
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/C14680A887BF11EF8804736AC4F9AE02.roa
File: C14680A887BF11EF8804736AC4F9AE02.roa (raw, json)
Hash identifier: B/TNuMgaTyUyb58Wxh1ho+MvyCpcFyIGCmgXiDCc6KA=
Subject key identifier: C9:19:B3:72:1F:F8:A9:E2:C3:A7:18:9F:2D:08:E1:B3:82:F0:DB:87
Certificate issuer: /CN=A91CCA92/serialNumber=6A458AB0FC56282933183D468051BFC507911632
Certificate serial: 0111
Authority key identifier: 6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/C14680A887BF11EF8804736AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:10:11 +0000
ROA not before: Fri 19 Dec 2025 05:24:47 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 152144
IP address blocks: 210.87.106.0/24 maxlen: 24
210.87.107.0/24 maxlen: 24
2401:5760::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.crl
rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 05:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273 (0x111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCA92, serialNumber=6A458AB0FC56282933183D468051BFC507911632
Validity
Not Before: Dec 19 05:24:47 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a41e93-a8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:18:e1:2e:a5:25:d5:44:76:22:9e:55:ce:09:
59:f3:6d:fe:90:3f:7d:bb:5d:61:07:8d:f6:21:6d:
d9:d1:ba:99:9a:c3:db:ce:32:db:b7:ef:92:91:3a:
a4:1b:3d:a4:3e:b0:3f:bd:b6:80:25:86:21:4d:af:
62:2a:64:2c:20:76:e6:d3:44:dd:f3:6c:b2:66:2a:
00:9d:63:f9:0a:31:3d:70:0d:f5:ec:03:d0:b9:19:
62:4b:0f:3e:e0:94:e0:0f:da:00:69:a2:93:0a:aa:
fe:15:55:cc:88:b1:1b:a8:77:09:76:bd:3f:97:6d:
72:0e:3d:84:f6:48:0c:94:76:97:41:51:18:4c:84:
42:00:a4:59:9c:eb:45:5e:5a:6c:e9:0b:af:0f:a6:
45:60:b2:74:8f:c4:5e:f9:67:ef:94:3b:a8:fb:39:
23:84:03:c8:b0:31:0f:2a:5c:cc:ff:84:7e:d0:59:
d9:f0:aa:64:76:5c:43:f3:37:de:32:77:e2:a7:af:
7c:36:dc:9e:6a:13:81:3b:b8:4b:11:9b:03:99:f3:
d1:b4:d1:ab:47:e3:45:09:ce:54:10:23:3a:52:d5:
8b:33:59:da:85:c1:0e:a5:e6:22:65:e1:27:90:f1:
4a:ce:29:d5:76:e4:a7:5f:1d:7b:29:78:a8:f7:14:
33:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:19:B3:72:1F:F8:A9:E2:C3:A7:18:9F:2D:08:E1:B3:82:F0:DB:87
X509v3 Authority Key Identifier:
keyid:6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/C14680A887BF11EF8804736AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.87.106.0/23
IPv6:
2401:5760::/32
Signature Algorithm: sha256WithRSAEncryption
05:74:e2:45:00:31:23:de:7a:c1:84:25:11:2f:a5:d5:fa:5e:
34:f7:27:a1:c3:96:5f:aa:ca:7d:62:2a:c8:17:57:73:a6:99:
5f:1d:ae:f1:e2:43:4d:1f:c9:1f:75:57:13:dc:29:e7:da:00:
bb:65:93:42:d8:56:6f:8c:e1:db:fa:aa:1a:20:a6:77:25:32:
06:01:7d:8a:23:2e:1a:a4:87:5d:e3:44:70:c8:2a:5d:d7:b6:
7c:3e:f3:36:13:c0:b5:33:d6:71:55:1a:d1:98:ff:61:2d:8d:
4b:94:74:23:da:43:b3:7f:98:f6:bc:69:04:c9:4a:64:6c:d6:
be:cb:d4:52:12:a2:58:29:9d:fc:d4:3e:1d:29:0e:6c:1c:3d:
b6:3c:8c:96:33:f6:1a:f4:86:23:7b:0f:eb:c7:a5:d8:eb:45:
47:37:6e:9e:16:b3:23:2e:96:06:ee:f1:72:ae:d5:17:06:96:
9b:cd:5b:1f:84:79:51:4f:aa:01:15:3b:a7:2e:af:49:b7:8b:
9b:55:86:c6:5d:f4:40:cb:29:b9:97:c5:c7:e4:d2:b7:0c:c1:
a7:81:ea:f0:ab:c1:6c:d3:68:ee:6a:a1:93:f4:79:81:5d:6b:
5f:ba:ce:32:24:c6:e5:c6:6e:16:d0:35:60:7a:4b:28:5f:63:
0f:dd:c1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 17:35:02 2026 by rpki-client