
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/E13F8A68B3B011EF831E2748C4F9AE02.roa
File: E13F8A68B3B011EF831E2748C4F9AE02.roa (raw, json)
Hash identifier: tpwivFGUdTZvI8BturbAcozmq/Op8lHL9yAt9uZfEGw=
Subject key identifier: FE:F1:41:1F:18:30:C0:5B:43:17:39:D3:93:F3:19:44:79:90:5C:C2
Certificate issuer: /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Certificate serial: 07F7
Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/E13F8A68B3B011EF831E2748C4F9AE02.roa
Signing time: Sun 01 Mar 2026 21:25:26 +0000
ROA not before: Wed 10 Sep 2025 12:43:52 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 152734
IP address blocks: 110.164.146.0/24 maxlen: 24
110.164.184.0/23 maxlen: 23
110.164.186.0/23 maxlen: 23
110.164.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:50:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2039 (0x7f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7561, serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Validity
Not Before: Sep 10 12:43:52 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4aec5-d41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:29:d1:1a:11:11:59:c8:e9:b0:aa:e4:2c:0f:
1d:0f:49:1e:7d:a0:9d:01:b8:77:63:71:84:61:17:
9e:38:5d:e1:b0:c9:4a:e1:03:7a:6f:50:41:76:c5:
88:a7:35:9b:51:86:19:e3:27:24:b3:a7:a7:42:48:
cd:27:fd:a9:d8:67:42:1e:07:2a:1f:07:df:b1:6a:
fe:50:d4:21:e5:18:0d:95:86:45:da:29:46:05:48:
c2:17:f9:f0:aa:e7:4d:33:70:1a:7f:33:c3:45:30:
05:e9:9d:e6:04:3f:44:d7:66:e1:40:48:da:1a:b7:
13:04:40:87:fd:5b:23:2d:bb:f9:dc:a9:e5:7d:d8:
de:a1:49:7c:37:b1:6f:b0:f7:3a:97:9b:cc:54:8b:
1a:8a:64:61:8d:36:64:ce:5f:82:79:04:51:1f:08:
fd:8c:ed:b6:e8:31:7a:d3:e8:d9:3a:4f:a5:ad:43:
5f:0a:06:96:79:57:50:33:7d:18:7b:f3:b1:c8:a1:
a1:ac:6f:34:8f:71:6a:57:f1:0e:5b:b9:8b:e0:4e:
c0:46:63:4a:c9:6f:0f:c5:43:d5:7e:c1:6b:59:f7:
4c:ce:7a:0d:8b:f2:f1:bc:b0:77:d0:14:54:c6:e4:
5c:72:44:c4:d3:74:6a:29:33:34:29:27:39:25:b4:
fa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F1:41:1F:18:30:C0:5B:43:17:39:D3:93:F3:19:44:79:90:5C:C2
X509v3 Authority Key Identifier:
keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/E13F8A68B3B011EF831E2748C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
110.164.146.0/24
110.164.184.0/22
110.164.203.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:34:87:59:8b:dd:66:61:c0:8a:9b:65:cf:30:1e:0d:5d:05:
45:94:c3:ae:e4:83:0f:26:5c:1b:fb:f2:5c:1e:76:56:30:4f:
2f:70:c0:02:75:56:25:5c:8e:29:cc:3c:64:4c:cb:b6:d0:f0:
e1:15:ce:a5:7b:a4:91:9a:1d:42:21:ac:35:47:76:c3:8c:a1:
af:24:c6:93:ef:18:13:b4:c4:c1:40:22:0d:0e:7e:19:48:77:
85:de:0f:5b:57:8b:7b:41:46:b5:c5:4c:70:37:8e:96:2a:6e:
9c:2e:99:6b:7f:fd:4b:29:9c:33:85:5f:1b:05:c7:e2:a2:76:
73:be:3c:0d:83:6c:5f:88:8a:55:5b:64:b2:f1:8e:24:f5:6f:
eb:09:56:36:f7:2d:7e:d9:bf:98:23:f8:c8:15:34:6a:0b:7f:
1e:4b:45:53:8a:ab:e3:c5:4b:29:7e:8f:df:f5:74:54:0f:28:
6e:de:fd:08:de:05:bc:80:90:f6:1f:b0:64:23:81:1d:97:48:
4b:00:46:7a:7f:a4:ac:13:1e:22:58:d1:a0:21:0c:cb:7a:f0:
af:f6:65:3d:37:55:1d:bc:67:6f:45:2b:73:bd:9a:db:22:aa:
47:77:8e:ec:5a:56:f3:23:77:ac:ab:09:6e:4d:08:ca:8b:99:
9a:a5:82:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:14:37 2026 by rpki-client