
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/A40873CE7FB811EB82018D29C4F9AE02.roa
File: A40873CE7FB811EB82018D29C4F9AE02.roa (raw, json)
Hash identifier: DwkOyNqHpDdS7Fd7fdK5+12iodhZ87+NZFCN1mCEus8=
Subject key identifier: A3:D8:6A:16:A5:3D:31:19:2E:D7:D8:DF:67:2F:EF:6A:35:FC:5F:84
Certificate issuer: /CN=A91CE3C4/serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
Certificate serial: 0733
Authority key identifier: B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/A40873CE7FB811EB82018D29C4F9AE02.roa
Signing time: Thu 30 Apr 2026 22:28:17 +0000
ROA not before: Thu 30 Apr 2026 22:28:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140637
IP address blocks: 194.193.16.0/22 maxlen: 24
194.193.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl
rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1843 (0x733)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE3C4, serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
Validity
Not Before: Apr 30 22:28:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f3d781-ac98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:90:7d:cd:b2:7c:11:f2:fb:b7:7c:bc:6a:
70:44:6c:6c:72:ee:5e:ca:a3:da:1f:dc:3e:c4:71:
ab:44:8b:a4:b3:4a:89:5d:46:57:3c:de:6b:15:ba:
93:5e:27:2a:2e:f8:e9:08:c6:af:d4:0c:aa:8b:ca:
1a:e1:fa:10:9f:98:a4:c3:91:4a:1b:28:4e:b6:e1:
42:04:f1:d5:33:4e:99:68:5c:12:27:08:b2:28:1c:
ca:ed:69:73:58:59:05:3d:b0:38:1b:cc:86:66:f1:
ae:2a:a7:76:bc:11:f9:87:db:6d:29:bb:63:8d:97:
25:76:85:cf:a2:f5:49:ae:4e:8e:3c:7d:ae:d9:12:
41:75:1f:bd:88:cd:6e:0c:fa:ba:06:62:7b:db:28:
e2:6f:4c:e0:ed:7a:0f:f7:25:ad:ce:f5:10:5a:09:
fa:6a:5e:3f:a3:53:31:ee:50:cf:8a:d8:15:e6:02:
91:2a:d8:00:61:a0:2d:bc:c8:ca:92:df:6c:4f:f1:
21:fc:dc:ba:b2:6d:ac:d3:31:00:3c:f4:c2:b6:74:
d8:5e:cd:ec:b7:d5:0e:14:9b:65:e4:5e:2e:92:c3:
11:18:16:14:47:8c:76:84:a4:e6:aa:a3:6f:1c:46:
e8:c2:a9:d0:52:48:05:56:1a:a5:a9:93:6f:3c:d7:
fe:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D8:6A:16:A5:3D:31:19:2E:D7:D8:DF:67:2F:EF:6A:35:FC:5F:84
X509v3 Authority Key Identifier:
keyid:B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/A40873CE7FB811EB82018D29C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
194.193.16.0/22
194.193.28.0/22
Signature Algorithm: sha256WithRSAEncryption
42:fd:1c:22:a0:90:a3:98:da:25:56:f4:ce:de:9f:78:34:3a:
ad:ca:57:32:06:51:05:37:fb:75:d1:65:2f:21:c5:ea:f5:0f:
e6:b1:68:f8:2b:4f:8a:c7:96:f4:49:46:1a:c8:31:01:80:56:
89:f1:d1:0b:39:c6:7a:06:cd:93:75:b8:0f:d1:ba:c8:45:e5:
2b:98:9b:d9:b4:a2:24:68:19:62:27:e5:70:76:7a:a3:10:47:
01:06:54:29:31:de:fa:46:8b:77:99:61:fe:a1:9a:97:a7:94:
84:7e:69:83:45:87:c7:60:e7:ce:db:94:67:83:bf:d3:8b:ab:
2d:93:d1:8f:8c:c6:51:2e:02:c7:80:72:f4:51:24:14:ec:a7:
94:3f:f3:e5:7c:77:8a:6d:37:08:c5:7a:cb:30:b6:d8:95:a2:
63:d2:9d:b5:00:d7:d6:37:7d:8c:03:10:b2:c3:8a:7f:5f:a4:
7c:58:74:e5:32:51:7c:85:56:ab:21:ba:1f:5b:a4:3c:5c:ea:
0e:3b:06:2b:38:b6:3c:e9:22:00:cb:5b:ae:c7:97:d6:49:2e:
d0:02:47:db:03:31:87:4d:52:26:d0:02:4c:7d:0f:51:c8:a3:
1a:1c:73:2c:fc:62:17:0f:88:c1:3c:e4:ca:bc:67:35:29:81:
2e:25:5c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:18:05 2026 by rpki-client