
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1B78/7C9F17FC595B11F1BE59236A9D833773/86592A98A16911F1861203765411F970.roa
File: 86592A98A16911F1861203765411F970.roa (raw, json)
Hash identifier: 1nAFBJkOlQ0I7ClkOxN2SOxc0bxFcUi1WkWl9lz3Nec=
Subject key identifier: 59:88:BF:49:2F:3B:89:D3:AA:C7:0F:69:F6:24:8F:7C:1C:BF:9F:DE
Certificate issuer: /CN=A91E1B78/serialNumber=814C3D4BDF626E77126A9547271FC140A30D82A9
Certificate serial: 31
Authority key identifier: 81:4C:3D:4B:DF:62:6E:77:12:6A:95:47:27:1F:C1:40:A3:0D:82:A9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gUw9S99ibncSapVHJx_BQKMNgqk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1B78/7C9F17FC595B11F1BE59236A9D833773/86592A98A16911F1861203765411F970.roa
Signing time: Wed 26 Aug 2026 16:16:43 +0000
ROA not before: Wed 26 Aug 2026 16:16:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153719
IP address blocks: 162.4.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1B78/7C9F17FC595B11F1BE59236A9D833773/gUw9S99ibncSapVHJx_BQKMNgqk.crl
rsync://rpki.apnic.net/member_repository/A91E1B78/7C9F17FC595B11F1BE59236A9D833773/gUw9S99ibncSapVHJx_BQKMNgqk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gUw9S99ibncSapVHJx_BQKMNgqk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 06:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1B78, serialNumber=814C3D4BDF626E77126A9547271FC140A30D82A9
Validity
Not Before: Aug 26 16:16:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a8f116a-9b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:01:a2:35:04:0a:b9:8f:ea:e7:19:da:7f:21:
e3:7a:7d:73:d6:6a:5a:8c:b0:21:d1:0e:f1:ad:87:
85:20:d2:c9:2e:32:c1:d6:79:9f:64:a7:9a:24:28:
2b:2c:96:82:08:1c:73:f2:8b:d8:7f:50:99:96:53:
5d:a0:ca:fa:cf:47:7f:f8:15:5e:4b:c1:c8:78:54:
ec:8e:15:e2:08:25:d2:c0:de:36:93:05:6f:40:0a:
3f:a7:88:bb:99:fb:14:f5:7d:b1:3e:ce:83:fc:ec:
77:b4:1f:b2:95:70:b3:02:9f:cb:20:71:08:2e:d5:
9b:e5:ec:39:4e:c2:1a:c6:63:fe:c6:4e:bf:e2:62:
55:cb:db:a9:4f:14:7a:f0:25:28:3e:72:65:a3:3c:
97:1f:04:e1:48:fd:ae:fe:dc:e9:a7:e4:33:b7:d3:
02:ff:df:32:00:d2:df:b5:79:3c:6c:3d:2e:31:a8:
c6:25:4d:ea:f1:fb:40:72:76:c2:81:e4:6a:0f:dd:
6c:ad:5e:fc:13:b5:e1:19:2d:2d:f0:e1:b6:37:73:
a5:92:f5:35:0a:f9:c5:3a:14:ee:41:70:c4:af:98:
8c:c2:d5:cc:c2:1f:bf:33:05:6a:c4:b6:74:c9:eb:
a2:66:a5:14:a5:5c:ee:42:08:bf:b8:08:08:49:8c:
7e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:88:BF:49:2F:3B:89:D3:AA:C7:0F:69:F6:24:8F:7C:1C:BF:9F:DE
X509v3 Authority Key Identifier:
keyid:81:4C:3D:4B:DF:62:6E:77:12:6A:95:47:27:1F:C1:40:A3:0D:82:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1B78/7C9F17FC595B11F1BE59236A9D833773/gUw9S99ibncSapVHJx_BQKMNgqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gUw9S99ibncSapVHJx_BQKMNgqk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1B78/7C9F17FC595B11F1BE59236A9D833773/86592A98A16911F1861203765411F970.roa
sbgp-ipAddrBlock: critical
IPv4:
162.4.191.0/24
Signature Algorithm: sha256WithRSAEncryption
82:39:b9:fe:2b:b4:08:f8:1d:eb:02:ea:5a:4d:c9:b5:7c:85:
55:44:c0:a1:90:e6:a7:c8:a3:bc:77:2c:7f:8a:54:13:97:96:
21:d7:12:71:60:b7:28:c1:d0:2a:5d:6e:1b:24:6e:b1:e6:a1:
3b:2b:81:5f:5c:c7:f0:2c:4b:5b:33:71:79:df:f1:70:33:62:
67:35:67:71:5a:3f:07:b8:9b:9e:24:c6:d7:23:cf:ad:ea:1c:
05:81:54:fd:d6:c6:da:64:5d:4b:15:4f:6c:8f:8b:85:44:92:
ae:53:96:a7:38:07:98:55:58:fc:57:9d:e6:9e:8c:3d:36:53:
04:03:c2:00:c3:fc:ec:c0:e9:67:0e:c7:62:75:74:39:68:12:
f3:ef:a1:4f:05:d5:61:37:3b:fa:c1:7b:c5:01:da:9e:20:7a:
db:bd:d1:09:d9:6b:c9:78:4e:3b:2d:4d:58:ad:39:62:0f:d9:
96:6c:bb:ef:c7:9c:cb:86:8e:8b:54:f5:b5:2e:a5:30:96:b2:
5d:a5:2e:5a:54:11:c1:65:66:78:71:19:89:0a:40:0a:d5:71:
25:ad:0a:0c:60:7f:ae:59:eb:74:2c:33:0c:94:79:02:47:aa:
3b:89:31:3d:9f:32:74:35:f5:eb:c7:d5:7b:5f:4d:4a:81:96:
e1:a9:83:c0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 26 16:34:36 2026 by rpki-client