
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/90C9C90EA85511F19B18BFDB3F11F970.roa
File: 90C9C90EA85511F19B18BFDB3F11F970.roa (raw, json)
Hash identifier: WZWcX3CF5FvNbafUGlJhEH43bNTYSC0lygUCULjgth0=
Subject key identifier: 64:B3:CC:2B:B5:58:4E:5D:BC:32:40:1C:0E:85:08:EE:0F:02:3B:A8
Certificate issuer: /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial: 012E
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/90C9C90EA85511F19B18BFDB3F11F970.roa
Signing time: Fri 04 Sep 2026 11:41:28 +0000
ROA not before: Fri 04 Sep 2026 11:41:28 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 147281
IP address blocks: 74.52.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302 (0x12e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Validity
Not Before: Sep 4 11:41:28 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a9aae68-1c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:93:b6:62:11:70:2c:ad:10:07:ae:3c:04:c3:
8f:02:c5:82:ec:58:6c:e1:66:86:95:05:1d:c8:85:
eb:55:8a:bb:82:9d:be:71:d4:cd:7c:8f:12:cd:9a:
ad:b8:e4:e2:1d:75:45:02:09:c7:00:80:2b:ef:8e:
7d:76:6d:f4:22:03:71:9f:3c:75:1f:fd:3b:09:70:
82:30:c9:a4:96:79:02:3e:aa:e2:c2:19:52:9f:e6:
1b:01:87:77:58:0a:e2:71:75:5e:e7:fe:77:48:c7:
cf:ec:16:59:53:db:4a:4f:a1:1e:3e:a2:8f:52:89:
ec:78:c8:56:ec:7b:4b:ea:27:d2:d7:26:01:c8:9c:
99:b2:f1:d7:70:90:f1:d2:33:14:70:f5:95:39:6c:
52:1b:da:ca:3e:57:63:ad:b6:3e:81:e5:59:77:01:
4c:fc:77:4e:59:b9:1b:69:ef:39:7e:0c:b5:a6:7b:
6c:ad:e8:3c:33:fa:6f:a3:e6:2d:03:ae:45:9e:53:
42:95:f2:c5:a1:96:e2:7c:3d:02:05:c5:16:a1:65:
bd:a9:28:3f:c5:75:e7:c0:39:9e:e3:55:4e:30:1f:
a3:d9:58:b3:d9:62:12:75:65:86:e0:70:de:07:2a:
52:2c:6b:cd:68:45:62:df:fb:25:86:71:eb:e3:04:
56:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B3:CC:2B:B5:58:4E:5D:BC:32:40:1C:0E:85:08:EE:0F:02:3B:A8
X509v3 Authority Key Identifier:
keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/90C9C90EA85511F19B18BFDB3F11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
74.52.4.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:70:5c:e9:4d:0a:1b:00:c1:c1:b1:d3:8f:3f:96:2d:d2:0e:
0f:a1:e9:20:44:3e:ec:52:3f:a8:3b:9e:b7:86:9f:bc:1d:71:
9b:58:74:7a:5a:c5:08:f3:8d:14:49:d0:3a:89:18:fe:2e:57:
15:e9:84:3d:4e:88:06:d6:b1:1a:cc:15:02:ad:2e:90:29:d5:
3d:e5:dd:90:36:26:61:56:6d:1c:c9:94:bd:ba:44:3f:b7:7b:
23:df:54:56:78:96:83:cc:f1:ab:16:61:fc:21:a4:18:af:a8:
b6:aa:02:8d:32:7a:72:f3:cc:6d:b9:1a:64:b6:98:10:da:78:
9a:f7:72:2a:b0:f4:47:e7:c1:cd:a6:91:65:5a:0f:92:4b:23:
72:32:db:ee:bf:e9:ff:89:be:b3:8b:2e:32:af:bc:e2:e2:7a:
4b:62:43:87:4f:aa:8e:d7:42:92:20:64:ec:d7:95:57:d2:d5:
1d:72:42:84:32:8d:8b:32:35:49:56:8a:ed:85:9c:dc:81:49:
fa:a5:12:28:fa:32:20:d1:81:46:7c:00:65:c5:bc:c9:c6:f2:
d6:34:09:90:4c:8d:7d:09:4e:f3:4b:97:93:3b:8a:a7:8a:c5:
13:c4:56:cb:ed:c1:3e:28:7f:ac:e0:02:b1:26:ad:19:0a:06:
e1:b3:71:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:27:15 2026 by rpki-client