
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/C04EDAAECCF711F1A5936D4EFB65CEF9.roa
File: C04EDAAECCF711F1A5936D4EFB65CEF9.roa (raw, json)
Hash identifier: RrFXrGn4cexrnUafgrowUQtMu1KC4eI6wNqSE2DXR6E=
Subject key identifier: E1:A3:C7:BF:E4:0D:9D:1E:3F:C0:58:7C:78:98:14:E7:99:17:C6:C3
Certificate issuer: /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial: 09E1
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/C04EDAAECCF711F1A5936D4EFB65CEF9.roa
Signing time: Wed 21 Oct 2026 02:33:08 +0000
ROA not before: Wed 21 Oct 2026 02:33:08 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 212879
IP address blocks: 169.136.64.0/24 maxlen: 24
169.136.72.0/24 maxlen: 24
169.136.133.0/24 maxlen: 24
169.136.145.0/24 maxlen: 24
169.136.146.0/24 maxlen: 24
169.136.147.0/24 maxlen: 24
169.136.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 14:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2529 (0x9e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Validity
Not Before: Oct 21 02:33:08 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6ad82464-cd0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:6c:a0:75:b3:80:8e:75:83:00:0b:21:84:
d2:9e:91:96:7b:5a:21:f5:82:51:ce:97:01:07:93:
56:69:e3:dd:e3:2c:91:e3:d3:40:20:ef:80:da:24:
bb:1a:ba:d0:60:b7:cf:e3:c8:dc:f3:e1:3e:09:64:
bd:86:0b:b7:15:6f:05:11:ec:55:ca:5e:95:fc:70:
f5:7c:22:d0:a9:f6:3d:0d:be:67:67:7d:11:6a:b8:
50:bb:d8:94:e7:88:6f:ca:29:ce:af:72:02:e5:e4:
b1:c9:74:37:b8:ba:97:e2:72:c3:42:a6:f3:d0:ec:
dc:36:a4:d4:69:e6:7c:49:08:d3:8e:37:57:84:17:
9a:9f:64:1c:9a:e7:60:23:f5:28:a4:e6:61:96:f3:
0d:9e:4a:3f:47:20:3d:10:37:6c:5b:b7:e1:43:01:
11:15:b4:8d:b8:98:5c:e2:cf:e1:9d:77:e7:ad:1a:
ec:11:ed:cb:0d:dd:0b:95:c0:c7:83:25:05:6f:44:
22:51:27:73:83:83:9b:c2:96:42:3a:a1:45:93:65:
8d:f4:6e:ef:97:00:12:88:41:06:ae:d7:68:6c:69:
90:94:ae:16:64:12:50:09:c4:b6:fb:fd:3a:1c:35:
00:eb:32:34:23:59:23:21:6d:03:60:4a:ec:2b:f6:
9d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A3:C7:BF:E4:0D:9D:1E:3F:C0:58:7C:78:98:14:E7:99:17:C6:C3
X509v3 Authority Key Identifier:
keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/C04EDAAECCF711F1A5936D4EFB65CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
169.136.64.0/24
169.136.72.0/24
169.136.133.0/24
169.136.145.0-169.136.147.255
169.136.154.0/24
Signature Algorithm: sha256WithRSAEncryption
27:ca:83:ea:94:da:0f:da:73:4d:15:6e:76:d0:23:3f:96:92:
eb:c6:2a:b1:e9:76:1a:b7:46:3c:39:6a:c5:f8:61:be:7e:b0:
7d:fd:e8:1f:cd:d7:74:d5:92:8b:bb:7f:da:1c:a2:ce:a2:cd:
c9:6d:5d:e0:c4:c7:6c:b9:ce:eb:3a:c3:3d:1f:25:8d:7f:81:
81:14:31:2c:03:0a:4f:5f:f7:8f:06:24:de:88:04:55:36:d0:
28:8a:5e:06:82:75:b6:d0:3e:30:5f:00:b5:74:ef:b3:cc:39:
c2:ce:82:4c:4a:d2:25:fe:ad:49:81:5b:f2:66:52:f7:e1:3a:
a9:2e:da:99:8e:0e:5b:0e:de:b4:ed:a5:5a:26:7a:0e:43:81:
1f:ff:9f:8a:8b:0e:b6:19:e3:49:ae:29:98:69:86:86:90:87:
16:cd:09:e4:15:ef:86:33:d8:b1:4f:b3:74:77:7d:45:4b:29:
98:3a:3a:52:32:c0:9f:19:6a:24:69:87:ac:32:77:b4:cb:3c:
44:03:98:a0:d3:db:26:65:69:38:37:3f:c1:24:d9:35:be:90:
3c:1e:c5:66:a5:c9:b0:17:78:29:a5:87:01:17:69:66:5a:35:
98:5a:a4:fe:7f:66:dc:74:5c:27:44:77:ec:53:2b:3e:74:ed:
31:aa:33:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:12:08 2026 by rpki-client