c6:10:c7:4b:14:10:db:
a5:59:76:48:67:71:6e:75:7e:db:47:69:ff:6f:e3:
c4:44:eb:f8:09:2f:83:3c:b6:01:3a:d4:12:c0:64:
10:6a:d1:01:e4:25:02:ce:1a:e5:83:c4:6e:e0:1e:
10:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:ED:7D:6A:94:09:31:4C:8E:B0:AF:C4:8C:17:D7:B9:58:34:00:C5
X509v3 Authority Key Identifier:
keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/87BF5BF6BD3411EB99D25F26C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
119.31.173.0/24
Signature Algorithm: sha256WithRSAEncryption
54:68:c3:d7:6d:54:48:56:6c:64:27:65:d5:60:f6:4a:fa:21:
1b:10:a7:b4:89:35:4c:5c:8f:3f:a4:92:4c:9b:0e:17:20:72:
2b:d1:3b:f5:c8:b4:e3:7c:08:c8:02:4e:3e:e6:91:87:cc:de:
22:f9:3a:83:1e:64:ca:6b:d1:df:2c:cb:96:4e:6a:a7:8d:2e:
5b:00:98:cd:5b:34:76:0a:53:d2:2c:b9:c6:82:d4:c5:f3:e9:
e2:f8:f4:1d:48:bd:d4:b6:16:5f:a5:58:cd:25:02:ed:90:59:
c6:e1:0a:12:98:be:e2:29:17:e3:a4:99:c0:91:c9:32:dc:1a:
a3:c4:fa:20:9e:17:1d:cd:4c:e6:df:9f:f0:4f:f1:c9:f0:bc:
a3:37:28:0e:8c:ad:fa:45:0a:73:d7:4f:67:41:32:78:ea:b6:
c6:23:c4:30:84:b4:84:a6:e5:05:cc:94:c6:04:d5:b7:c1:e7:
5b:28:bf:c1:a4:1d:77:f2:a3:61:ae:81:8d:71:3e:32:95:9a:
bd:dd:a0:93:a4:10:d7:7d:0a:4b:24:49:7b:89:d7:bb:92:5b:
94:4e:64:8c:da:9d:e8:d5:34:48:86:17:0b:29:f9:23:3e:20:
98:10:44:ae:f5:32:8a:c2:71:c9:8e:ab:40:56:cb:f9:e0:8c:
a8:b8:c4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:41:03 2026 by rpki-client