
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/91C771A2D02111EA843F372FC4F9AE02.roa
File: 91C771A2D02111EA843F372FC4F9AE02.roa (raw, json)
Hash identifier: foBCGIBz0chOGLnj+WF0iY+sCw/0L3oyHMk8x+gdNIk=
Subject key identifier: E2:F2:CB:8B:9E:DA:88:D9:F0:F8:B0:44:90:E6:FE:2C:5F:03:2C:BD
Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Certificate serial: 0C5F
Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/91C771A2D02111EA843F372FC4F9AE02.roa
Signing time: Tue 28 Jul 2026 19:41:10 +0000
ROA not before: Tue 28 Jul 2026 19:41:10 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 198148
IP address blocks: 116.66.212.0/22 maxlen: 22
116.66.216.0/22 maxlen: 22
116.66.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3167 (0xc5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Validity
Not Before: Jul 28 19:41:10 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a6905d6-27e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bc:ca:bc:e8:1b:a5:7f:c3:a8:6c:dd:55:80:
aa:ec:d7:4c:1a:3b:d6:49:3c:66:73:29:d1:40:5f:
29:c5:1c:49:bc:66:0b:66:50:a9:7a:e6:6f:4e:50:
2d:2e:b5:a7:5e:88:2f:8c:0b:0e:30:5d:e5:c2:23:
7b:96:f7:89:45:62:55:1a:dc:5a:dd:ec:b3:71:8a:
1d:82:38:76:0e:f1:ee:d1:93:23:91:27:66:b7:f3:
e9:6e:80:8e:d6:e4:e2:cc:fa:68:0f:45:9c:95:b3:
b5:fd:c5:f9:21:8e:ca:bd:dd:40:86:51:25:95:26:
5e:f1:76:7b:45:1c:dc:8b:a6:91:4f:ca:67:39:51:
71:4c:6d:79:fb:ba:88:a4:8c:da:66:a2:89:b5:a4:
ee:5c:a7:8d:95:0b:bc:f9:f8:e3:bc:12:d3:3e:9f:
c6:e0:5e:18:70:54:fd:4f:7d:b8:54:cb:4d:e4:30:
e1:5f:d1:d9:b6:58:99:3c:45:b9:e2:3a:43:dd:89:
f6:ab:9e:c6:9e:ef:6e:ba:34:38:cd:0d:8f:8f:a4:
28:91:e7:a7:07:e6:32:98:19:2e:4a:a4:b7:f1:26:
ce:6a:a9:45:5b:f1:70:d0:34:dd:91:cf:fb:95:96:
f5:8b:1e:9d:e5:e7:c1:de:d6:79:d6:cb:a2:0c:82:
cc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F2:CB:8B:9E:DA:88:D9:F0:F8:B0:44:90:E6:FE:2C:5F:03:2C:BD
X509v3 Authority Key Identifier:
keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/91C771A2D02111EA843F372FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
116.66.212.0-116.66.223.255
Signature Algorithm: sha256WithRSAEncryption
c0:49:65:ad:fe:28:78:a3:8d:2c:5b:47:e1:44:c8:d0:21:9e:
9c:36:64:a0:0e:02:b4:00:45:4f:e8:17:3d:e1:f7:e5:82:78:
28:f7:bc:46:23:41:e3:f0:91:76:08:03:c4:84:99:aa:5d:9a:
16:62:41:0b:89:71:6c:08:3e:4d:77:b7:24:12:58:40:dc:7d:
09:7e:87:81:a4:6e:fa:cc:ca:1e:41:f1:91:f1:51:99:74:1f:
73:00:72:0e:01:7f:03:b6:7c:cc:b8:dc:47:bb:42:18:17:4a:
7f:c3:68:0e:ba:f1:a8:e3:fe:43:99:24:63:c5:ee:53:6a:33:
07:8d:23:81:68:2d:52:3f:5b:64:62:36:48:d6:3a:56:4e:de:
d7:80:ae:88:0a:00:7f:e3:3a:e6:9e:1a:8b:bc:33:bb:0d:90:
3b:3a:b0:5e:a3:8c:2f:5d:a5:af:d7:14:0b:6b:77:4c:61:59:
72:bf:6a:30:0e:9c:18:d3:8c:a6:35:30:9f:d0:f0:d5:65:87:
3e:88:58:50:c1:91:f5:a1:55:cf:f3:c2:c3:4a:1b:eb:da:15:
71:ce:1a:f2:dd:c5:a1:5b:d3:d8:57:cc:37:d2:2d:33:74:9e:
93:8c:bd:76:b3:3a:37:b0:30:f5:85:06:be:39:3c:a6:e0:f7:
d3:85:47:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:28:37 2026 by rpki-client