
$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/B11EACFC5ADA11F08ED99A75C4F9AE02.roa
File: B11EACFC5ADA11F08ED99A75C4F9AE02.roa (raw, json)
Hash identifier: TfJ0VpXoxwZ8wztyHHcvJgf4NGROsJXjx8fIuiEMclc=
Subject key identifier: F2:AA:29:66:B7:35:18:AF:00:EB:08:EA:B3:C4:06:29:14:42:96:E4
Certificate issuer: /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial: 06EA
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/B11EACFC5ADA11F08ED99A75C4F9AE02.roa
Signing time: Mon 23 Feb 2026 06:38:07 +0000
ROA not before: Mon 23 Feb 2026 06:38:07 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 58955
IP address blocks: 27.254.141.0/24 maxlen: 24
27.254.155.0/24 maxlen: 24
27.254.163.0/24 maxlen: 24
27.254.165.0/24 maxlen: 24
27.254.166.0/24 maxlen: 24
27.254.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:57:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1770 (0x6ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Validity
Not Before: Feb 23 06:38:07 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=699bf5ce-76b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4a:2f:f4:c4:3e:4f:07:58:4e:a3:5e:76:19:
b3:2e:77:9e:f6:a8:00:81:2c:dc:f1:a8:a5:53:fb:
a9:86:bf:1f:47:86:4a:a9:fe:85:b6:3a:a9:be:2c:
d7:80:2d:c8:c4:c4:63:9e:5e:cc:94:43:e3:27:3a:
35:36:73:04:18:bb:42:d9:5d:97:54:3c:06:8c:0b:
4d:d7:53:cc:c3:4a:64:0c:c2:6d:2a:4a:a4:d5:ec:
1e:98:7d:d6:b4:17:56:8b:f5:9d:8c:33:d2:18:24:
1f:36:02:99:0a:a8:50:0c:ef:02:01:b3:be:78:10:
01:79:09:bb:1e:b3:92:31:8b:f9:df:fe:7b:20:b1:
6f:49:ac:d1:e7:08:23:1f:1c:fb:ff:c0:53:bd:78:
d3:9f:b5:c9:12:df:cc:92:d1:92:e3:20:b8:59:b4:
eb:ad:73:8f:bd:a4:12:0c:31:d4:56:26:8f:0a:c8:
a2:a0:b1:cc:45:50:6f:b7:4c:d6:83:6f:b1:72:fb:
99:96:da:21:58:fe:da:34:34:8b:67:59:7c:7e:90:
1a:42:9e:9b:9c:f0:7f:69:9e:8f:8e:23:97:35:4f:
2c:66:4a:f1:3a:27:b4:e0:69:2c:c2:7a:c4:ca:90:
a8:80:14:76:9f:33:d2:d6:6a:c7:fd:71:3c:dc:9d:
85:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AA:29:66:B7:35:18:AF:00:EB:08:EA:B3:C4:06:29:14:42:96:E4
X509v3 Authority Key Identifier:
keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/B11EACFC5ADA11F08ED99A75C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.254.141.0/24
27.254.155.0/24
27.254.163.0/24
27.254.165.0-27.254.167.255
Signature Algorithm: sha256WithRSAEncryption
4f:95:b0:3e:38:8b:e2:9b:6e:5e:90:2f:1c:5c:4c:58:3e:f7:
50:89:48:8d:74:5c:f3:95:ab:a0:0b:5c:0d:a8:0b:6d:e2:d5:
c0:64:9a:37:45:62:b7:2f:cc:7a:15:16:5f:3f:f6:c3:b8:d7:
d5:24:f3:66:13:e1:ad:ed:69:d6:4e:95:26:2c:b7:70:7a:10:
c6:f8:73:99:63:8b:31:47:24:13:34:b3:a5:f4:a5:47:1a:e7:
e3:05:9a:34:e5:80:ba:3a:90:b7:4f:5d:c0:5f:8c:85:ca:65:
cb:0f:60:4e:4d:f0:70:4d:2e:04:13:2a:3a:d5:e0:8a:1f:bd:
b7:03:ef:0f:06:54:7c:7e:90:c7:df:0a:b3:d9:bd:73:28:05:
42:82:d6:96:e3:79:4f:a5:86:35:c6:4e:ec:bc:23:93:b8:ea:
66:fc:41:c2:4f:42:49:72:78:60:08:9f:fb:12:a9:95:3f:b7:
aa:07:e1:86:08:b4:1a:6e:32:d0:29:b6:cf:99:5a:00:7e:78:
3e:f4:7e:01:f9:ec:7e:17:5f:32:33:b2:65:3d:12:6c:c8:c5:
fb:93:be:6f:ed:3c:aa:c6:0b:a8:c9:55:45:da:12:22:87:8c:
b5:d0:8a:5c:07:92:0a:78:ea:b8:d5:0a:35:b2:3c:f1:23:b1:
48:ce:75:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:17:23 2026 by rpki-client