
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/30EAE110B9AD11EE83063243C4F9AE02.roa
File: 30EAE110B9AD11EE83063243C4F9AE02.roa (raw, json)
Hash identifier: QreKN0Rd5UfNyWwEd5SMYjaTfZ6J0wKhOlda79WX3co=
Subject key identifier: 10:E6:AE:10:CB:1C:21:B0:32:AE:45:89:C6:70:DC:2D:B1:EF:B0:E2
Certificate issuer: /CN=A91CE978/serialNumber=4594F2EC17DF56C3D06540F366D2AF118B317F1E
Certificate serial: 01BE
Authority key identifier: 45:94:F2:EC:17:DF:56:C3:D0:65:40:F3:66:D2:AF:11:8B:31:7F:1E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RZTy7BffVsPQZUDzZtKvEYsxfx4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/30EAE110B9AD11EE83063243C4F9AE02.roa
Signing time: Tue 12 May 2026 15:12:58 +0000
ROA not before: Tue 12 May 2026 15:12:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45459
IP address blocks: 67.215.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.crl
rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RZTy7BffVsPQZUDzZtKvEYsxfx4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446 (0x1be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE978, serialNumber=4594F2EC17DF56C3D06540F366D2AF118B317F1E
Validity
Not Before: May 12 15:12:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a03437a-2df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:80:95:5f:29:52:c4:68:ae:52:1f:6a:5a:bb:
6a:fb:a3:89:09:53:d3:1e:0e:62:14:bd:d3:c3:ee:
b0:b1:ec:cc:c7:76:71:07:24:34:bb:f7:45:27:d0:
89:af:2c:9d:5c:38:3b:cd:5c:02:21:4b:c0:c6:af:
16:89:8b:b9:0b:20:66:8d:5c:56:6d:23:4b:bb:df:
32:27:cf:00:5b:af:af:e0:ea:c0:9b:17:c7:cb:f3:
2e:69:20:13:de:88:1e:e8:32:29:d9:db:10:36:0e:
02:90:b7:91:ee:3f:8a:bb:b4:88:04:6d:8d:f9:f1:
a9:73:cd:86:7d:4b:c6:8d:6f:53:ae:0a:37:73:da:
6a:72:54:8f:50:af:48:9a:80:fe:d8:18:29:c8:3a:
a3:cd:cc:4f:2b:ad:ce:31:69:57:a5:2f:94:69:14:
a6:c4:d2:48:b6:30:32:08:02:90:34:f5:37:36:a7:
ee:d2:d9:7e:b9:23:f7:b6:0b:fe:40:a9:3b:a9:53:
0f:bd:43:f6:d3:95:92:86:8b:81:8c:23:08:41:2d:
8a:8c:6e:56:8d:56:bd:d6:fc:05:9d:d1:32:69:e0:
3c:7d:6c:4b:98:37:52:48:40:29:08:f7:e9:15:97:
a3:81:a4:ce:f8:e8:5c:7b:a6:2b:e0:d1:9f:96:e3:
77:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E6:AE:10:CB:1C:21:B0:32:AE:45:89:C6:70:DC:2D:B1:EF:B0:E2
X509v3 Authority Key Identifier:
keyid:45:94:F2:EC:17:DF:56:C3:D0:65:40:F3:66:D2:AF:11:8B:31:7F:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RZTy7BffVsPQZUDzZtKvEYsxfx4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/30EAE110B9AD11EE83063243C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
67.215.112.0/21
Signature Algorithm: sha256WithRSAEncryption
68:a3:23:a6:44:0f:d1:77:d0:02:72:33:ce:0e:df:d0:89:8c:
5a:28:94:51:91:4b:fc:cc:a9:cd:9e:8b:a0:0e:ad:80:60:54:
fb:46:aa:3a:7c:49:9b:a0:df:54:26:6d:83:0b:c3:7c:3f:dd:
e1:5f:fa:d9:86:f1:c3:86:23:e4:81:85:40:f0:55:38:95:ca:
b0:22:36:1c:52:4c:e3:88:3a:df:33:5b:18:4b:9d:ee:61:8c:
d8:84:3a:aa:85:56:3c:2e:5b:df:9a:03:0e:64:b7:2c:06:34:
8a:d4:27:bd:0b:67:d7:b1:68:e6:bf:46:b5:46:81:9c:35:a0:
1e:78:ee:8e:70:be:8c:3f:2d:e8:70:17:8b:09:c6:67:68:f3:
88:46:d9:cb:3d:93:87:40:61:69:69:88:d5:81:52:cc:f2:7b:
f3:45:e7:d4:7d:0d:ab:6c:f2:cd:66:54:4a:65:7e:af:3f:26:
92:81:56:c5:49:ab:7a:8b:cf:49:ef:da:46:83:d9:bb:35:d6:
3b:43:38:1d:23:23:8d:7d:37:8f:17:e6:f0:e2:ba:f3:61:67:
c5:37:d3:56:d9:4d:b6:7e:49:a7:6b:68:db:6d:fc:9c:a1:74:
8e:fb:a4:d8:d8:55:4c:0f:1b:df:2e:65:57:de:dc:1e:4d:f9:
f8:8e:59:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:32:48 2026 by rpki-client