
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/EC427D64B16311ECA18ED12FC4F9AE02.roa
File: EC427D64B16311ECA18ED12FC4F9AE02.roa (raw, json)
Hash identifier: cQH/POh8o+aP5ihP0cfrYaYM446EMCWcB+KlRcczvBM=
Subject key identifier: 96:0D:B9:A4:A8:63:C0:52:68:14:EA:F3:71:0F:24:01:3F:48:57:FE
Certificate issuer: /CN=A91CE3C4/serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
Certificate serial: 0734
Authority key identifier: B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/EC427D64B16311ECA18ED12FC4F9AE02.roa
Signing time: Thu 30 Apr 2026 22:28:19 +0000
ROA not before: Thu 30 Apr 2026 22:28:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17477
IP address blocks: 194.193.0.0/19 maxlen: 21
194.193.0.0/20 maxlen: 24
194.193.20.0/22 maxlen: 24
194.193.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl
rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1844 (0x734)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE3C4, serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
Validity
Not Before: Apr 30 22:28:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f3d783-1327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:55:f2:7b:02:43:6f:d0:21:21:4c:67:f6:dc:
d4:0b:5b:f8:8f:aa:3f:e5:1a:3e:49:2f:a0:74:31:
66:13:04:20:77:37:8d:89:e7:4f:a8:5f:44:ae:47:
78:8b:4d:5e:68:64:d4:a5:7c:da:fd:fa:73:28:f9:
df:25:a1:ff:e5:fc:8b:46:fc:58:06:df:c5:7f:bb:
32:f0:66:b4:42:81:81:21:64:5f:e9:8c:2e:fe:67:
8d:89:80:32:b5:02:9e:c1:24:6f:b4:9c:8c:69:88:
82:25:c1:b7:51:f3:6c:78:5d:5b:a2:d4:a0:0b:dd:
8a:c6:c1:12:f3:bd:fa:fc:77:30:04:9c:96:a6:7b:
81:c4:99:da:eb:47:94:a2:61:a0:35:31:f6:7f:b9:
80:b0:2a:3c:d0:d4:e9:c1:86:4b:2e:3d:eb:f0:15:
66:5d:90:1d:0b:73:37:ad:84:f3:fb:24:3c:b3:59:
2f:d0:5c:fd:f9:4a:e7:c4:0c:29:fb:c1:46:63:4e:
fc:15:93:db:ff:8a:68:7e:01:fa:af:42:a3:e4:50:
b9:82:c8:02:0d:24:eb:ac:a6:df:d3:30:81:e8:7b:
1b:eb:6d:9e:a7:85:bf:8a:e6:bd:38:54:ba:8a:ce:
0c:8a:b0:f2:9e:9e:51:47:b3:47:53:c4:6c:f8:14:
ed:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0D:B9:A4:A8:63:C0:52:68:14:EA:F3:71:0F:24:01:3F:48:57:FE
X509v3 Authority Key Identifier:
keyid:B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/EC427D64B16311ECA18ED12FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
194.193.0.0/19
Signature Algorithm: sha256WithRSAEncryption
34:d8:82:c5:9b:70:87:27:ac:ad:0d:df:65:5f:24:28:71:50:
46:5c:e2:f6:56:3f:56:7d:7a:e9:9b:e3:d7:2c:ab:6f:8c:0b:
7c:19:4e:f7:c2:ac:c4:3f:57:fc:14:5d:51:e1:fa:e7:fb:31:
5a:4e:ec:29:d5:52:4f:3d:d3:71:21:b1:86:93:9b:e3:4e:0a:
6f:ed:c8:a4:2c:e7:7c:35:fc:cf:c3:e7:c5:23:3d:22:f1:88:
c0:1a:cb:99:9a:96:9d:0a:89:49:88:1a:21:a4:8b:cd:8b:4a:
c0:ef:e8:aa:32:e8:6b:b8:77:af:1a:11:5d:25:43:aa:b2:ba:
55:0b:55:6e:33:ee:33:ba:62:e6:7a:a4:03:e1:8f:6c:1e:c8:
a0:01:4d:92:e0:29:ad:13:99:a7:cb:56:9b:58:23:a0:5e:26:
24:5a:e4:87:3b:28:fd:5b:de:1e:87:5f:34:86:e5:d2:f3:1d:
42:d6:5a:86:65:31:c7:a1:af:af:5e:d0:88:f2:a2:9e:c4:61:
12:79:c9:51:7d:26:7b:24:94:c5:64:33:f5:18:0d:ee:9f:9b:
fa:a3:34:f7:da:56:d4:c4:80:9f:62:ce:d8:6e:9d:c4:32:2e:
e2:a5:25:ae:e0:e6:95:0a:52:d1:8f:ba:14:f0:ba:04:f9:3e:
f4:76:9e:5e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0UzQzQxMTAvBgNVBAUTKEI2RkQ2RjRCNEZCN0MzMjQ3QzU5OTI5OUIyRThCQUZC
NUE4QkJBNzIwHhcNMjYwNDMwMjIyODE5WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWYzZDc4My0xMzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA31XyewJDb9AhIUxn9tzUC1v4j6o/5Ro+SS+gdDFmEwQgdzeNiedPqF9Erkd4
i01eaGTUpXza/fpzKPnfJaH/5fyLRvxYBt/Ff7sy8Ga0QoGBIWRf6Ywu/meNiYAy
tQKewSRvtJyMaYiCJcG3UfNseF1botSgC92KxsES8736/HcwBJyWpnuBxJna60eU
omGgNTH2f7mAsCo80NTpwYZLLj3r8BVmXZAdC3M3rYTz+yQ8s1kv0Fz9+UrnxAwp
+8FGY078FZPb/4pofgH6r0Kj5FC5gsgCDSTrrKbf0zCB6Hsb622ep4W/iua9OFS6
is4MirDynp5RR7NHU8Rs+BTtqQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJYNuaSo
Y8BSaBTq83EPJAE/SFf+MB8GA1UdIwQYMBaAFLb9b0tPt8MkfFmSmbLouvtai7py
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNDNC82REQ5RjMzNDdG
OTcxMUVCQUREQzVGMTVDNEY5QUUwMi90djF2UzAtM3d5UjhXWktac3VpNi0xcUx1
bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3R2MXZTMC0zd3lSOFdaS1pzdWk2LTFxTHVuSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0UzQzQvNkREOUYzMzQ3Rjk3MTFFQkFEREM1RjE1QzRGOUFFMDIvRUM0MjdENjRC
MTYzMTFFQ0ExOEVEMTJGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQFwsEAMA0GCSqGSIb3DQEBCwUAA4IBAQA02ILFm3CHJ6ytDd9lXyQo
cVBGXOL2Vj9WfXrpm+PXLKtvjAt8GU73wqzEP1f8FF1R4frn+zFaTuwp1VJPPdNx
IbGGk5vjTgpv7cikLOd8NfzPw+fFIz0i8YjAGsuZmpadColJiBohpIvNi0rA7+iq
MuhruHevGhFdJUOqsrpVC1VuM+4zumLmeqQD4Y9sHsigAU2S4CmtE5mny1abWCOg
XiYkWuSHOyj9W94eh180huXS8x1C1lqGZTHHoa+vXtCI8qKexGESeclRfSZ7JJTF
ZDP1GA3un5v6ozT32lbUxICfYs7Ybp3EMi7ipSWu4OaVClLRj7oU8LoE+T70dp5e
-----END CERTIFICATE-----
Generated at Wed May 13 02:44:57 2026 by rpki-client