
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/C86AB87A4D2711F1906BF3DDBE833773.roa
File: C86AB87A4D2711F1906BF3DDBE833773.roa (raw, json)
Hash identifier: SKrWdYrl9KleuCmzcfglzGlBQ52LXQEO3/LUYZ1Seeg=
Subject key identifier: 83:EE:26:8C:DB:35:BA:A5:BB:F2:01:65:1D:38:57:31:B6:6E:B7:70
Certificate issuer: /CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708
Certificate serial: 0A71
Authority key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/C86AB87A4D2711F1906BF3DDBE833773.roa
Signing time: Mon 11 May 2026 10:54:29 +0000
ROA not before: Mon 11 May 2026 10:54:29 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 198949
IP address blocks: 43.225.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl
rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2673 (0xa71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1A14, serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708
Validity
Not Before: May 11 10:54:29 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6a01b564-73ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f3:ba:75:03:5a:90:27:3a:96:fc:eb:82:66:
18:a9:de:61:e2:72:f9:55:2e:fd:9c:39:83:46:a0:
28:cb:cb:fe:75:68:b1:94:1c:30:05:71:4b:4d:07:
1f:66:b0:29:c2:2d:b4:91:c9:47:3b:24:c3:f6:bb:
cc:52:46:71:c8:5e:49:e3:26:77:02:fc:44:4a:95:
fd:3b:99:83:da:e0:32:c8:5d:ad:3d:02:c4:d6:ea:
44:6e:66:8b:22:00:b5:06:f8:96:e3:cb:b6:44:03:
93:0e:0b:f4:b1:dd:49:4d:79:0d:dd:99:75:3b:d1:
15:05:9e:df:86:ec:9d:e7:d3:a7:a7:53:58:05:ed:
86:16:ee:13:de:ee:c9:b9:bc:53:ef:3c:38:d9:d6:
87:35:c2:31:83:26:cf:82:42:bd:d4:af:f9:d1:3a:
3e:26:68:cd:e9:e1:b1:06:8a:61:46:d0:cf:72:9b:
d0:48:9d:8d:fa:fe:1b:e5:ab:cc:9e:80:7a:c6:35:
26:ad:40:f0:98:3a:81:80:31:7c:da:c8:9e:2e:26:
79:4b:ac:87:94:51:75:ab:bf:d3:50:97:d2:da:12:
31:89:7a:ae:35:84:54:fe:c3:53:82:e4:8b:55:ff:
31:e0:98:8f:2c:f9:f7:e9:33:74:db:2f:2b:c4:be:
e7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EE:26:8C:DB:35:BA:A5:BB:F2:01:65:1D:38:57:31:B6:6E:B7:70
X509v3 Authority Key Identifier:
keyid:59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/C86AB87A4D2711F1906BF3DDBE833773.roa
sbgp-ipAddrBlock: critical
IPv4:
43.225.96.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:ff:30:be:5e:28:47:f3:d3:22:95:06:9a:f2:57:20:50:02:
e7:42:59:7a:56:a3:d1:bc:1d:c9:de:b4:3e:f4:40:e3:27:39:
8c:ef:9c:da:db:d1:3d:a6:7d:64:ec:cf:6d:54:16:db:e2:48:
5c:6b:59:3a:b9:ce:ea:52:bd:84:93:b6:9f:b6:89:cd:28:83:
3c:3d:ff:59:7e:79:c2:01:b7:0c:92:dc:f8:75:e3:93:d2:4d:
d4:64:9f:c6:d9:b7:af:ba:3b:5b:2c:72:29:10:34:8d:e2:7b:
ea:95:65:f1:5a:4d:9b:ce:35:1c:38:ca:e1:e4:02:cc:7a:ba:
e2:f5:04:f6:fb:8a:84:68:2a:68:c7:45:b1:f9:d0:5f:31:a6:
64:32:69:b5:26:3c:7f:e5:b1:de:7a:8c:65:93:02:dc:aa:ae:
d7:f7:39:2e:10:91:37:83:54:79:9b:29:c8:af:d8:d1:24:9e:
c5:92:35:a9:5f:fe:f4:b3:6c:da:67:3e:cb:38:a5:c6:ff:01:
11:6a:48:a8:aa:87:cc:07:2d:71:9f:a8:fd:d0:94:ad:5b:d5:
13:fd:df:ec:35:3c:ef:b4:e2:7f:1e:6b:f7:0c:cd:41:b7:65:
65:43:b2:c4:1d:bf:a7:2e:a8:83:12:b2:80:df:ec:22:2f:93:
95:ae:ca:ff
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzFBMTQxMTAvBgNVBAUTKDU5OERENUEzOUFFNDc3NjU4QUQ1QkNCRkUzNjI2NEEx
QTYxRDY3MDgwHhcNMjYwNTExMTA1NDI5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTAxYjU2NC03M2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2PO6dQNakCc6lvzrgmYYqd5h4nL5VS79nDmDRqAoy8v+dWixlBwwBXFLTQcf
ZrApwi20kclHOyTD9rvMUkZxyF5J4yZ3AvxESpX9O5mD2uAyyF2tPQLE1upEbmaL
IgC1BviW48u2RAOTDgv0sd1JTXkN3Zl1O9EVBZ7fhuyd59Onp1NYBe2GFu4T3u7J
ubxT7zw42daHNcIxgybPgkK91K/50To+JmjN6eGxBophRtDPcpvQSJ2N+v4b5avM
noB6xjUmrUDwmDqBgDF82sieLiZ5S6yHlFF1q7/TUJfS2hIxiXquNYRU/sNTguSL
Vf8x4JiPLPn36TN02y8rxL7nnQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIPuJozb
Nbqlu/IBZR04VzG2brdwMB8GA1UdIwQYMBaAFFmN1aOa5HdlitW8v+NiZKGmHWcI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUExNC9GN0U4NjQ0NjhG
QkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2QyV0sxYnlfNDJKa29hWWRa
d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dZM1ZvNXJrZDJXSzFieV80Mkprb2FZZFp3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzFBMTQvRjdFODY0NDY4RkJDMTFFQUE4QzMxMjdCQzRGOUFFMDIvQzg2QUI4N0E0
RDI3MTFGMTkwNkJGM0REQkU4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAK+FgMA0GCSqGSIb3DQEBCwUAA4IBAQDR/zC+XihH89MilQaa8lcg
UALnQll6VqPRvB3J3rQ+9EDjJzmM75za29E9pn1k7M9tVBbb4khca1k6uc7qUr2E
k7aftonNKIM8Pf9ZfnnCAbcMktz4deOT0k3UZJ/G2bevujtbLHIpEDSN4nvqlWXx
Wk2bzjUcOMrh5ALMerri9QT2+4qEaCpox0Wx+dBfMaZkMmm1Jjx/5bHeeoxlkwLc
qq7X9zkuEJE3g1R5mynIr9jRJJ7FkjWpX/70s2zaZz7LOKXG/wERakioqofMBy1x
n6j90JStW9UT/d/sNTzvtOJ/Hmv3DM1Bt2VlQ7LEHb+nLqiDErKA3+wiL5OVrsr/
-----END CERTIFICATE-----
Generated at Wed May 13 05:14:38 2026 by rpki-client