
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E64F1/7808663A3E6211F18C258481CC833773/108D99AC3E6311F1A067C8A3CC833773.roa
File: 108D99AC3E6311F1A067C8A3CC833773.roa (raw, json)
Hash identifier: /JQEBfM1zZrqYFAT+lEkN7EgquebMH9d44BeOs81UzU=
Subject key identifier: F5:D3:39:11:E7:BF:C3:37:CF:B5:8D:71:1A:98:32:C4:E3:E5:56:78
Certificate issuer: /CN=A91E64F1/serialNumber=DFB722CD34140C11221430CC156C3AAC968D1CFF
Certificate serial: 02
Authority key identifier: DF:B7:22:CD:34:14:0C:11:22:14:30:CC:15:6C:3A:AC:96:8D:1C:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37cizTQUDBEiFDDMFWw6rJaNHP8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E64F1/7808663A3E6211F18C258481CC833773/108D99AC3E6311F1A067C8A3CC833773.roa
Signing time: Wed 22 Apr 2026 15:51:03 +0000
ROA not before: Wed 22 Apr 2026 15:51:03 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 138910
IP address blocks: 163.128.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E64F1/7808663A3E6211F18C258481CC833773/37cizTQUDBEiFDDMFWw6rJaNHP8.crl
rsync://rpki.apnic.net/member_repository/A91E64F1/7808663A3E6211F18C258481CC833773/37cizTQUDBEiFDDMFWw6rJaNHP8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37cizTQUDBEiFDDMFWw6rJaNHP8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 08:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E64F1, serialNumber=DFB722CD34140C11221430CC156C3AAC968D1CFF
Validity
Not Before: Apr 22 15:51:03 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69e8ee67-d5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:35:20:53:cf:9c:07:1d:fd:52:f9:aa:30:1c:
ee:64:1a:24:a0:5b:ec:a7:40:49:de:ac:b5:09:2c:
2d:e9:95:ac:68:f3:59:a3:d1:da:2a:78:d1:06:60:
3b:eb:42:4a:cc:34:35:9f:87:33:a0:37:0d:7d:a2:
df:9b:d4:13:67:93:cf:b8:51:3f:e9:3b:41:9a:1e:
81:22:84:1c:fa:61:bd:30:0f:2d:2e:b2:d8:53:98:
93:72:70:8b:8f:dd:ba:1b:ea:a5:a2:e6:aa:16:79:
c2:ac:93:f9:93:f8:46:20:09:09:9f:6a:cb:61:6f:
71:f2:3b:85:0d:13:d1:79:5f:fa:41:f0:f8:4e:c8:
40:f4:a0:58:01:cc:82:d1:75:3c:9e:5a:f5:ec:51:
7c:c8:2f:9c:c8:e3:cb:b8:be:3b:f4:19:ab:c7:f5:
d7:df:a5:a9:8e:9a:51:94:21:0f:69:4b:c2:7f:0a:
af:9c:ef:6e:30:f6:79:89:7c:d0:84:3d:ce:f8:1a:
91:8e:c6:1e:7b:32:fa:e8:86:b4:e8:f4:b9:b9:e9:
77:08:75:d4:29:79:28:51:df:be:aa:74:90:e1:03:
4a:ba:c9:5f:93:10:2f:ef:f1:e3:6a:6f:90:23:98:
ee:e4:83:5a:d0:a7:54:6c:6f:15:17:d0:32:bf:c7:
02:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D3:39:11:E7:BF:C3:37:CF:B5:8D:71:1A:98:32:C4:E3:E5:56:78
X509v3 Authority Key Identifier:
keyid:DF:B7:22:CD:34:14:0C:11:22:14:30:CC:15:6C:3A:AC:96:8D:1C:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E64F1/7808663A3E6211F18C258481CC833773/37cizTQUDBEiFDDMFWw6rJaNHP8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37cizTQUDBEiFDDMFWw6rJaNHP8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E64F1/7808663A3E6211F18C258481CC833773/108D99AC3E6311F1A067C8A3CC833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.128.188.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:3a:6b:51:5e:ba:58:d1:72:52:68:28:f8:a1:99:18:be:af:
9f:27:82:2a:00:10:22:91:ea:83:fb:4d:37:d4:3f:9d:8c:67:
98:72:f2:2d:30:be:2c:74:39:d3:10:f7:97:03:46:d6:22:40:
e7:a7:b0:44:f7:21:92:5d:7b:4e:4c:02:73:09:74:b8:96:fe:
e4:da:3d:70:bf:99:63:14:b7:20:d9:d4:3f:73:20:b4:20:81:
c7:b3:3d:06:a2:fc:2e:00:19:39:70:e8:85:98:03:01:ba:a3:
54:89:89:6d:f6:13:86:ac:4f:0d:b2:2d:2f:ae:9c:e6:ad:54:
2d:65:b0:59:a7:d2:f4:a8:28:ef:ca:08:30:02:c4:4f:93:7b:
59:f3:c0:92:67:5f:ed:b1:1d:ef:49:6c:97:58:31:19:a3:26:
59:f8:9d:6f:0a:19:67:4e:a8:e9:c8:fb:22:18:97:5f:e0:55:
a8:c1:99:84:aa:ae:22:aa:d2:bd:ab:e8:8b:4a:50:77:bd:10:
4b:22:e6:77:06:bb:3d:7b:d3:a8:3d:c4:e6:ba:11:17:c3:dc:
aa:88:12:97:26:c5:71:b8:56:f8:08:e3:59:67:fd:52:0a:16:
54:8b:80:4d:24:30:dc:3c:d9:88:d4:d2:cb:6c:78:9f:9f:46:
a3:30:78:de
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
NjRGMTExMC8GA1UEBRMoREZCNzIyQ0QzNDE0MEMxMTIyMTQzMENDMTU2QzNBQUM5
NjhEMUNGRjAeFw0yNjA0MjIxNTUxMDNaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5ZThlZTY3LWQ1YzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCmNSBTz5wHHf1S+aowHO5kGiSgW+ynQEnerLUJLC3plaxo81mj0doqeNEGYDvr
QkrMNDWfhzOgNw19ot+b1BNnk8+4UT/pO0GaHoEihBz6Yb0wDy0usthTmJNycIuP
3bob6qWi5qoWecKsk/mT+EYgCQmfasthb3HyO4UNE9F5X/pB8PhOyED0oFgBzILR
dTyeWvXsUXzIL5zI48u4vjv0GavH9dffpamOmlGUIQ9pS8J/Cq+c724w9nmJfNCE
Pc74GpGOxh57MvrohrTo9Lm56XcIddQpeShR376qdJDhA0q6yV+TEC/v8eNqb5Aj
mO7kg1rQp1RsbxUX0DK/xwLpAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU9dM5Eee/
wzfPtY1xGpgyxOPlVngwHwYDVR0jBBgwFoAU37cizTQUDBEiFDDMFWw6rJaNHP8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2NEYxLzc4MDg2NjNBM0U2
MjExRjE4QzI1ODQ4MUNDODMzNzczLzM3Y2l6VFFVREJFaUZERE1GV3c2ckphTkhQ
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMzdjaXpUUVVEQkVpRkRETUZXdzZySmFOSFA4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NjRGMS83ODA4NjYzQTNFNjIxMUYxOEMyNTg0ODFDQzgzMzc3My8xMDhEOTlBQzNF
NjMxMUYxQTA2N0M4QTNDQzgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGjgLwwDQYJKoZIhvcNAQELBQADggEBAEo6a1FeuljRclJoKPihmRi+
r58ngioAECKR6oP7TTfUP52MZ5hy8i0wvix0OdMQ95cDRtYiQOensET3IZJde05M
AnMJdLiW/uTaPXC/mWMUtyDZ1D9zILQggcezPQai/C4AGTlw6IWYAwG6o1SJiW32
E4asTw2yLS+unOatVC1lsFmn0vSoKO/KCDACxE+Te1nzwJJnX+2xHe9JbJdYMRmj
Jln4nW8KGWdOqOnI+yIYl1/gVajBmYSqriKq0r2r6ItKUHe9EEsi5ncGuz1706g9
xOa6ERfD3KqIEpcmxXG4VvgI41ln/VIKFlSLgE0kMNw82YjU0stseJ+fRqMweN4=
-----END CERTIFICATE-----
Generated at Wed May 13 12:25:29 2026 by rpki-client