
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/EC427D64B16311ECA18ED12FC4F9AE02.roa
File: EC427D64B16311ECA18ED12FC4F9AE02.roa (raw, json)
Hash identifier: TxcCtN38H5OlPjI5RyHb05Zr5Rw/P1AwnEYA5q9hLys=
Subject key identifier: 25:A8:F9:1E:87:3A:3F:F9:C2:25:F2:29:B9:1A:60:6D:2F:40:ED:D1
Certificate issuer: /CN=A91CE3C4/serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
Certificate serial: 0710
Authority key identifier: B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/EC427D64B16311ECA18ED12FC4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:30:44 +0000
ROA not before: Wed 30 Apr 2025 22:33:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 17477
IP address blocks: 194.193.0.0/19 maxlen: 21
194.193.0.0/20 maxlen: 24
194.193.20.0/22 maxlen: 24
194.193.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl
rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:40:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1808 (0x710)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE3C4, serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
Validity
Not Before: Apr 30 22:33:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a59104-9814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:aa:13:42:ee:b9:72:83:f1:d0:bc:45:80:d6:
81:e0:6a:aa:c7:83:94:6d:3d:45:5d:34:50:9d:02:
4c:46:5d:b8:0f:eb:34:35:59:6f:85:ac:a1:50:41:
6d:07:09:5c:e5:98:14:8f:20:70:59:41:8a:24:07:
f4:23:d9:4f:f8:fa:f2:64:c2:17:48:20:29:8f:13:
78:dd:b0:4d:a1:68:c0:7f:17:cc:28:2e:39:59:c7:
af:94:45:bf:62:e2:85:49:68:99:32:d4:5a:6a:0b:
af:a4:04:41:75:9d:e6:76:37:61:23:fb:55:de:77:
c3:96:4b:a8:30:65:70:2c:f3:60:1a:da:69:28:f8:
96:37:33:b2:61:d4:68:d9:e1:2d:74:ff:5d:c6:2b:
89:87:0b:80:a2:12:ce:59:55:f9:dc:ed:60:6c:d9:
28:2a:75:f8:d8:fe:b7:e7:72:73:20:ca:fe:45:d9:
95:1b:03:51:9e:4f:47:a1:00:15:e8:df:62:f4:b1:
db:81:6d:3d:da:c7:c2:23:e9:27:3d:04:cf:2c:24:
67:58:8b:16:01:12:c7:33:2d:53:dc:f2:00:c0:61:
41:91:9c:12:47:6f:ca:13:88:31:87:48:f0:81:71:
fe:d6:fc:db:73:69:ca:0e:2b:09:8c:59:fc:b8:6c:
1b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A8:F9:1E:87:3A:3F:F9:C2:25:F2:29:B9:1A:60:6D:2F:40:ED:D1
X509v3 Authority Key Identifier:
keyid:B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/EC427D64B16311ECA18ED12FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
194.193.0.0/19
Signature Algorithm: sha256WithRSAEncryption
5d:90:3c:26:1d:9d:e0:02:2e:bb:98:ba:6f:ea:e3:83:e4:5b:
83:3f:e8:31:78:12:35:74:68:8e:17:e8:43:b7:d3:0c:c5:6c:
31:9e:2b:3d:99:2c:47:3d:ba:69:b6:68:8b:97:ec:6a:22:8b:
00:39:c6:fc:68:11:d0:a7:1f:57:92:de:80:f3:56:d6:34:27:
bd:c2:66:77:bb:c8:30:6c:e3:6c:a0:5f:aa:2d:f4:23:bd:9a:
e8:4f:a0:b8:80:f6:8c:6e:4d:2a:c2:04:e1:71:c3:2c:88:cb:
af:c8:2d:5e:c1:12:31:c2:f8:6e:46:de:21:ea:d6:b9:3e:d0:
f8:1e:ac:83:c8:66:0e:b6:dd:45:3c:1b:ce:cd:32:12:c3:52:
71:ac:63:1d:fd:75:e7:2f:28:9d:41:3e:0b:4c:fd:f2:a2:ee:
11:81:d7:2d:c9:79:b0:b8:d4:00:40:88:6e:27:3f:0a:4e:e4:
f6:d5:2c:f3:9b:b4:b4:e4:49:d4:92:80:78:0f:a5:9a:87:54:
d5:3e:73:0f:09:cb:67:e2:a7:5f:8c:3d:95:1f:2c:81:fd:f4:
1f:fd:81:d6:c8:a8:f6:e9:20:68:f3:a3:86:71:a1:91:a1:67:
02:01:0c:f9:83:9b:29:36:69:37:06:92:2d:d6:77:41:ad:69:
bf:10:70:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:13:21 2026 by rpki-client