
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/34509C1AF49D11EFBD8ACC0EC4F9AE02.roa
File: 34509C1AF49D11EFBD8ACC0EC4F9AE02.roa (raw, json)
Hash identifier: A4JCozIWp8wr/poP9Jp6dNkVfMHGLYtzZMkqHhGl4c8=
Subject key identifier: D7:22:E7:8E:04:94:83:A1:68:D4:12:6B:69:A6:C0:92:7C:57:68:94
Certificate issuer: /CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
Certificate serial: 01E4
Authority key identifier: 58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/34509C1AF49D11EFBD8ACC0EC4F9AE02.roa
Signing time: Mon 09 Mar 2026 03:37:00 +0000
ROA not before: Mon 09 Mar 2026 03:37:00 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 134748
IP address blocks: 192.245.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl
rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:56:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 484 (0x1e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFF62, serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
Validity
Not Before: Mar 9 03:37:00 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69ae405c-f5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a9:8d:7f:de:af:86:d1:f5:f0:a1:20:0a:de:
85:b7:f2:a2:f2:54:99:4e:cf:7d:5e:c9:84:10:53:
b4:88:81:d4:58:e0:78:f8:1e:09:30:11:28:09:4f:
e9:7c:8c:6e:4e:54:31:a2:3c:40:cd:b6:d7:78:93:
1b:4f:b6:a5:a0:1d:3d:a8:ec:c2:d1:49:2b:9b:5f:
a1:b2:76:e5:a6:ca:e7:ae:7c:db:d6:70:0b:7e:11:
10:6a:01:d9:5b:4b:ec:ec:11:ac:a5:04:5a:49:d2:
a3:c7:c6:3b:ec:86:bc:1e:89:f9:60:39:1f:26:27:
57:34:f5:6e:ef:57:c1:1d:a9:df:44:04:8f:73:1f:
33:03:cf:be:1b:3a:d3:6a:47:bc:c2:2f:b3:84:64:
94:fe:be:d8:e3:66:cd:4c:0f:6b:bd:e0:16:30:c0:
a3:00:c3:ef:86:12:93:57:1f:16:49:03:7e:10:54:
8e:25:ab:50:00:bd:29:1c:eb:7b:e0:45:06:0e:e0:
07:90:5d:fb:83:03:5c:3b:38:97:b8:43:3e:85:72:
91:26:77:2c:6a:44:14:9d:ff:31:ab:ba:68:d0:88:
15:59:ba:d5:04:2e:83:50:09:02:ff:15:10:2a:a6:
72:b9:45:ac:35:2e:dd:c8:1f:39:b0:c0:6d:47:30:
66:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:22:E7:8E:04:94:83:A1:68:D4:12:6B:69:A6:C0:92:7C:57:68:94
X509v3 Authority Key Identifier:
keyid:58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/34509C1AF49D11EFBD8ACC0EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
192.245.105.0/24
Signature Algorithm: sha256WithRSAEncryption
47:dd:89:3d:6b:36:ee:55:c4:3a:1d:d1:c2:5e:35:87:77:bc:
97:cc:4e:bf:ec:b0:72:0a:9a:95:90:fc:79:57:5b:f2:d2:62:
a1:fc:25:d7:05:d2:a7:84:6e:60:15:4d:cb:4e:c4:69:a6:9c:
18:ad:29:ba:20:95:a4:eb:98:18:66:3e:a4:13:29:0b:65:5f:
99:cc:b9:e1:c5:fe:fa:a5:89:92:6e:dd:15:84:5d:b5:4e:62:
fc:af:dd:f3:85:4c:24:d2:23:71:e8:c8:47:4f:1a:bf:e8:dc:
14:4f:8e:84:be:22:58:43:f8:4a:1e:a0:07:28:35:1b:9a:7a:
43:8d:85:13:9d:10:0c:56:46:e3:06:c2:b0:ab:81:a8:8e:9a:
9e:75:e3:cc:e8:1f:95:51:51:03:0f:e7:eb:81:72:15:9d:20:
66:da:73:f5:60:7e:dc:e8:9b:5f:9b:f5:f5:ac:3f:3c:6d:b5:
a3:60:db:17:a2:89:c9:8d:83:de:69:cd:d1:2b:39:2e:46:c9:
a9:3d:06:f5:16:a9:41:de:d0:b2:f0:7c:7a:3a:28:23:47:35:
6d:f5:12:47:cd:51:0d:20:19:44:37:29:48:67:02:19:91:73:
9a:22:6e:e1:f6:32:5c:9b:b1:08:24:4a:c0:dc:a9:3a:36:84:
eb:77:67:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:57 2026 by rpki-client