
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/A03EA96629DB11F1BFD4871E9B833773.roa
File: A03EA96629DB11F1BFD4871E9B833773.roa (raw, json)
Hash identifier: CeVU5F+cE/p/gIJ6n4nuOgYXAjPlizKNWh6FzWAj2VQ=
Subject key identifier: 46:83:CF:56:45:FC:14:FD:09:15:40:CC:B8:35:6A:9D:0A:28:FE:4C
Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial: 0156
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/A03EA96629DB11F1BFD4871E9B833773.roa
Signing time: Tue 28 Jul 2026 19:40:43 +0000
ROA not before: Tue 28 Jul 2026 19:40:43 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 395753
IP address blocks: 205.252.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342 (0x156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Validity
Not Before: Jul 28 19:40:43 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a6905bb-37f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8a:31:0f:03:59:c3:4f:22:a9:d9:ab:38:e7:
58:6e:34:3c:5e:1f:d9:03:3c:e4:68:eb:db:2b:0f:
a0:1b:07:9e:cd:b1:6f:01:bb:f8:e7:b5:17:af:60:
7a:cd:72:ad:b5:fa:8e:94:7d:dc:3e:71:05:e0:b4:
29:91:81:56:a3:80:7f:2a:09:59:44:20:79:d1:a5:
95:e3:e7:3b:d7:14:99:f9:3f:03:5c:ed:e7:48:5e:
73:94:13:ac:99:43:c4:68:bb:fe:ea:2b:e0:04:a5:
c6:08:55:6f:74:2e:9a:b8:d8:3d:07:bd:54:bf:83:
9b:f9:d0:52:9c:6d:50:12:2d:47:c6:f8:eb:ce:11:
14:ca:34:46:c5:e0:5e:72:0d:18:a7:eb:7c:60:90:
fe:7b:73:3e:bb:5f:89:8d:a6:24:2e:8d:0c:f1:e9:
2b:c3:30:54:b0:a1:f6:10:31:8c:03:b8:41:fa:eb:
c1:c1:04:22:e6:fe:9a:47:78:6f:47:59:5c:5d:ce:
8f:46:95:a6:ba:81:18:df:37:25:84:49:71:f9:5d:
24:c7:da:c3:9f:7c:34:81:9b:10:2a:8d:0f:df:1b:
52:b6:b1:73:c7:70:0a:f9:1a:ae:50:9d:fe:cf:40:
c2:dd:03:1c:35:2e:aa:b8:67:bd:65:eb:4e:ef:97:
e8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:83:CF:56:45:FC:14:FD:09:15:40:CC:B8:35:6A:9D:0A:28:FE:4C
X509v3 Authority Key Identifier:
keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/A03EA96629DB11F1BFD4871E9B833773.roa
sbgp-ipAddrBlock: critical
IPv4:
205.252.118.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:0a:3f:ae:34:da:3a:88:18:35:dd:d9:5c:0f:ed:31:2a:21:
e4:3a:64:c6:19:3a:48:d2:e1:a1:73:cb:71:e7:76:ce:c2:a0:
64:7b:8d:93:c6:91:aa:0b:f7:e9:a0:fd:d4:b3:0e:b5:23:f7:
c8:1b:16:ec:8a:3a:36:01:93:58:8b:c8:b0:71:06:3d:41:61:
80:b7:be:16:7e:e0:99:08:c9:9f:99:b1:a7:1c:81:9a:51:73:
a6:8c:bb:4b:f2:76:ef:0f:5e:fc:60:d8:b0:2f:c4:78:f8:f0:
21:2a:18:b1:24:84:13:39:16:24:a9:3f:5d:03:33:8c:dc:b8:
a1:e7:fb:3a:aa:42:9a:aa:3c:42:08:2e:9d:35:99:96:26:e9:
68:f5:10:94:08:73:6b:91:05:94:80:e1:13:cd:8d:1f:d8:a3:
a4:c9:ce:08:10:a2:24:25:e3:b6:37:49:eb:e0:51:2f:41:d1:
b1:64:b4:17:84:c4:99:a8:1e:00:09:1f:02:71:b7:98:b9:85:
75:f7:21:7d:b6:eb:bc:45:5b:f4:2b:1e:75:f3:a8:e3:b6:fd:
bb:bb:f4:bb:90:eb:fb:8e:e8:8b:d5:b6:5f:87:28:15:88:7e:
72:3e:0d:f6:c8:27:a1:3b:65:99:d4:80:d4:3c:b2:5c:0d:44:
74:b8:81:3c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA0QTkxMTAvBgNVBAUTKDNEN0IxNUJENzdEOUI5NzRFMzczNThEQTc1NERGRUE5
MjkxRTY4M0EwHhcNMjYwNzI4MTk0MDQzWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTY5MDViYi0zN2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqYoxDwNZw08iqdmrOOdYbjQ8Xh/ZAzzkaOvbKw+gGweezbFvAbv457UXr2B6
zXKttfqOlH3cPnEF4LQpkYFWo4B/KglZRCB50aWV4+c71xSZ+T8DXO3nSF5zlBOs
mUPEaLv+6ivgBKXGCFVvdC6auNg9B71Uv4Ob+dBSnG1QEi1HxvjrzhEUyjRGxeBe
cg0Yp+t8YJD+e3M+u1+JjaYkLo0M8ekrwzBUsKH2EDGMA7hB+uvBwQQi5v6aR3hv
R1lcXc6PRpWmuoEY3zclhElx+V0kx9rDn3w0gZsQKo0P3xtStrFzx3AK+RquUJ3+
z0DC3QMcNS6quGe9ZetO75fo8wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEaDz1ZF
/BT9CRVAzLg1ap0KKP5MMB8GA1UdIwQYMBaAFD17Fb132bl043NY2nVN/qkpHmg6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9GRDM3MkU0QTI5
NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS9QWHNWdlhmWnVYVGpjMWphZFUzLXFTa2Vh
RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFEby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzA0QTkvRkQzNzJFNEEyOTQ1MTFGMUE3QUEzRUJEODRFRTUyOEUvQTAzRUE5NjYy
OURCMTFGMUJGRDQ4NzFFOUI4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAzfx2MA0GCSqGSIb3DQEBCwUAA4IBAQCxCj+uNNo6iBg13dlcD+0x
KiHkOmTGGTpI0uGhc8tx53bOwqBke42TxpGqC/fpoP3Usw61I/fIGxbsijo2AZNY
i8iwcQY9QWGAt74WfuCZCMmfmbGnHIGaUXOmjLtL8nbvD178YNiwL8R4+PAhKhix
JIQTORYkqT9dAzOM3Lih5/s6qkKaqjxCCC6dNZmWJulo9RCUCHNrkQWUgOETzY0f
2KOkyc4IEKIkJeO2N0nr4FEvQdGxZLQXhMSZqB4ACR8CcbeYuYV19yF9tuu8RVv0
Kx5186jjtv27u/S7kOv7juiL1bZfhygViH5yPg32yCehO2WZ1IDUPLJcDUR0uIE8
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:57:25 2026 by rpki-client