
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/09F2A296A02E11F08BC71221C4F9AE02.roa
File: 09F2A296A02E11F08BC71221C4F9AE02.roa (raw, json)
Hash identifier: 2jaK9Imhu+Xw7a9whl7nd2mMko9E0vTzAQrleZ3Kuic=
Subject key identifier: E2:25:8D:88:42:39:30:07:6B:B4:D5:C7:65:53:C4:7F:BA:F4:D0:A2
Certificate issuer: /CN=A91CEE6D/serialNumber=224721876A11E2D3A4B98B21BC84F78E64FEC846
Certificate serial: 92
Authority key identifier: 22:47:21:87:6A:11:E2:D3:A4:B9:8B:21:BC:84:F7:8E:64:FE:C8:46
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/09F2A296A02E11F08BC71221C4F9AE02.roa
Signing time: Thu 25 Jun 2026 08:40:22 +0000
ROA not before: Thu 25 Jun 2026 08:40:22 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 38083
IP address blocks: 134.7.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.crl
rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:10:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEE6D, serialNumber=224721876A11E2D3A4B98B21BC84F78E64FEC846
Validity
Not Before: Jun 25 08:40:22 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a3ce976-6bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:57:48:d8:b3:e0:dd:f1:ba:28:e9:9c:9a:0a:
c2:18:a2:11:73:f7:7f:a9:7f:10:ae:01:85:71:0f:
8f:2f:eb:fe:24:dd:87:de:4f:c6:9b:26:e2:73:d8:
14:cf:b0:41:b1:0a:55:7d:66:88:50:12:40:70:c6:
d2:11:96:cf:92:e7:81:58:3e:4a:db:5d:5b:fb:bc:
1e:5c:ec:51:cf:ef:69:81:bc:b3:2c:ba:5f:45:73:
b6:bb:f5:16:6c:34:1d:94:e7:54:79:96:ca:82:0a:
00:33:ba:aa:a3:de:ce:32:db:82:59:75:e5:a4:0a:
07:4a:74:2a:d2:07:a6:40:64:2f:76:a7:90:37:14:
fb:0a:95:52:2c:1a:db:bb:18:d9:b3:55:72:85:44:
8d:0b:59:21:67:23:c7:63:87:c5:a5:de:54:dd:e0:
88:87:48:f5:bb:06:00:79:a7:d4:ce:a6:85:b0:08:
98:88:c9:2a:a7:68:2f:c0:4f:7d:43:8b:ce:57:e3:
20:9c:74:8d:20:d5:b0:63:a5:68:6b:5d:09:91:cf:
2e:37:57:be:49:0e:ff:1c:3d:b5:50:58:58:58:3a:
c3:a0:0e:32:41:5f:d2:c9:26:18:4f:b9:ab:d5:61:
90:dc:14:62:c8:53:70:34:d9:13:29:71:b9:58:87:
b3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:25:8D:88:42:39:30:07:6B:B4:D5:C7:65:53:C4:7F:BA:F4:D0:A2
X509v3 Authority Key Identifier:
keyid:22:47:21:87:6A:11:E2:D3:A4:B9:8B:21:BC:84:F7:8E:64:FE:C8:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/09F2A296A02E11F08BC71221C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
134.7.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c5:f8:70:f5:23:a9:cd:5b:89:4a:7f:6b:ec:f0:7f:6d:1a:a2:
e7:56:77:59:78:43:87:ed:54:86:1f:b9:8b:dd:68:db:66:fd:
ae:a8:20:c6:45:59:72:20:3a:a4:30:8f:dd:8a:f4:71:ea:7f:
29:07:1b:30:f7:40:65:c4:88:1c:16:2a:e5:c2:44:3e:96:fa:
ac:d8:e7:6d:12:33:f5:b1:ee:10:46:a1:b1:97:70:8b:e1:12:
c0:e1:38:d3:7b:0a:f9:34:21:03:29:10:ce:b0:68:72:89:1f:
3f:10:65:43:80:0e:a7:34:f6:b6:84:20:92:78:2e:57:0b:56:
d8:2b:9f:b4:29:88:ab:3f:70:e2:2e:74:3e:0a:92:dc:92:7f:
7c:92:9d:97:d0:30:6e:d5:77:7d:25:12:0a:db:8b:ce:58:6a:
3b:34:fe:e2:2a:d8:58:cd:b8:53:44:df:04:58:a2:8d:7e:df:
d9:0a:f9:41:e3:47:bb:12:d7:79:b9:2a:92:63:a2:cd:36:c4:
00:44:23:ee:d9:21:03:74:05:fb:db:6a:a7:a0:13:3f:06:31:
94:de:94:e0:d1:f1:b5:9f:b3:a3:f0:8c:da:fe:93:0e:6b:65:
15:66:cc:33:32:c7:44:19:05:29:8c:d1:8e:a8:d9:dd:b0:4f:
33:d6:3b:cb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:21:35 2026 by rpki-client