
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/31E9004E9A0F11F0BC057E7DC4F9AE02.roa
File: 31E9004E9A0F11F0BC057E7DC4F9AE02.roa (raw, json)
Hash identifier: tljjskEzluOLyfM+jOhLD+OSuutF6Ym7Br+LWf9TkKY=
Subject key identifier: C5:8F:83:BB:8B:48:5C:71:F9:D7:5C:0E:30:20:62:6F:5D:1E:3C:2B
Certificate issuer: /CN=A91491CC/serialNumber=9C1E45A8084C311DD50044A173605E8EE3C4CC95
Certificate serial: A6
Authority key identifier: 9C:1E:45:A8:08:4C:31:1D:D5:00:44:A1:73:60:5E:8E:E3:C4:CC:95
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/31E9004E9A0F11F0BC057E7DC4F9AE02.roa
Signing time: Wed 05 Aug 2026 08:57:11 +0000
ROA not before: Wed 05 Aug 2026 08:57:11 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 154084
IP address blocks: 192.51.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.crl
rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:55:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91491CC, serialNumber=9C1E45A8084C311DD50044A173605E8EE3C4CC95
Validity
Not Before: Aug 5 08:57:11 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a72fae7-d693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:23:a8:e1:98:e6:79:c4:dc:93:ed:30:e5:
43:cb:3b:b0:f8:85:51:4d:16:f2:2d:b9:f9:5b:16:
68:0f:82:fc:b9:f1:50:8e:6d:26:4f:7c:2d:6c:32:
98:41:20:cf:2b:2c:f1:ac:e8:4c:5e:0d:a6:cd:6f:
b5:74:e3:d9:c0:6e:db:c1:87:64:ae:cf:56:33:8a:
a5:00:8e:70:54:81:6d:22:72:c5:37:8e:21:b6:a2:
bf:b1:63:08:d9:3c:fd:d7:08:2f:21:e6:1b:a3:cf:
a8:29:a5:9c:de:03:d4:c2:6d:05:a8:59:4e:de:f8:
86:5d:5e:2f:c0:ab:53:6a:ec:32:91:d7:3b:2d:ea:
32:18:74:c2:a0:35:10:d4:59:94:66:52:8f:cd:f3:
de:10:5e:8d:bc:8e:a1:a8:0c:46:25:7d:a1:72:8f:
86:7d:1e:ff:de:a1:76:92:c7:c9:9f:c5:37:10:5b:
ee:eb:4e:6e:d5:6f:6b:d1:9f:b8:21:68:e6:ac:31:
eb:37:77:45:18:90:ea:16:d7:3d:86:d9:3f:0f:d5:
ca:e8:d8:46:16:23:ad:8d:24:f0:ff:31:bc:48:a6:
bf:3f:51:9e:5b:e9:54:cb:90:54:b9:ae:61:4e:80:
e2:3b:98:b9:81:3a:d3:8c:e5:5b:39:9c:c9:02:73:
c8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8F:83:BB:8B:48:5C:71:F9:D7:5C:0E:30:20:62:6F:5D:1E:3C:2B
X509v3 Authority Key Identifier:
keyid:9C:1E:45:A8:08:4C:31:1D:D5:00:44:A1:73:60:5E:8E:E3:C4:CC:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/31E9004E9A0F11F0BC057E7DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
192.51.174.0/24
Signature Algorithm: sha256WithRSAEncryption
68:aa:2c:ed:fd:7a:a1:9a:b1:53:a5:03:99:69:79:d6:62:47:
3c:00:06:b7:8e:47:69:9d:2b:8d:17:c2:b9:69:48:67:0a:e3:
83:9a:7d:e7:a1:a6:b4:e0:dc:cf:b0:4f:4d:e3:a2:f5:60:d7:
58:94:39:93:39:b5:39:af:58:28:57:00:12:b4:e9:3c:0c:d7:
fc:8e:53:8b:df:d9:e9:b4:93:42:cf:a4:f8:79:5b:47:ee:73:
fb:5b:c0:2c:b5:79:88:65:6b:1e:e6:45:d9:56:a9:67:86:9f:
6d:9d:0e:3d:f6:0f:c2:c0:f1:48:48:ff:98:cf:6e:d4:96:1f:
b1:9e:4e:c2:21:04:47:f8:e8:08:7d:ee:d0:f6:b3:80:9c:08:
62:11:e7:dd:22:b1:e1:41:71:0c:99:54:b8:c0:2f:77:df:4c:
f4:d0:d5:39:77:a0:8d:53:1f:d8:8a:01:80:7c:cb:ad:44:ee:
b8:54:8a:9e:5d:a4:f9:64:65:88:3a:2f:23:b5:3b:f4:f9:b7:
78:6b:3d:ef:87:74:6d:37:f4:1b:34:bc:c9:94:09:54:22:a1:
b1:f2:aa:05:cd:f4:01:a8:ee:ad:9d:9b:84:24:d7:31:81:43:
de:4d:da:7c:4e:51:ca:2c:d2:c9:36:37:2f:ed:cb:5f:46:fe:
ee:75:88:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:33:11 2026 by rpki-client