
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/B2CE886C07B811F0992B401EC4F9AE02.roa
File: B2CE886C07B811F0992B401EC4F9AE02.roa (raw, json)
Hash identifier: Rlkxd/WwIg6t5LjMKrnowD32g4ytbqCMIvolbiK4MHo=
Subject key identifier: AE:BD:17:1B:0D:0D:71:93:B0:B3:39:FF:D6:48:D3:33:B5:1F:31:8F
Certificate issuer: /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Certificate serial: 61B2
Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/B2CE886C07B811F0992B401EC4F9AE02.roa
Signing time: Mon 06 Jul 2026 08:51:43 +0000
ROA not before: Mon 06 Jul 2026 08:51:43 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 198949
IP address blocks: 203.184.180.0/24 maxlen: 24
203.184.228.0/24 maxlen: 24
203.184.229.0/24 maxlen: 24
218.189.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:08:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25010 (0x61b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1323, serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Validity
Not Before: Jul 6 08:51:43 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a4b6c9f-41e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:59:86:42:c2:ae:60:23:21:27:08:07:18:d6:
67:57:c1:33:d7:ff:20:85:a2:08:aa:82:51:fc:dc:
c8:43:8c:af:31:9b:6a:13:7e:88:5f:81:3a:75:32:
4e:71:a7:87:97:17:b9:b7:95:76:fb:a0:84:e2:95:
b9:ce:69:31:f9:d4:27:e8:90:dc:d7:56:d9:e3:9a:
31:85:ea:cc:3e:2b:3a:49:4d:8b:9d:f6:c9:17:6c:
b5:53:ee:e3:ab:38:e3:81:ff:14:b9:9f:9e:eb:c1:
01:fd:06:bf:44:13:98:0c:57:3b:97:da:77:4d:46:
59:a7:cf:41:eb:fb:83:49:ad:17:bf:d1:32:6d:6b:
e8:34:c1:2e:fa:a4:8e:91:fa:fb:4a:8e:53:c1:80:
b8:a7:17:a1:c3:0e:54:b6:1e:7d:53:07:1e:bc:8a:
2b:b9:56:f0:14:af:c7:46:94:ac:e3:46:54:59:83:
74:bc:d5:72:ab:36:9f:03:09:2f:82:df:3b:d9:bc:
9a:c7:c9:42:8f:74:58:1f:08:d8:18:f7:79:41:03:
29:25:6f:e0:d9:21:29:3e:87:16:58:44:95:f7:4a:
7d:8c:d4:c1:6a:e9:84:9e:9c:c8:74:b1:00:04:86:
10:9b:47:41:e5:41:06:6d:47:83:05:f5:11:c7:62:
96:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BD:17:1B:0D:0D:71:93:B0:B3:39:FF:D6:48:D3:33:B5:1F:31:8F
X509v3 Authority Key Identifier:
keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/B2CE886C07B811F0992B401EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.184.180.0/24
203.184.228.0/23
218.189.94.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:5f:0e:72:f4:a8:05:f5:40:29:35:0a:75:bc:03:34:e5:9c:
29:6d:c3:64:6c:ba:94:01:af:dd:78:1e:40:b0:fb:8f:7e:d2:
a1:c1:ca:1e:2f:b8:aa:06:1d:10:a9:73:ba:94:09:ad:2f:b7:
74:32:f4:8c:c2:88:b1:2b:2e:f7:54:8e:1f:66:c1:75:cb:b3:
66:c8:01:09:b6:b8:eb:e7:a0:ba:fa:43:f7:d9:c4:31:8f:d0:
02:24:36:9e:73:b9:56:b7:ff:42:27:0b:ed:55:e2:ce:5a:82:
9c:8d:2d:87:4f:7c:0d:64:1d:c1:f8:9b:ee:d2:71:8b:2a:7c:
23:f8:f5:73:8d:c2:55:c1:9e:95:a8:d8:7c:b3:a8:66:fb:c7:
24:1c:ff:97:65:60:8e:76:3f:01:c5:aa:a1:8f:bb:d2:61:7f:
75:41:05:a9:45:81:a3:f2:3d:1e:51:09:34:24:68:60:2e:79:
e0:64:04:3e:f3:bc:cd:74:70:a9:a4:84:69:fc:7a:c3:21:a8:
89:98:84:2b:5c:09:46:31:ec:12:28:f1:f2:65:cb:07:a5:ca:
3b:da:c8:73:27:26:7d:c5:41:ad:8a:52:0b:d0:91:ec:ae:8d:
2c:32:3c:e1:20:ee:c6:34:b3:ad:44:5a:80:e7:88:19:9a:84:
c2:48:45:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:31 2026 by rpki-client