
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/87331106446F11F1B67309509A833773.roa
File: 87331106446F11F1B67309509A833773.roa (raw, json)
Hash identifier: XggpXhcMUOMqUyl7v/7VH6Vt4POC4iPTSWjovesXRFA=
Subject key identifier: D9:B9:16:5F:53:4A:A3:1B:D6:12:A6:20:CA:DA:B9:09:0A:4B:F2:F1
Certificate issuer: /CN=A91BF7D7/serialNumber=BD0FB2FAD87122839A738C4941937907EA5C3FD4
Certificate serial: 05
Authority key identifier: BD:0F:B2:FA:D8:71:22:83:9A:73:8C:49:41:93:79:07:EA:5C:3F:D4
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vQ-y-thxIoOac4xJQZN5B-pcP9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/87331106446F11F1B67309509A833773.roa
Signing time: Thu 30 Apr 2026 08:54:25 +0000
ROA not before: Thu 30 Apr 2026 08:54:25 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 40065
IP address blocks: 91.110.128.0/17 maxlen: 24
178.98.0.0/16 maxlen: 24
178.107.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.crl
rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vQ-y-thxIoOac4xJQZN5B-pcP9Q.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF7D7, serialNumber=BD0FB2FAD87122839A738C4941937907EA5C3FD4
Validity
Not Before: Apr 30 08:54:25 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69f318c1-20c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4d:f6:f9:ce:d2:7c:49:e5:66:9d:4b:69:bf:
4f:23:fc:7f:c6:59:cc:53:02:10:08:7d:6e:2b:10:
72:6f:0e:a8:27:7b:cf:c7:62:77:11:1f:b8:d9:40:
b8:f3:e9:8f:64:95:e1:b8:f8:8c:f0:ab:72:4d:9a:
c4:86:f0:3d:45:d2:69:26:30:98:42:d1:48:c3:e4:
5d:08:e0:21:1e:23:b8:d2:88:68:9d:32:66:fa:ce:
20:d2:7c:bc:03:76:1c:d5:df:49:74:30:9c:c1:89:
be:93:98:71:33:c6:07:a2:70:3c:f5:01:85:dc:86:
9d:c1:17:cd:5a:85:1f:aa:4b:4a:51:05:13:ba:04:
c6:ce:da:35:37:40:df:4f:69:80:c4:19:9b:34:90:
37:e2:fa:54:4c:1d:13:d8:44:3c:d5:c2:28:b0:8b:
d7:30:ac:9b:4a:d8:79:d7:05:0e:82:44:b0:d9:f0:
f9:0c:4c:9e:9a:94:89:b1:a5:fe:dc:ed:7d:66:b8:
5a:e9:a3:f0:bc:f6:af:05:cf:00:4d:c8:fa:d9:29:
3e:ea:a2:d9:9d:27:9f:1f:47:7d:f0:ce:2d:41:ba:
d0:b5:6d:ee:5e:9f:5c:91:71:0d:22:bb:a7:72:15:
73:b8:9a:00:ae:90:0e:c8:bc:26:8f:a4:0f:4d:76:
b2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B9:16:5F:53:4A:A3:1B:D6:12:A6:20:CA:DA:B9:09:0A:4B:F2:F1
X509v3 Authority Key Identifier:
keyid:BD:0F:B2:FA:D8:71:22:83:9A:73:8C:49:41:93:79:07:EA:5C:3F:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vQ-y-thxIoOac4xJQZN5B-pcP9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/87331106446F11F1B67309509A833773.roa
sbgp-ipAddrBlock: critical
IPv4:
91.110.128.0/17
178.98.0.0/16
178.107.128.0/17
Signature Algorithm: sha256WithRSAEncryption
1d:9a:d4:34:f1:3c:b3:e9:6d:cf:17:76:7e:4c:d0:3d:cc:25:
ad:1a:b9:ee:cd:04:49:c1:5d:36:3d:87:1b:4a:18:52:29:06:
ca:f1:bf:b6:5c:98:6a:cf:e5:7b:fc:1d:79:da:f6:6f:8d:e3:
ae:2e:c4:5f:74:06:6b:94:99:4b:4a:c8:ad:bd:da:f9:5d:1a:
1f:eb:11:8c:5b:45:fa:a8:74:92:a5:25:10:bb:6b:c7:ff:01:
33:6b:81:e4:49:76:69:ba:cf:7d:be:cd:ab:a9:56:0e:62:26:
2a:a9:0e:ab:5e:df:9c:25:77:2d:85:f3:0d:55:1e:09:cd:0e:
a8:99:ce:ba:9b:45:21:24:bc:c2:d6:b2:9e:0e:b9:fe:57:b5:
8f:86:e7:ba:5b:0e:d6:ae:95:b6:bc:df:85:a6:59:33:ee:78:
bb:82:9a:b2:9d:dc:32:4e:08:ac:d8:6e:48:5b:e2:a5:6b:79:
ce:0f:7f:a3:33:b1:cf:cc:48:0a:9b:9b:76:48:10:ec:eb:94:
ac:32:e8:7a:d5:fc:38:a1:85:f2:78:b6:5d:dd:54:19:d7:aa:
97:49:c2:8c:00:24:6a:8e:45:19:97:5c:a8:a9:32:2b:5a:b1:
31:36:d1:e9:51:30:60:22:3e:42:6f:12:c3:5a:58:93:2f:77:
ea:5f:e2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:02:49 2026 by rpki-client