
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/1EC99BBCA2F811F0ACA39B18C4F9AE02.roa
File: 1EC99BBCA2F811F0ACA39B18C4F9AE02.roa (raw, json)
Hash identifier: Y2w151Sd/NSv/Gx02xlDDidA2Mi4842f5ckvhNv506A=
Subject key identifier: 2D:D3:C1:9D:E4:73:10:0B:E1:B4:82:85:02:C9:CE:7F:64:D6:CF:1A
Certificate issuer: /CN=A91CA294/serialNumber=19BD822D3EB6FF6E9370245EE874BEA9EB8BEE55
Certificate serial: D9
Authority key identifier: 19:BD:82:2D:3E:B6:FF:6E:93:70:24:5E:E8:74:BE:A9:EB:8B:EE:55
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/1EC99BBCA2F811F0ACA39B18C4F9AE02.roa
Signing time: Fri 23 Oct 2026 07:55:12 +0000
ROA not before: Fri 23 Oct 2026 07:55:12 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 198949
IP address blocks: 156.69.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.crl
rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Nov 2026 06:49:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA294, serialNumber=19BD822D3EB6FF6E9370245EE874BEA9EB8BEE55
Validity
Not Before: Oct 23 07:55:12 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6adb12e0-987c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8d:90:c5:99:d1:c6:6c:47:ff:55:07:43:9e:
76:50:67:94:9c:ed:3f:8a:fc:b6:92:ba:ec:7d:b8:
a7:10:6f:00:56:8a:c0:b8:b1:fd:c2:44:c6:2d:bd:
d9:20:6c:fb:57:fb:8e:8a:4b:fb:1c:c1:6f:3f:1c:
2b:f4:1d:62:68:54:f4:5f:2e:38:67:d0:56:6c:6c:
ea:e7:b3:7b:5c:b3:e8:72:7f:35:3b:e1:77:3b:18:
dd:67:09:df:62:69:29:11:b3:9a:f9:fb:54:c2:89:
45:97:8b:b3:e1:79:7e:ad:56:37:ce:26:b3:b4:74:
b2:7d:50:0e:a0:04:9e:79:e3:48:cd:b3:a4:75:01:
dc:26:37:89:5a:eb:e3:2d:cd:cb:e6:cc:28:38:15:
51:80:ae:e0:6c:d9:fb:96:38:2f:3c:5e:94:ef:32:
73:f5:31:41:d9:0e:de:ea:cf:a8:cc:d1:24:6c:05:
23:61:89:38:1b:ea:f3:b7:e0:b8:b4:fa:78:3b:7d:
2c:36:29:34:1d:38:19:aa:86:9b:f1:01:f9:01:59:
71:46:b7:ed:9e:0c:b6:c3:f2:3d:4e:5e:77:61:41:
ad:fd:b5:58:35:f6:12:5f:b1:5b:9f:7e:55:b3:84:
16:ab:3c:1a:b1:cc:45:34:13:47:dc:f1:d1:db:df:
3b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D3:C1:9D:E4:73:10:0B:E1:B4:82:85:02:C9:CE:7F:64:D6:CF:1A
X509v3 Authority Key Identifier:
keyid:19:BD:82:2D:3E:B6:FF:6E:93:70:24:5E:E8:74:BE:A9:EB:8B:EE:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/1EC99BBCA2F811F0ACA39B18C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
156.69.31.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:7c:7b:48:e1:fb:44:b9:0f:79:0b:2d:e0:f5:79:6b:d3:d0:
37:45:2a:b2:8b:f4:4b:54:f7:3d:67:ae:a1:69:f2:93:a5:48:
69:77:3a:f0:d7:35:cf:a5:6b:f2:90:c7:b2:ef:52:bd:20:7f:
b9:cb:ca:52:5d:08:64:7e:b6:76:34:80:98:ff:5a:af:c5:a7:
b4:9b:31:3d:68:01:a7:93:00:dc:55:95:96:9a:6a:b9:a8:21:
f2:ae:68:1c:74:b7:8e:22:c0:a5:8d:2e:a5:b5:07:f7:53:54:
fc:3f:af:46:35:ee:c9:f6:0a:d0:dd:a0:d1:b1:87:6a:67:6d:
ca:bb:58:26:a9:e1:b1:79:0a:7e:bd:00:82:bd:1e:b5:39:3b:
26:60:e2:dd:d1:ef:0b:38:9d:bf:70:ca:14:1b:fe:42:5e:fd:
64:85:88:d7:5a:bb:08:23:19:cd:04:c5:2d:7b:45:81:1d:77:
6b:a0:d9:b5:8a:43:77:61:73:2a:38:d8:64:ee:86:e1:e9:71:
36:ad:73:dd:27:13:1e:8f:a7:00:5a:09:2e:3e:de:c4:11:c1:
ee:01:dc:b7:df:66:34:b6:63:ca:bb:05:f1:fb:8c:fd:df:eb:
95:59:47:19:c3:28:7c:35:2b:16:da:a3:c6:26:8f:29:c3:38:
ca:56:d3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:38:57 2026 by rpki-client