
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/CD8FC3C82D1E11F191B042ACB6833773.roa
File: CD8FC3C82D1E11F191B042ACB6833773.roa (raw, json)
Hash identifier: NxkdL/XW0F+7NXwYBc0Km2tJxuYr4RVoLbvkjNZsOc8=
Subject key identifier: E5:3C:87:6F:89:F7:B5:B6:BB:F8:B7:78:A1:34:96:69:5C:CB:88:92
Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial: 014D
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/CD8FC3C82D1E11F191B042ACB6833773.roa
Signing time: Tue 28 Jul 2026 19:40:18 +0000
ROA not before: Tue 28 Jul 2026 19:40:18 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 24
IP address blocks: 207.226.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Validity
Not Before: Jul 28 19:40:18 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a6905a2-a71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:32:ec:bd:39:51:bf:62:6d:fb:3a:c1:8a:e9:
51:68:12:22:d5:bf:f7:65:83:18:77:45:b8:2f:b9:
56:f9:94:7e:2d:79:c6:be:ba:fa:49:1a:43:a8:00:
71:74:76:c3:a0:52:5e:b6:e2:07:c7:51:3c:b6:dd:
16:38:fe:bd:4d:72:d4:68:dc:c4:0b:52:d6:39:74:
e8:da:13:ab:35:52:96:26:25:a5:ba:fd:36:87:a2:
b1:fa:44:23:1a:7b:8a:6a:d2:95:a8:dd:cb:eb:e8:
c1:b1:be:31:11:59:ce:17:0a:9e:99:b3:5b:f0:18:
59:f9:53:f7:50:e8:7e:4c:2b:33:77:73:ef:d2:bb:
f4:30:4e:55:5b:6a:3f:c4:ee:c3:6c:da:11:ad:47:
2d:e2:3a:b8:71:e8:02:a7:87:86:6b:ab:81:d9:38:
59:8b:4a:8a:26:88:3a:cb:ab:d6:6f:d3:0b:b3:4a:
78:93:5e:cc:97:5b:0d:a7:f6:ea:a9:8e:1a:e8:23:
e5:ca:6c:c7:70:9f:c8:9f:c1:e5:86:cc:0a:ff:f1:
19:c0:f4:1b:78:d1:e1:4e:26:53:6e:56:8d:82:16:
e3:72:3c:e3:2a:5e:42:ce:34:bb:70:6b:25:77:f2:
b5:54:dc:55:64:36:5c:e4:54:be:a9:42:e3:51:2d:
19:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3C:87:6F:89:F7:B5:B6:BB:F8:B7:78:A1:34:96:69:5C:CB:88:92
X509v3 Authority Key Identifier:
keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/CD8FC3C82D1E11F191B042ACB6833773.roa
sbgp-ipAddrBlock: critical
IPv4:
207.226.114.0/24
Signature Algorithm: sha256WithRSAEncryption
13:37:91:08:be:7c:3e:6a:ab:4f:fb:b9:f7:da:fe:5a:ae:b7:
f2:4c:6e:0d:1c:bf:8f:45:68:03:3b:ad:6a:ed:db:64:7a:8a:
f7:ec:6e:da:8c:c1:9a:4c:55:b7:70:cf:9a:61:0b:f5:07:aa:
df:24:42:d1:d7:96:08:89:06:a8:71:4a:91:f5:dd:b0:19:81:
94:67:38:1a:4d:2d:f6:a5:fe:78:62:d6:ea:c1:a7:e2:da:1b:
03:4e:87:17:8e:e4:9b:84:ba:9e:fe:28:31:32:1f:65:49:dd:
bc:94:d0:1c:e0:ae:34:d7:f0:f0:d3:40:2b:ad:69:90:51:4a:
72:e7:c0:b4:dd:35:52:8d:80:61:40:21:9c:42:b8:e7:27:0e:
36:c5:b8:96:36:d2:1c:c5:30:fe:3f:34:5d:7b:69:45:b0:da:
56:c4:27:65:d6:9a:53:16:b9:44:17:df:a8:d2:71:7c:94:bc:
b2:45:1f:96:4d:c1:83:0d:6b:ea:ba:97:df:1f:f8:8a:9d:ad:
46:d6:0b:4d:a9:a6:f9:5e:f3:43:8a:f9:6e:45:e1:9c:57:1e:
02:31:ac:1a:3a:6c:74:f0:4b:ab:54:cc:c4:6c:d4:6f:c7:14:
e6:04:fe:9e:0d:c8:5a:d3:a8:6e:f9:31:e7:80:23:fc:39:14:
b1:0b:a4:7b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA0QTkxMTAvBgNVBAUTKDNEN0IxNUJENzdEOUI5NzRFMzczNThEQTc1NERGRUE5
MjkxRTY4M0EwHhcNMjYwNzI4MTk0MDE4WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTY5MDVhMi1hNzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzjLsvTlRv2Jt+zrBiulRaBIi1b/3ZYMYd0W4L7lW+ZR+LXnGvrr6SRpDqABx
dHbDoFJetuIHx1E8tt0WOP69TXLUaNzEC1LWOXTo2hOrNVKWJiWluv02h6Kx+kQj
GnuKatKVqN3L6+jBsb4xEVnOFwqembNb8BhZ+VP3UOh+TCszd3Pv0rv0ME5VW2o/
xO7DbNoRrUct4jq4cegCp4eGa6uB2ThZi0qKJog6y6vWb9MLs0p4k17Ml1sNp/bq
qY4a6CPlymzHcJ/In8HlhswK//EZwPQbeNHhTiZTblaNghbjcjzjKl5CzjS7cGsl
d/K1VNxVZDZc5FS+qULjUS0ZgwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOU8h2+J
97W2u/i3eKE0lmlcy4iSMB8GA1UdIwQYMBaAFD17Fb132bl043NY2nVN/qkpHmg6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9GRDM3MkU0QTI5
NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS9QWHNWdlhmWnVYVGpjMWphZFUzLXFTa2Vh
RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFEby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzA0QTkvRkQzNzJFNEEyOTQ1MTFGMUE3QUEzRUJEODRFRTUyOEUvQ0Q4RkMzQzgy
RDFFMTFGMTkxQjA0MkFDQjY4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAz+JyMA0GCSqGSIb3DQEBCwUAA4IBAQATN5EIvnw+aqtP+7n32v5a
rrfyTG4NHL+PRWgDO61q7dtkeor37G7ajMGaTFW3cM+aYQv1B6rfJELR15YIiQao
cUqR9d2wGYGUZzgaTS32pf54Ytbqwafi2hsDTocXjuSbhLqe/igxMh9lSd28lNAc
4K401/Dw00ArrWmQUUpy58C03TVSjYBhQCGcQrjnJw42xbiWNtIcxTD+PzRde2lF
sNpWxCdl1ppTFrlEF9+o0nF8lLyyRR+WTcGDDWvqupffH/iKna1G1gtNqab5XvND
ivluReGcVx4CMawaOmx08EurVMzEbNRvxxTmBP6eDcha06hu+THngCP8ORSxC6R7
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:26:14 2026 by rpki-client