
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/1E0F8E02A2F811F0ACA39B18C4F9AE02.roa
File: 1E0F8E02A2F811F0ACA39B18C4F9AE02.roa (raw, json)
Hash identifier: NlcyVDyxB6GuzIcN9CcqYsXH/G62jfahp6/xAFojKSs=
Subject key identifier: E5:D8:64:DF:3A:E4:57:48:43:22:CD:C8:68:2F:D7:95:04:98:DC:9A
Certificate issuer: /CN=A91CA294/serialNumber=19BD822D3EB6FF6E9370245EE874BEA9EB8BEE55
Certificate serial: D8
Authority key identifier: 19:BD:82:2D:3E:B6:FF:6E:93:70:24:5E:E8:74:BE:A9:EB:8B:EE:55
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/1E0F8E02A2F811F0ACA39B18C4F9AE02.roa
Signing time: Fri 23 Oct 2026 07:55:10 +0000
ROA not before: Fri 23 Oct 2026 07:55:10 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 139744
IP address blocks: 156.69.0.0/23 maxlen: 24
156.69.8.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.crl
rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Nov 2026 06:49:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA294, serialNumber=19BD822D3EB6FF6E9370245EE874BEA9EB8BEE55
Validity
Not Before: Oct 23 07:55:10 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6adb12de-ecea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d0:76:13:5d:9f:85:be:5c:19:f6:a6:2b:3f:
75:30:ad:78:23:4f:30:90:f7:51:1b:7a:be:90:5d:
89:d9:f2:0c:b7:15:16:28:f7:95:c2:76:35:86:ef:
a0:eb:1c:91:92:01:fb:8e:32:19:3d:b8:b5:b2:35:
61:73:7d:61:88:fa:19:de:9e:a2:5a:4b:0e:5d:6a:
07:4b:85:d9:59:ff:d3:50:44:4a:65:ba:08:85:d5:
1b:7b:dd:eb:5e:51:02:69:78:f8:ec:1b:d9:d3:83:
3d:b9:d1:ee:a8:9b:7c:19:a8:bf:73:74:be:16:00:
77:da:4e:77:b7:68:21:dc:be:75:a6:57:8b:f2:9b:
ad:16:91:d2:ce:86:99:d2:d9:b0:5b:b0:1e:ec:d3:
c0:62:c9:b6:6a:7d:df:db:b5:8b:c3:ea:49:95:4c:
2f:48:4d:57:cd:94:21:f1:e1:79:51:f1:91:fd:52:
2d:2c:4f:82:e2:b8:9a:0c:d3:77:19:3a:af:3c:be:
3d:fb:0c:d7:0c:73:be:d9:ab:4e:d9:e7:05:e9:01:
f7:d8:0d:93:5d:5d:51:ca:85:44:a2:e5:67:e6:f5:
c5:34:ba:d9:5d:90:97:e3:57:e1:63:64:a6:f1:22:
e7:f1:6c:a4:9f:85:fe:4a:46:5b:a8:e1:65:60:6e:
17:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D8:64:DF:3A:E4:57:48:43:22:CD:C8:68:2F:D7:95:04:98:DC:9A
X509v3 Authority Key Identifier:
keyid:19:BD:82:2D:3E:B6:FF:6E:93:70:24:5E:E8:74:BE:A9:EB:8B:EE:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/1E0F8E02A2F811F0ACA39B18C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
156.69.0.0/23
156.69.8.0/23
Signature Algorithm: sha256WithRSAEncryption
13:88:8c:5d:69:39:2d:2e:1a:c8:01:ca:8f:5e:fd:5c:ca:51:
c7:8e:ee:dd:01:41:98:5c:cb:af:36:9f:f9:5e:54:33:21:f3:
9e:c4:b6:98:02:e8:63:82:b5:a1:37:c7:40:2d:05:a1:46:4e:
d5:b7:df:6e:10:2c:ac:4b:1e:27:76:97:84:b9:42:86:80:f5:
e6:94:f1:71:84:a6:15:67:a9:35:05:af:ac:5c:5c:26:de:cd:
43:5f:18:ab:80:86:c6:ee:26:ef:6a:a6:53:26:dd:b2:39:df:
1f:01:52:04:fd:d0:a3:52:f3:dd:3b:72:74:98:a3:9e:9b:89:
84:06:9c:15:ae:73:84:4a:00:a5:d2:a8:26:a1:53:7e:7b:2e:
0c:68:3c:fd:9f:52:7f:5f:95:d2:c4:5c:46:72:56:7f:39:b2:
ba:8a:e9:3f:fd:46:20:6d:63:dc:56:9e:2c:c7:3d:f2:fc:d6:
3e:9c:6b:ff:0e:9b:cf:86:89:a2:da:34:5d:f1:01:e6:60:79:
96:ec:7a:b9:b2:8f:42:6d:85:5d:1e:3e:a0:4b:63:c1:90:0e:
77:04:9f:6e:bf:e5:07:72:67:b3:f2:51:5e:57:90:02:ff:19:
26:26:41:3c:d1:fb:15:75:2c:89:3a:d5:a9:0e:59:83:24:fc:
29:19:93:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:04:04 2026 by rpki-client