
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/C592AFD286F111F19E006003A7EE528E.roa
File: C592AFD286F111F19E006003A7EE528E.roa (raw, json)
Hash identifier: oPscaCBD3FmsmuCAn0oSFaSsjB0CCMqyc1iKY37j3zQ=
Subject key identifier: F3:D7:56:08:CA:23:D6:6E:70:E5:D9:F0:44:ED:05:31:1C:0B:37:C6
Certificate issuer: /CN=A91D8B6F/serialNumber=9C428B84073EBE782EED33F92E40DD7361A09CAA
Certificate serial: 094A
Authority key identifier: 9C:42:8B:84:07:3E:BE:78:2E:ED:33:F9:2E:40:DD:73:61:A0:9C:AA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nEKLhAc-vngu7TP5LkDdc2GgnKo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/C592AFD286F111F19E006003A7EE528E.roa
Signing time: Thu 23 Jul 2026 23:53:59 +0000
ROA not before: Thu 23 Jul 2026 23:53:59 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 18422
IP address blocks: 140.96.0.0/16 maxlen: 19
140.96.0.0/18 maxlen: 24
140.96.64.0/19 maxlen: 23
140.96.64.0/20 maxlen: 24
140.96.80.0/21 maxlen: 24
140.96.88.0/22 maxlen: 24
140.96.92.0/23 maxlen: 24
140.96.94.0/24 maxlen: 24
140.96.100.0/22 maxlen: 24
140.96.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.crl
rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nEKLhAc-vngu7TP5LkDdc2GgnKo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 01:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2378 (0x94a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8B6F, serialNumber=9C428B84073EBE782EED33F92E40DD7361A09CAA
Validity
Not Before: Jul 23 23:53:59 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a62a997-8290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:57:23:1c:cb:57:d3:59:95:d2:92:3b:e7:6e:
e8:26:6e:bd:9d:c3:ae:52:a4:47:28:f4:7d:be:4b:
c7:0a:f7:81:64:bc:84:62:e5:fe:11:7a:4b:f3:72:
9f:58:fa:8d:64:04:a9:39:82:62:ab:ec:57:85:7f:
47:86:a7:bc:82:a7:23:2f:24:94:39:23:ae:80:73:
aa:eb:f1:4e:43:aa:9a:ec:4a:58:d7:f0:c8:9f:5a:
be:1f:5e:ee:4d:a2:36:c4:4f:92:73:36:48:86:e1:
3a:53:bf:e9:0b:be:0b:d5:87:7d:56:f8:12:d4:aa:
d4:47:8a:cd:0a:c1:cd:6e:ed:7e:98:5b:55:af:df:
04:63:4a:4a:e8:72:6a:51:9b:38:33:ce:b8:ca:15:
72:70:3f:f4:02:ec:a1:41:37:ba:f5:f5:14:94:40:
6b:8b:07:fc:9b:03:22:65:b2:4c:8a:61:91:4b:6e:
ca:8f:2a:96:09:dd:eb:7a:ec:51:e6:a1:91:2f:48:
95:85:fd:ea:f0:de:de:d0:8f:96:cf:13:af:c4:6c:
85:77:a9:00:f9:56:40:48:fe:a2:77:0c:c4:40:a6:
ad:cf:de:ee:74:52:c8:cd:d0:4e:6a:88:0a:20:96:
22:d5:80:6f:38:01:9b:fb:b6:90:8b:13:7f:cb:b2:
5f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D7:56:08:CA:23:D6:6E:70:E5:D9:F0:44:ED:05:31:1C:0B:37:C6
X509v3 Authority Key Identifier:
keyid:9C:42:8B:84:07:3E:BE:78:2E:ED:33:F9:2E:40:DD:73:61:A0:9C:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nEKLhAc-vngu7TP5LkDdc2GgnKo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/C592AFD286F111F19E006003A7EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
140.96.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c7:c8:70:d9:0f:d4:4c:b6:8d:2a:04:ac:f9:0b:40:cf:d3:96:
9e:c9:8c:0c:08:59:9c:40:74:29:13:06:a9:af:57:e8:a5:b4:
69:dc:9f:8e:36:7f:28:d2:6f:f5:ca:27:9c:8e:3a:7b:02:88:
22:30:cb:91:20:14:eb:e6:86:8a:7d:83:ae:2f:50:4c:75:7d:
e0:c7:df:6f:6c:70:d7:b5:0e:ee:97:83:a3:e7:c4:a7:db:3b:
5e:36:ac:7c:bc:28:60:de:48:ba:75:3c:30:44:1f:2e:c5:70:
d8:bc:69:34:4e:44:bb:8d:74:04:89:e9:f0:7d:3d:05:80:ab:
17:72:19:11:53:10:b6:e3:06:6d:16:d8:5f:68:f2:b0:b2:34:
39:a0:b0:64:58:8e:38:53:64:42:f6:c3:6d:3f:5a:47:48:4c:
97:3f:b5:ec:61:1d:0c:54:2b:75:b6:0b:6e:dc:b4:89:1b:e3:
60:da:a5:63:e4:6f:f4:43:0b:83:9a:36:bd:43:88:8b:fc:c7:
1f:00:fe:1b:65:76:11:32:39:d9:5a:1b:53:f2:ed:fd:77:0d:
a6:a8:39:c7:bc:fa:5d:e4:44:27:93:e2:d9:97:0d:f2:c8:6d:
52:19:4b:5b:e8:24:50:9f:af:b6:de:6a:18:7e:e9:9b:2e:f8:
f5:c0:9d:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:36 2026 by rpki-client