
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/23C5258A29D711F19B6521AE99833773.roa
File: 23C5258A29D711F19B6521AE99833773.roa (raw, json)
Hash identifier: v++NZpvnb9ylmNbF62ghM6TfResLJGpsjAupWiltIf8=
Subject key identifier: 13:11:63:C3:EB:9A:48:8B:38:0F:0E:85:4A:20:35:83:DC:12:96:1E
Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial: 0140
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/23C5258A29D711F19B6521AE99833773.roa
Signing time: Tue 28 Jul 2026 19:39:46 +0000
ROA not before: Tue 28 Jul 2026 19:39:46 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 12491
IP address blocks: 207.176.12.0/24 maxlen: 24
207.226.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320 (0x140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Validity
Not Before: Jul 28 19:39:46 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a690582-521b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:53:9d:a2:9b:01:fb:a6:d6:27:24:ea:f3:08:
09:41:67:a3:6c:d7:6e:d2:b5:3a:51:86:67:c4:2e:
99:3d:23:80:52:e6:05:25:6b:69:8c:67:46:b0:60:
fd:8e:a7:e6:c8:a1:01:ba:de:10:72:92:f7:f5:b3:
99:b8:3b:0d:f6:94:e6:63:dc:60:ec:17:c5:ab:13:
5d:e8:96:22:7e:85:7b:ed:88:ac:46:46:88:25:85:
d0:19:9a:30:d9:20:c7:34:05:00:f5:43:41:df:fa:
d6:97:de:a9:37:f1:00:bb:ea:57:25:7d:7d:b8:94:
fc:86:48:3b:3c:a8:00:f5:11:86:4f:6c:67:e0:6e:
6f:38:5d:8f:db:f2:9e:22:53:ca:61:d5:0c:ff:7d:
d0:73:df:39:66:65:12:37:70:1b:59:c2:53:13:36:
dc:52:ee:e8:18:e3:51:34:27:a1:64:90:0a:a0:b3:
43:e5:99:60:80:02:39:b0:75:25:2d:65:47:fd:97:
25:9a:5b:33:ee:78:32:3c:d9:1e:32:d6:a3:7c:06:
16:48:49:c3:da:23:30:2a:6d:1f:7f:6e:47:8a:d0:
79:f1:db:31:9a:ca:bb:9b:de:11:29:49:8c:cb:35:
31:14:01:06:ef:58:25:f8:57:ea:49:8b:67:a2:b0:
48:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:11:63:C3:EB:9A:48:8B:38:0F:0E:85:4A:20:35:83:DC:12:96:1E
X509v3 Authority Key Identifier:
keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/23C5258A29D711F19B6521AE99833773.roa
sbgp-ipAddrBlock: critical
IPv4:
207.176.12.0/24
207.226.47.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:b8:50:cc:c8:1b:e9:51:82:8a:ad:e8:35:6d:ea:d3:5d:7b:
12:cc:14:bf:2d:8f:d1:42:58:5a:b2:72:a3:3a:fe:22:ef:78:
ae:ed:96:66:70:3b:be:7c:92:1c:51:7b:e6:60:22:e7:03:c4:
de:04:66:72:21:27:d1:a3:73:a0:02:ae:0a:3a:5e:5a:1b:87:
4d:7e:24:72:7c:c6:a1:e9:06:00:9f:ed:0c:01:07:63:60:52:
3f:44:09:06:fa:2e:ee:f2:8e:ce:4a:1d:6e:eb:49:2f:82:d5:
97:f5:74:50:67:20:8a:61:6a:37:25:18:5a:e4:ca:16:ed:d7:
d3:3b:dc:46:0b:f7:1d:ae:74:dd:aa:1b:f2:08:20:d7:ba:1b:
3b:91:55:92:2b:84:26:cc:f7:9e:8a:3b:83:07:14:b4:19:70:
88:e5:ea:c1:f7:38:90:b1:b3:d9:60:ec:c7:ee:36:ad:c6:a9:
11:33:e8:ef:f8:65:5f:a7:28:9b:e9:7a:ad:62:b0:59:b4:f9:
1a:2b:65:df:82:a9:78:98:fa:84:44:d2:03:44:7c:e0:b2:1e:
7f:3d:31:1f:b0:39:cc:15:7c:ae:5f:23:23:ff:92:5f:33:19:
95:f3:4b:f9:28:ee:52:5d:5b:78:68:75:ed:98:e8:38:90:4b:
03:f8:5f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:01:59 2026 by rpki-client