
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/24DB124029D711F19B6521AE99833773.roa
File: 24DB124029D711F19B6521AE99833773.roa (raw, json)
Hash identifier: UqSBc8TxnJq1Jue1okvq1v9coaZmETb8TyDiU0CjCJ8=
Subject key identifier: F5:B6:6A:E1:2D:B6:AC:9D:0E:5B:FC:F6:E8:ED:0E:D4:7F:D2:61:89
Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial: 0157
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/24DB124029D711F19B6521AE99833773.roa
Signing time: Tue 28 Jul 2026 19:40:45 +0000
ROA not before: Tue 28 Jul 2026 19:40:45 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 398169
IP address blocks: 207.226.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343 (0x157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Validity
Not Before: Jul 28 19:40:45 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a6905bc-c7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:af:62:6b:66:77:3a:25:27:59:e3:31:af:2b:
96:e2:f1:2c:3f:48:99:6d:f8:cd:49:62:83:bb:cc:
71:a3:8f:1f:ae:9d:d7:f3:39:a7:30:89:71:a4:5e:
d0:ac:cd:51:f1:ca:31:b9:a7:94:e0:0c:bd:bc:e6:
cb:31:b8:a8:23:76:9c:41:37:76:0c:e9:5f:1c:6d:
2f:2c:a9:74:b4:37:29:2f:7a:d5:78:81:a4:ed:55:
8b:7f:56:c6:21:77:33:f0:36:95:1b:3d:12:44:85:
3c:61:8f:af:68:25:d3:3f:d7:cc:e2:71:36:c5:ed:
a6:36:20:fd:39:fe:80:fe:77:25:3a:6b:8c:18:d8:
f2:41:18:62:2b:55:32:05:15:d7:5e:52:69:c2:30:
c4:df:da:35:54:d8:aa:75:2f:a3:52:21:76:7f:9b:
ca:56:7e:c5:d9:37:66:6c:d8:75:c9:6b:7b:a4:95:
55:e4:45:d0:4d:a7:64:94:36:c2:20:67:8d:c3:e7:
9d:f6:fc:79:ed:63:24:a2:39:82:76:aa:ef:ba:18:
97:fc:25:ad:7b:5f:0d:fe:23:23:8c:0c:f6:c0:6b:
75:1e:e1:56:87:b7:3b:2f:da:f1:29:50:d3:13:69:
3a:98:5f:3e:42:0e:6d:dd:cd:dc:fd:74:bd:46:59:
2e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B6:6A:E1:2D:B6:AC:9D:0E:5B:FC:F6:E8:ED:0E:D4:7F:D2:61:89
X509v3 Authority Key Identifier:
keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/24DB124029D711F19B6521AE99833773.roa
sbgp-ipAddrBlock: critical
IPv4:
207.226.86.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:a6:6b:90:43:5b:7e:be:30:db:2e:ef:ec:77:81:26:5b:cf:
a6:11:4d:ae:6c:ad:c3:ed:f9:49:94:56:07:6e:75:74:4f:2a:
d5:ef:4c:44:8a:c3:ea:34:e8:b7:86:3b:5c:1c:1d:92:06:c3:
2c:32:89:8b:0c:07:0b:91:5b:1b:6e:e8:23:21:30:6f:c4:1d:
03:d4:bf:88:c9:30:1c:b1:05:93:7d:0f:b1:1e:34:bf:d7:c9:
67:78:ca:90:6e:5b:8f:b8:17:74:cb:d9:cc:fa:61:27:a0:aa:
56:4a:e4:1a:33:44:06:89:4c:93:c9:e1:73:0a:25:79:69:3f:
26:d8:05:c6:f6:ec:d8:35:9e:be:e0:7e:e3:4e:a7:72:28:03:
d9:74:c6:c5:ad:6c:d4:f0:57:5a:d3:c7:0e:e5:ce:39:16:de:
5e:4d:a6:e4:08:d6:dc:99:16:bb:ea:41:a7:e7:f8:b9:65:df:
17:33:2d:e9:8f:a0:1d:80:cd:fd:87:76:17:b7:3a:d2:0f:63:
84:87:aa:1f:0f:fc:f1:85:49:45:d1:84:3a:ac:50:e3:72:43:
fa:d4:c8:34:7c:65:56:ab:3c:04:fb:eb:9c:e2:71:78:17:f7:
66:13:2f:cf:ff:46:45:33:e5:f7:e1:dd:84:0f:f8:52:8d:15:
b3:e4:f8:2c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA0QTkxMTAvBgNVBAUTKDNEN0IxNUJENzdEOUI5NzRFMzczNThEQTc1NERGRUE5
MjkxRTY4M0EwHhcNMjYwNzI4MTk0MDQ1WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTY5MDViYy1jN2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2K9ia2Z3OiUnWeMxryuW4vEsP0iZbfjNSWKDu8xxo48frp3X8zmnMIlxpF7Q
rM1R8coxuaeU4Ay9vObLMbioI3acQTd2DOlfHG0vLKl0tDcpL3rVeIGk7VWLf1bG
IXcz8DaVGz0SRIU8YY+vaCXTP9fM4nE2xe2mNiD9Of6A/nclOmuMGNjyQRhiK1Uy
BRXXXlJpwjDE39o1VNiqdS+jUiF2f5vKVn7F2TdmbNh1yWt7pJVV5EXQTadklDbC
IGeNw+ed9vx57WMkojmCdqrvuhiX/CWte18N/iMjjAz2wGt1HuFWh7c7L9rxKVDT
E2k6mF8+Qg5t3c3c/XS9RlkuAwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPW2auEt
tqydDlv89ujtDtR/0mGJMB8GA1UdIwQYMBaAFD17Fb132bl043NY2nVN/qkpHmg6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9GRDM3MkU0QTI5
NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS9QWHNWdlhmWnVYVGpjMWphZFUzLXFTa2Vh
RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFEby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzA0QTkvRkQzNzJFNEEyOTQ1MTFGMUE3QUEzRUJEODRFRTUyOEUvMjREQjEyNDAy
OUQ3MTFGMTlCNjUyMUFFOTk4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAz+JWMA0GCSqGSIb3DQEBCwUAA4IBAQC1pmuQQ1t+vjDbLu/sd4Em
W8+mEU2ubK3D7flJlFYHbnV0TyrV70xEisPqNOi3hjtcHB2SBsMsMomLDAcLkVsb
bugjITBvxB0D1L+IyTAcsQWTfQ+xHjS/18lneMqQbluPuBd0y9nM+mEnoKpWSuQa
M0QGiUyTyeFzCiV5aT8m2AXG9uzYNZ6+4H7jTqdyKAPZdMbFrWzU8Fda08cO5c45
Ft5eTabkCNbcmRa76kGn5/i5Zd8XMy3pj6AdgM39h3YXtzrSD2OEh6ofD/zxhUlF
0YQ6rFDjckP61Mg0fGVWqzwE++uc4nF4F/dmEy/P/0ZFM+X34d2ED/hSjRWz5Pgs
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:40:08 2026 by rpki-client