
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/E3BDC64224D411F191B1E656AB833773.roa
File: E3BDC64224D411F191B1E656AB833773.roa (raw, json)
Hash identifier: AIltHDKkxFZaiNdMv+LKbbe7L1vKTPjxvnacYsn/9PA=
Subject key identifier: BC:38:40:4D:29:E0:25:B1:AA:F8:2F:74:0E:0E:1D:B9:F6:E2:DB:88
Certificate issuer: /CN=A91FCA47/serialNumber=9C6290A8A12E8886413743D7F10577F439169C7D
Certificate serial: 02
Authority key identifier: 9C:62:90:A8:A1:2E:88:86:41:37:43:D7:F1:05:77:F4:39:16:9C:7D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nGKQqKEuiIZBN0PX8QV39DkWnH0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/E3BDC64224D411F191B1E656AB833773.roa
Signing time: Sat 21 Mar 2026 03:20:20 +0000
ROA not before: Sat 21 Mar 2026 03:20:20 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 133139
IP address blocks: 45.126.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.crl
rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nGKQqKEuiIZBN0PX8QV39DkWnH0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:24:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCA47, serialNumber=9C6290A8A12E8886413743D7F10577F439169C7D
Validity
Not Before: Mar 21 03:20:20 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69be0e74-d7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:55:94:89:3e:d7:2e:a3:48:1c:c0:6d:9c:e2:
de:3a:1a:ad:be:02:e0:e6:0b:ae:5f:3f:1c:d5:ed:
7d:63:2d:fa:da:a8:0d:87:f6:98:01:c2:e5:27:9f:
1d:f0:c5:05:5f:de:d4:28:bf:ab:57:0c:97:0f:29:
a1:70:a3:8d:49:21:50:f6:cb:d7:04:76:1d:4c:de:
19:68:ca:2e:5e:c2:24:74:62:b5:55:b8:f7:4a:b6:
e2:bb:75:d2:d9:e8:af:7e:41:55:82:04:59:5d:66:
41:58:4c:0a:95:6e:ac:eb:50:58:a2:dd:1b:9a:c3:
65:9f:15:d2:6a:d8:5c:29:a3:c1:ab:0b:ab:a8:0d:
a7:ec:93:98:0d:1b:04:34:c4:19:28:44:4a:e7:fb:
43:f9:26:b8:2a:43:62:d3:9e:01:8d:85:9e:74:91:
8f:d6:e8:4c:e0:63:a6:0a:12:58:3c:39:36:cf:ac:
3b:ab:a8:8a:75:5a:7a:30:c6:ff:b4:50:3b:9a:0e:
e5:fe:4b:64:c7:2a:2f:2d:11:60:10:f9:34:cc:43:
42:a8:59:41:11:00:05:da:15:4b:6f:a2:8c:22:44:
f6:aa:46:b3:3c:1f:5c:28:51:1e:02:55:3e:78:ec:
45:02:fb:6d:37:da:57:32:ec:48:32:68:4d:ba:c7:
d3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:38:40:4D:29:E0:25:B1:AA:F8:2F:74:0E:0E:1D:B9:F6:E2:DB:88
X509v3 Authority Key Identifier:
keyid:9C:62:90:A8:A1:2E:88:86:41:37:43:D7:F1:05:77:F4:39:16:9C:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nGKQqKEuiIZBN0PX8QV39DkWnH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/E3BDC64224D411F191B1E656AB833773.roa
sbgp-ipAddrBlock: critical
IPv4:
45.126.137.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:c5:1f:8c:54:f7:8d:52:a3:ec:f9:95:39:96:fe:25:dd:0a:
ff:15:60:d7:f7:af:bf:a0:3e:19:a0:e6:e7:f4:25:20:e3:a6:
60:2a:03:ce:6b:c9:66:db:15:85:c7:dc:e6:c8:8e:90:69:1d:
5a:f2:d2:f3:f6:7d:d8:d0:fe:ed:af:06:09:e6:e4:74:0c:c7:
3a:00:74:c9:8b:64:d9:a0:91:41:cb:b2:4a:74:b1:45:ae:81:
e6:0e:3e:32:49:95:15:8c:c6:fe:fa:8d:23:82:fb:ec:a4:20:
2d:bc:4d:21:dd:ae:27:02:75:13:3a:6a:dd:70:82:59:91:07:
35:85:f2:1c:a1:4d:a9:31:4e:9e:40:58:03:5a:00:4b:b2:5e:
7d:e6:ce:26:88:d0:50:5e:43:a2:04:b0:3c:b7:32:3d:df:93:
59:62:24:c9:93:12:d1:e6:83:55:71:72:f8:b5:13:cb:3d:71:
55:07:3a:28:c1:7d:bb:3f:a0:e6:45:8a:db:67:70:49:a9:e1:
49:56:22:9e:87:cd:f8:03:bc:ce:44:71:c1:c0:a6:b4:f1:a7:
3d:f2:47:ac:f5:71:8e:23:e5:27:bb:67:b1:e6:26:75:05:57:
f9:5f:46:16:b7:84:fb:18:19:ef:e5:ce:48:e6:a1:a3:9c:0b:
e7:b4:9d:dc
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
Q0E0NzExMC8GA1UEBRMoOUM2MjkwQThBMTJFODg4NjQxMzc0M0Q3RjEwNTc3RjQz
OTE2OUM3RDAeFw0yNjAzMjEwMzIwMjBaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YmUwZTc0LWQ3YzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC6VZSJPtcuo0gcwG2c4t46Gq2+AuDmC65fPxzV7X1jLfraqA2H9pgBwuUnnx3w
xQVf3tQov6tXDJcPKaFwo41JIVD2y9cEdh1M3hloyi5ewiR0YrVVuPdKtuK7ddLZ
6K9+QVWCBFldZkFYTAqVbqzrUFii3Ruaw2WfFdJq2Fwpo8GrC6uoDafsk5gNGwQ0
xBkoRErn+0P5JrgqQ2LTngGNhZ50kY/W6EzgY6YKElg8OTbPrDurqIp1Wnowxv+0
UDuaDuX+S2THKi8tEWAQ+TTMQ0KoWUERAAXaFUtvoowiRPaqRrM8H1woUR4CVT54
7EUC+2032lcy7EgyaE26x9NNAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUvDhATSng
JbGq+C90Dg4dufbi24gwHwYDVR0jBBgwFoAUnGKQqKEuiIZBN0PX8QV39DkWnH0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDQTQ3Lzk1RTc2RDYwMjRE
NDExRjE4QUFBMDk0MkFCODMzNzczL25HS1FxS0V1aUlaQk4wUFg4UVYzOURrV25I
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbkdLUXFLRXVpSVpCTjBQWDhRVjM5RGtXbkgwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Q0E0Ny85NUU3NkQ2MDI0RDQxMUYxOEFBQTA5NDJBQjgzMzc3My9FM0JEQzY0MjI0
RDQxMUYxOTFCMUU2NTZBQjgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAAtfokwDQYJKoZIhvcNAQELBQADggEBABrFH4xU941So+z5lTmW/iXd
Cv8VYNf3r7+gPhmg5uf0JSDjpmAqA85ryWbbFYXH3ObIjpBpHVry0vP2fdjQ/u2v
Bgnm5HQMxzoAdMmLZNmgkUHLskp0sUWugeYOPjJJlRWMxv76jSOC++ykIC28TSHd
ricCdRM6at1wglmRBzWF8hyhTakxTp5AWANaAEuyXn3mziaI0FBeQ6IEsDy3Mj3f
k1liJMmTEtHmg1Vxcvi1E8s9cVUHOijBfbs/oOZFittncEmp4UlWIp6HzfgDvM5E
ccHAprTxpz3yR6z1cY4j5Se7Z7HmJnUFV/lfRha3hPsYGe/lzkjmoaOcC+e0ndw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:55:39 2026 by rpki-client