
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/E1B6596E447211F188990C259B833773.roa
File: E1B6596E447211F188990C259B833773.roa (raw, json)
Hash identifier: BoVkQomFICNHToymCepXWBK1nByXGDPh9ZzxCYs1+HY=
Subject key identifier: 21:83:C0:CB:F4:A6:1D:80:43:95:6D:A9:30:9B:B9:3B:8A:E1:B9:CA
Certificate issuer: /CN=A91C9F00/serialNumber=A4D800DB18C7C2C79711B35FC8B7D217DC7D4C6E
Certificate serial: 16
Authority key identifier: A4:D8:00:DB:18:C7:C2:C7:97:11:B3:5F:C8:B7:D2:17:DC:7D:4C:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pNgA2xjHwseXEbNfyLfSF9x9TG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/E1B6596E447211F188990C259B833773.roa
Signing time: Thu 30 Apr 2026 08:59:38 +0000
ROA not before: Thu 30 Apr 2026 08:59:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216211
IP address blocks: 163.128.98.0/23 maxlen: 24
2402:5260::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.crl
rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pNgA2xjHwseXEbNfyLfSF9x9TG4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 09:07:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9F00, serialNumber=A4D800DB18C7C2C79711B35FC8B7D217DC7D4C6E
Validity
Not Before: Apr 30 08:59:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f319fa-6ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:58:9b:be:c0:42:cf:8a:06:10:ae:e8:5d:21:
96:14:09:9c:a7:1e:ee:11:0b:76:05:44:d8:79:09:
ea:8a:1f:59:9d:6f:3c:eb:c5:1a:d1:e0:12:3a:2a:
92:25:2c:78:3e:b0:1d:ae:2b:72:c3:b1:af:93:82:
31:e0:00:57:20:ff:f1:46:c4:93:86:cd:14:47:96:
88:e8:a5:9b:43:51:b7:9a:12:d2:f8:ab:55:4b:17:
c2:90:63:2d:ca:d9:8c:86:ff:e9:64:5e:9c:9a:78:
b6:b2:59:f6:8e:e4:fe:ca:bc:34:13:5c:1d:8f:8f:
77:28:5d:19:d4:a4:8a:04:45:ee:c4:df:31:71:c5:
59:49:44:ad:5d:04:5c:70:b1:12:0d:94:39:be:25:
06:b5:37:ab:85:9a:18:98:60:7d:6b:69:2c:e2:ef:
39:6f:48:3d:61:7e:7a:f1:35:fd:89:a8:23:f0:8f:
63:97:ec:4d:ed:c7:49:ed:5f:88:75:6e:d4:47:b8:
b0:1c:9f:4b:5e:99:51:36:58:e3:54:44:9c:94:a4:
f1:26:76:ef:64:9a:f0:ed:54:89:e4:75:74:b3:8e:
2e:ba:54:78:fe:25:51:83:22:d5:95:ac:f7:46:57:
9d:8d:41:eb:b2:0c:38:19:59:01:45:25:9f:8c:06:
79:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:83:C0:CB:F4:A6:1D:80:43:95:6D:A9:30:9B:B9:3B:8A:E1:B9:CA
X509v3 Authority Key Identifier:
keyid:A4:D8:00:DB:18:C7:C2:C7:97:11:B3:5F:C8:B7:D2:17:DC:7D:4C:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pNgA2xjHwseXEbNfyLfSF9x9TG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/E1B6596E447211F188990C259B833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.128.98.0/23
IPv6:
2402:5260::/32
Signature Algorithm: sha256WithRSAEncryption
3a:2d:0b:6f:a7:5d:29:ec:4e:5e:af:75:44:95:23:04:af:ed:
9d:12:de:1f:1d:84:38:97:64:4a:83:51:e5:79:c5:c7:f1:87:
bf:cc:53:cf:ac:a3:72:1e:2a:f4:d8:9a:07:75:23:17:e7:7e:
15:37:cc:7c:06:fc:f1:da:3e:b6:fa:20:3f:68:87:3e:ef:48:
fe:33:59:e4:7a:44:1a:31:ad:98:8f:73:f3:18:94:7a:e7:52:
b8:25:60:53:71:56:91:86:48:d3:6e:58:cf:f1:e7:d6:a9:e8:
39:2c:4d:a3:f6:b1:b5:cc:02:4a:77:8b:8a:19:e2:40:55:33:
dd:9a:99:83:d7:73:fe:1d:45:85:ce:29:3d:cd:3d:ee:f7:21:
3a:0d:86:0e:5f:d0:cf:4c:c9:d7:dd:51:6d:f2:ef:54:d3:3d:
0b:0c:90:29:59:57:98:d4:dc:45:77:5f:7c:1a:89:21:75:6b:
67:c8:d5:9a:ef:2c:e7:3b:37:6b:b2:98:c0:08:b0:35:ca:7b:
2d:ea:dd:16:51:56:d5:61:8a:4a:46:38:a1:2a:3b:2d:4d:83:
45:ad:05:c8:29:69:9f:fa:ae:45:8b:e8:65:57:0c:73:fb:a4:
28:75:9f:88:6d:78:bb:bc:1f:4a:c3:2c:fa:ed:0d:0c:5f:b4:
8c:63:41:6d
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
OUYwMDExMC8GA1UEBRMoQTREODAwREIxOEM3QzJDNzk3MTFCMzVGQzhCN0QyMTdE
QzdENEM2RTAeFw0yNjA0MzAwODU5MzhaFw0yNzA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5ZjMxOWZhLTZlZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDAWJu+wELPigYQruhdIZYUCZynHu4RC3YFRNh5CeqKH1mdbzzrxRrR4BI6KpIl
LHg+sB2uK3LDsa+TgjHgAFcg//FGxJOGzRRHlojopZtDUbeaEtL4q1VLF8KQYy3K
2YyG/+lkXpyaeLayWfaO5P7KvDQTXB2Pj3coXRnUpIoERe7E3zFxxVlJRK1dBFxw
sRINlDm+JQa1N6uFmhiYYH1raSzi7zlvSD1hfnrxNf2JqCPwj2OX7E3tx0ntX4h1
btRHuLAcn0temVE2WONURJyUpPEmdu9kmvDtVInkdXSzji66VHj+JVGDItWVrPdG
V52NQeuyDDgZWQFFJZ+MBnmTAgMBAAGjggJvMIICazAdBgNVHQ4EFgQUIYPAy/Sm
HYBDlW2pMJu5O4rhucowHwYDVR0jBBgwFoAUpNgA2xjHwseXEbNfyLfSF9x9TG4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5RjAwLzBCQjFFNEIwMkMy
NTExRjE4RjcxMjU4MTlCODMzNzczL3BOZ0EyeGpId3NlWEViTmZ5TGZTRjl4OVRH
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcE5nQTJ4akh3c2VYRWJOZnlMZlNGOXg5VEc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OUYwMC8wQkIxRTRCMDJDMjUxMUYxOEY3MTI1ODE5QjgzMzc3My9FMUI2NTk2RTQ0
NzIxMUYxODg5OTBDMjU5QjgzMzc3My5yb2EwLgYIKwYBBQUHAQcBAf8EHzAdMAwE
AgABMAYDBAGjgGIwDQQCAAIwBwMFACQCUmAwDQYJKoZIhvcNAQELBQADggEBADot
C2+nXSnsTl6vdUSVIwSv7Z0S3h8dhDiXZEqDUeV5xcfxh7/MU8+so3IeKvTYmgd1
IxfnfhU3zHwG/PHaPrb6ID9ohz7vSP4zWeR6RBoxrZiPc/MYlHrnUrglYFNxVpGG
SNNuWM/x59ap6DksTaP2sbXMAkp3i4oZ4kBVM92amYPXc/4dRYXOKT3NPe73IToN
hg5f0M9MydfdUW3y71TTPQsMkClZV5jU3EV3X3waiSF1a2fI1ZrvLOc7N2uymMAI
sDXKey3q3RZRVtVhikpGOKEqOy1Ng0WtBcgpaZ/6rkWL6GVXDHP7pCh1n4hteLu8
H0rDLPrtDQxftIxjQW0=
-----END CERTIFICATE-----
Generated at Wed May 13 15:24:01 2026 by rpki-client