
$ rpki-client -vvf rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/31E9004E9A0F11F0BC057E7DC4F9AE02.roa
File: 31E9004E9A0F11F0BC057E7DC4F9AE02.roa (raw, json)
Hash identifier: lMXIM574jb3Z0QsqRGCGYyP7C5VSgFPD1a4YIovILSM=
Subject key identifier: CE:23:46:45:EB:E2:79:2B:CA:E2:96:FE:47:B5:54:8A:A3:80:BF:E5
Certificate issuer: /CN=A91491CC/serialNumber=9C1E45A8084C311DD50044A173605E8EE3C4CC95
Certificate serial: 53
Authority key identifier: 9C:1E:45:A8:08:4C:31:1D:D5:00:44:A1:73:60:5E:8E:E3:C4:CC:95
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/31E9004E9A0F11F0BC057E7DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:17:20 +0000
ROA not before: Thu 25 Sep 2025 12:57:30 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 154084
IP address blocks: 192.51.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.crl
rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:37:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91491CC, serialNumber=9C1E45A8084C311DD50044A173605E8EE3C4CC95
Validity
Not Before: Sep 25 12:57:30 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a3d9f0-26b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:26:89:c0:35:84:d6:6f:95:b6:ae:f1:47:40:
25:a1:5b:e0:3d:d6:f7:50:ef:d9:99:dd:2a:31:cf:
bd:db:ea:c5:43:02:38:6d:54:11:48:03:50:eb:3a:
fa:9d:ae:bc:d3:c4:ce:db:fd:d8:3d:56:c3:a0:16:
9b:65:0f:15:d5:88:c5:69:7f:55:5a:5c:85:85:3b:
64:71:b3:13:a5:e8:87:45:50:e4:8c:73:b3:96:98:
e5:6f:bb:69:b6:ba:cb:09:bd:ff:99:56:49:c3:93:
f3:2e:64:d5:df:25:de:bd:0e:a3:4d:20:df:32:f4:
3b:6c:14:7b:44:45:2d:d7:09:8d:08:70:47:d2:03:
f2:b1:ef:fb:5e:ef:95:fd:53:7f:68:76:b3:cb:58:
75:91:4a:97:09:ba:19:83:51:d1:a5:31:67:03:88:
12:0c:28:f5:45:3b:72:26:12:ec:73:93:63:36:1e:
87:c3:3c:97:35:ff:28:25:38:bf:79:cc:80:40:a3:
0d:1c:4d:62:ff:eb:32:c2:6c:de:ac:14:54:ea:19:
3a:c7:b7:0a:97:a7:4a:81:fb:e9:a5:7b:72:5e:cd:
3f:45:04:03:9b:e7:16:89:e1:76:57:54:9e:2c:ae:
0f:b5:9d:d1:49:16:9a:ad:68:e3:bd:8f:72:a2:82:
06:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:23:46:45:EB:E2:79:2B:CA:E2:96:FE:47:B5:54:8A:A3:80:BF:E5
X509v3 Authority Key Identifier:
keyid:9C:1E:45:A8:08:4C:31:1D:D5:00:44:A1:73:60:5E:8E:E3:C4:CC:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/31E9004E9A0F11F0BC057E7DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
192.51.174.0/24
Signature Algorithm: sha256WithRSAEncryption
79:3f:21:7f:02:f3:68:80:fe:06:5b:51:b8:11:0a:57:26:d8:
f7:a9:c8:c4:75:c6:4d:8e:f1:6b:02:8d:ca:cc:4d:11:da:23:
96:0d:f2:4b:1d:55:c7:e8:4f:ce:9c:6a:b4:8c:05:15:e0:75:
75:70:4b:00:93:a9:48:5d:c7:e7:b3:31:cc:bd:a9:c0:80:b5:
6c:db:c1:92:71:c7:d9:23:fd:7d:35:e5:83:73:25:0c:16:43:
4b:66:e0:e6:4c:e5:ec:70:b7:4d:25:23:27:c5:aa:e7:9f:bf:
d2:4e:65:0c:2d:91:f9:eb:0e:2e:d7:2c:0a:4c:21:c2:e8:a8:
da:b8:8e:28:ee:ee:5e:17:76:8e:50:b0:8b:05:66:03:95:ce:
27:18:f0:72:94:33:67:92:c1:52:ee:de:77:db:35:aa:af:da:
a7:f0:f8:1e:25:3e:3e:b3:69:8d:11:9c:85:87:d7:12:f2:f7:
d4:8d:43:6e:48:b6:40:ec:86:68:68:29:83:73:72:3c:ca:3d:
13:66:da:2c:7c:34:d1:97:2b:c5:3c:7b:05:b6:61:a9:bf:d0:
a5:c3:8f:db:76:b1:13:87:0f:19:20:55:69:7e:3a:35:5e:e3:
9c:22:a4:9d:3f:29:36:00:48:ed:8c:f8:03:90:47:15:06:05:
09:54:b2:89
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:49 2026 by rpki-client