
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/A40873CE7FB811EB82018D29C4F9AE02.roa
File: A40873CE7FB811EB82018D29C4F9AE02.roa (raw, json)
Hash identifier: t6apfvlYJvqq9FJWUtI8eDXqztkm176ohKOkUYdVlcw=
Subject key identifier: B7:5F:C3:FA:30:7A:DA:49:A8:32:29:C6:91:65:C2:1E:C1:E5:12:09
Certificate issuer: /CN=A91CE3C4/serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
Certificate serial: 070F
Authority key identifier: B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/A40873CE7FB811EB82018D29C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:30:43 +0000
ROA not before: Wed 30 Apr 2025 22:33:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140637
IP address blocks: 194.193.16.0/22 maxlen: 24
194.193.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl
rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:40:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1807 (0x70f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE3C4, serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
Validity
Not Before: Apr 30 22:33:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a59103-40c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7b:5e:62:e1:00:d5:fc:eb:b6:25:69:86:72:
29:f4:94:a5:0a:c1:75:2e:f3:8e:7b:fb:37:d3:72:
aa:5c:42:09:b6:71:66:a2:51:51:68:5b:7a:7d:b2:
8b:ae:d0:9e:fe:cb:12:20:3a:f7:81:bc:05:ef:23:
fc:35:6d:67:7f:dc:0d:3f:e1:ac:79:8f:cd:1b:80:
c8:ba:73:59:90:d5:fc:9e:a1:8c:a7:1a:5c:b5:dd:
c7:c6:e1:fd:f7:a8:0e:f5:18:c0:33:12:a9:71:63:
e6:0b:55:ad:e1:22:06:24:f2:ad:55:fe:31:93:54:
96:b0:73:3e:45:3a:cf:8c:0c:19:89:85:c9:d8:5c:
0c:45:ca:a0:a0:20:0f:19:c6:25:30:4e:b2:3c:70:
83:42:b2:ce:32:c6:d5:ab:91:d7:57:55:a3:44:dc:
b7:aa:fa:e2:18:42:cd:f4:19:a3:d2:6c:53:57:59:
04:df:ea:85:55:ce:5d:be:f5:6a:73:77:e6:ac:ed:
d8:c0:a2:10:65:7c:11:34:74:03:22:a2:d7:54:9b:
9d:9e:0d:4d:72:a4:03:dd:dc:3d:df:6f:56:f0:a5:
17:95:0a:48:83:26:29:55:3a:d9:15:6f:94:5f:8c:
62:c8:36:c3:d2:e4:d4:78:cf:35:f0:ad:e2:0e:b6:
24:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5F:C3:FA:30:7A:DA:49:A8:32:29:C6:91:65:C2:1E:C1:E5:12:09
X509v3 Authority Key Identifier:
keyid:B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/A40873CE7FB811EB82018D29C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
194.193.16.0/22
194.193.28.0/22
Signature Algorithm: sha256WithRSAEncryption
83:27:49:d8:b4:81:01:1b:e0:7e:7e:32:29:de:01:ad:f5:ad:
78:31:a1:5b:82:64:33:02:7c:e6:9d:4e:0e:69:67:95:40:a2:
fc:5f:bf:f4:d2:8d:f3:1f:fc:f1:b9:fe:c0:af:02:2c:b2:8d:
93:a7:b7:b6:23:05:25:e0:ef:ac:45:0a:48:4d:ba:87:39:63:
df:d7:43:df:94:0c:c7:f6:09:6d:da:cd:af:76:4b:ba:bb:5a:
1d:07:70:57:b9:c1:de:84:81:3a:85:93:f6:d2:b8:58:fe:6d:
0e:3f:0b:b7:f9:cf:c0:a9:89:e1:11:dc:73:54:7e:eb:c6:2c:
2e:08:4e:3b:06:4b:a3:df:46:fc:bc:3a:1f:00:a5:05:eb:78:
05:34:4f:0e:6a:05:0b:77:33:7f:10:43:1c:e4:d2:ef:43:e4:
af:13:6a:f5:80:56:d5:b5:6b:da:53:26:69:57:c1:09:8f:10:
34:38:88:4d:05:7f:c8:b1:0e:0d:88:9d:2c:0e:29:21:f1:28:
f3:b1:81:d1:56:ac:88:d6:d0:cb:00:e2:46:95:9b:94:13:84:
a3:06:67:0d:2f:ce:14:8a:b7:20:28:bf:2d:7c:e1:74:69:54:
80:ba:15:60:e5:32:13:d5:72:7f:f4:f4:77:63:6f:97:3c:17:
e5:99:e3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:13:22 2026 by rpki-client