
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/BD8B68BA42CC11F1BD2C946EC6833773.roa
File: BD8B68BA42CC11F1BD2C946EC6833773.roa (raw, json)
Hash identifier: DBXb6/VeFR/zv0bPvOEf3LFvbD14Qt+KDwY55i+OIyk=
Subject key identifier: 55:54:D5:78:B5:90:AB:FD:B7:72:0C:E7:44:FD:14:D6:90:3C:88:36
Certificate issuer: /CN=A91C09C5/serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276
Certificate serial: 01F2
Authority key identifier: 66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/BD8B68BA42CC11F1BD2C946EC6833773.roa
Signing time: Tue 28 Apr 2026 06:37:35 +0000
ROA not before: Tue 28 Apr 2026 06:37:35 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 133645
IP address blocks: 113.192.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl
rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 498 (0x1f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C09C5, serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276
Validity
Not Before: Apr 28 06:37:35 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69f055af-a699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c5:ea:2d:81:2b:ce:8f:ce:2a:20:2d:f8:81:
aa:16:d1:84:c7:5a:16:a0:1d:4e:31:d2:00:d6:10:
ae:06:28:42:35:06:1f:3d:fd:fc:73:25:09:d4:7a:
86:29:ab:b9:73:1c:8d:df:a7:77:be:d6:86:d4:65:
5c:9c:2a:3d:51:f1:9b:ca:0e:41:3b:21:a8:ea:48:
06:c3:95:68:44:f1:12:7b:1e:70:d2:84:e3:8b:ee:
65:29:86:db:a6:a1:01:d0:c8:58:75:92:c2:b2:41:
28:e7:a6:87:0b:95:ec:43:87:c5:0c:04:ce:ed:09:
c2:8a:57:8f:3b:b5:c6:2c:27:bf:74:f4:55:35:44:
af:86:e7:dd:30:cc:e6:09:c8:4d:23:b5:d3:74:c4:
75:bd:92:62:00:ab:5c:80:6a:2f:d7:3f:30:48:dd:
b1:83:b5:86:82:77:3f:4a:a4:22:dc:93:b8:64:38:
fd:7d:53:84:0c:b1:48:96:35:f1:aa:34:ca:d5:6c:
e6:a2:ec:31:55:8a:23:60:28:00:42:8a:d2:08:54:
a7:7f:32:77:7d:55:9f:a8:ea:b5:ef:ca:d9:eb:cd:
99:d9:43:ab:42:cf:50:90:ad:7d:2b:83:82:83:a5:
f8:98:24:44:d6:04:7a:c2:9f:bb:33:e0:86:09:67:
ab:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:54:D5:78:B5:90:AB:FD:B7:72:0C:E7:44:FD:14:D6:90:3C:88:36
X509v3 Authority Key Identifier:
keyid:66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/BD8B68BA42CC11F1BD2C946EC6833773.roa
sbgp-ipAddrBlock: critical
IPv4:
113.192.42.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:a1:a0:79:d5:8a:17:d7:33:f6:d1:fa:8e:e6:5d:c3:25:ac:
f3:31:1c:84:f0:20:95:b4:b2:39:31:43:a2:90:45:3d:a2:a6:
c2:cf:8f:de:49:76:8e:cd:d9:a4:7a:11:a9:40:48:e5:0b:7e:
d2:dc:5a:bf:5a:2a:01:ea:c3:bc:a9:b7:95:71:c5:99:63:90:
39:ad:f5:0d:de:21:cc:65:24:6b:dc:67:36:a0:97:3f:4f:34:
75:48:bc:8a:5c:10:2a:ce:85:0f:4c:8b:36:37:4b:a9:70:8f:
26:01:bb:ff:79:58:6d:7c:bd:95:ac:65:93:f2:b8:c1:1f:32:
6c:f2:b9:16:63:af:b2:82:98:1b:11:0f:c2:70:cc:51:a5:56:
ba:99:9f:63:66:27:fe:46:7d:36:0d:48:b1:31:92:93:37:3f:
d4:f7:39:a8:8b:fa:08:8f:30:4e:8b:fc:03:69:d0:59:8b:45:
47:46:c7:ee:d7:13:47:11:91:c9:0a:6c:c9:0e:33:d3:d3:52:
ae:f4:91:b6:84:0f:51:bb:88:9c:cc:a1:5f:c8:ae:5e:ea:6f:
e9:24:c5:2b:18:24:07:3b:79:95:22:cc:ca:12:11:90:6a:e6:
2d:1b:eb:52:1b:b2:b9:a1:6a:1a:9f:65:bd:ae:aa:76:32:2d:
e8:f4:83:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:29:14 2026 by rpki-client