
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/C4BE139C1AE211F1803B92B5413D8C67.roa
File: C4BE139C1AE211F1803B92B5413D8C67.roa (raw, json)
Hash identifier: VzCemJ05XamlG2jC7L0XFu1bU7etE5348AhdfPH2ivQ=
Subject key identifier: F4:2D:83:BB:A6:02:B4:49:1E:7B:E6:53:A1:9B:D9:CB:E7:2D:AA:19
Certificate issuer: /CN=A91C7EF2/serialNumber=9B9D39725B27D420281385163492FF75F15113DA
Certificate serial: 8F
Authority key identifier: 9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/C4BE139C1AE211F1803B92B5413D8C67.roa
Signing time: Sun 08 Mar 2026 11:34:29 +0000
ROA not before: Sun 08 Mar 2026 11:34:29 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 135045
IP address blocks: 165.101.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.crl
rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:54:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7EF2, serialNumber=9B9D39725B27D420281385163492FF75F15113DA
Validity
Not Before: Mar 8 11:34:29 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69ad5ec5-e84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d7:f8:f0:3b:16:ea:b3:59:aa:9e:4c:e4:b9:
0c:43:09:6c:82:d3:9b:45:31:6c:33:8b:80:19:df:
04:27:74:22:ad:97:b3:63:08:4e:64:8a:9e:25:08:
95:be:30:36:37:2f:f9:8d:b3:38:83:2c:eb:b1:c2:
39:86:c1:5f:84:32:62:76:0d:bc:8f:40:3a:a4:e8:
62:45:f9:ba:72:ff:23:94:dc:74:35:db:be:72:a7:
34:76:32:ac:6b:d8:48:35:a2:15:1d:e8:6a:4e:49:
4e:7a:d9:44:9b:f4:e6:22:7d:29:7e:f8:84:88:27:
e1:ba:3e:be:77:da:ac:2a:fd:a0:0f:0c:3b:da:92:
7e:eb:22:c6:51:51:a4:ca:c9:c6:8b:46:e9:e5:fd:
fc:5e:09:45:44:2a:9e:6e:e1:9d:80:de:a2:9e:0d:
05:3d:d5:53:d7:93:75:4a:bf:9b:00:ce:0e:78:28:
ec:e1:48:d2:6f:0e:be:b2:1b:39:16:62:00:62:8b:
ec:2e:72:08:e8:d6:70:09:7c:5e:60:ab:56:b1:67:
3f:8c:bb:89:2e:7e:33:dc:91:87:26:17:27:53:a3:
67:ba:20:76:90:7b:be:91:93:5c:c4:33:b0:0d:85:
19:eb:e0:fe:25:76:49:d7:50:f1:a1:1e:8e:b4:e6:
f2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2D:83:BB:A6:02:B4:49:1E:7B:E6:53:A1:9B:D9:CB:E7:2D:AA:19
X509v3 Authority Key Identifier:
keyid:9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/C4BE139C1AE211F1803B92B5413D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.222.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:19:68:1d:75:a0:d5:9a:1c:32:16:c1:ca:6b:6a:84:18:42:
4e:34:3d:9f:0d:4c:c3:8b:76:d3:26:9a:df:3c:bc:76:e9:22:
f7:97:00:19:b7:f6:97:a7:e2:07:81:bd:f3:8c:81:f7:cc:7a:
95:6b:3b:25:c6:fe:a0:a7:70:9c:40:e5:e0:27:43:27:19:89:
4a:fd:d4:e7:57:14:a0:49:f0:66:a4:c3:81:9f:6b:a0:f7:a1:
7a:f5:a5:2f:97:20:ab:9e:95:30:f5:5e:71:52:e9:3e:ad:e3:
70:b5:72:6d:7d:49:d6:1f:62:90:26:00:ae:cc:a7:00:dd:a2:
4f:f3:a7:d1:dd:2e:5e:42:76:ef:b9:72:f8:83:c0:ab:c6:c2:
e6:df:9d:6c:40:8d:3c:bb:74:30:9b:7a:08:2c:5e:2d:0f:65:
1b:f0:ed:a4:3b:b3:b3:94:0b:18:df:be:10:70:28:03:9b:3e:
f1:37:4f:9e:68:22:4c:8d:be:7e:9b:64:5d:f2:65:01:ce:8f:
53:bf:fc:44:d9:ef:33:40:cf:09:0f:9f:c9:45:7c:55:38:e8:
c0:c3:5d:74:66:36:29:13:3e:ab:30:c6:b6:7a:3f:11:0d:5c:
58:95:76:eb:b9:3e:33:fd:75:ca:b4:46:b1:ea:df:79:e7:6a:
6e:7a:f9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:17:55 2026 by rpki-client