
$ rpki-client -vvf rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/264DBA882E9411E9A7232A19C4F9AE02.roa
File: 264DBA882E9411E9A7232A19C4F9AE02.roa (raw, json)
Hash identifier: bAw2DJ5Kd887dPCmMIgU3xUTOQCR/psfXJJs57GhqSk=
Subject key identifier: 8D:50:46:E4:9A:FC:13:FA:96:16:2C:6F:F0:B9:BE:AF:71:AB:A8:32
Certificate issuer: /CN=A91709BC/serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F
Certificate serial: 11D2
Authority key identifier: 36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/264DBA882E9411E9A7232A19C4F9AE02.roa
Signing time: Tue 26 May 2026 17:26:25 +0000
ROA not before: Tue 26 May 2026 17:26:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 18016
IP address blocks: 121.96.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl
rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:11:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4562 (0x11d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91709BC, serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F
Validity
Not Before: May 26 17:26:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a15d7c1-b1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c8:0d:8a:26:37:28:28:7e:f9:51:35:4e:1b:
5b:a4:87:a8:95:0c:10:da:d9:59:ad:11:be:97:b7:
c2:11:86:3d:a2:1f:cb:db:14:11:a0:a1:9f:cc:81:
bc:cd:1e:eb:58:72:e4:ae:ed:c8:8a:7a:5c:4b:64:
ce:20:c2:bf:41:1d:16:bf:96:57:09:8b:53:d9:99:
94:4f:b8:f0:e1:9f:de:81:9b:49:65:20:21:23:da:
ce:00:9b:6f:e2:1e:6f:df:93:a4:60:0c:ee:fd:7e:
1a:e6:62:21:ee:f2:8a:bb:b3:99:39:2c:78:51:5b:
5d:03:48:cf:89:c0:e6:b3:50:b2:db:6f:d3:47:66:
c3:67:dc:b7:ab:38:26:f5:f4:ed:f2:3d:46:2e:76:
7e:5d:4d:99:8a:d4:ea:06:4c:e3:e6:0c:45:d3:45:
76:d7:f4:e4:1a:82:6d:63:fb:93:9a:7e:69:34:7f:
9c:f8:9c:8d:b8:df:70:31:9c:51:1c:08:57:19:9c:
e0:de:2c:69:7e:79:36:6d:25:c2:20:c8:bd:04:a4:
32:92:e4:d5:90:01:6d:8a:89:40:c9:fe:21:bc:34:
c8:a3:19:e4:da:c2:27:10:3f:70:99:f7:71:88:c8:
69:61:1b:a9:a1:7f:20:69:89:07:ba:06:53:fa:92:
b3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:50:46:E4:9A:FC:13:FA:96:16:2C:6F:F0:B9:BE:AF:71:AB:A8:32
X509v3 Authority Key Identifier:
keyid:36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/264DBA882E9411E9A7232A19C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
121.96.19.0/24
Signature Algorithm: sha256WithRSAEncryption
21:3c:93:ba:c8:79:9f:4d:29:0f:0c:7e:c7:fe:6e:a3:ed:ce:
bc:f1:41:d4:6e:dd:ff:83:65:a9:95:bb:30:d0:45:73:39:5e:
76:a7:67:33:eb:f8:cc:1c:c1:d3:d8:63:99:e8:9d:38:a1:fa:
a4:69:8b:0a:9b:06:e5:6b:4d:4b:39:50:0f:aa:76:4f:cd:78:
1c:07:f4:76:c9:76:19:36:02:4c:8b:35:f0:7f:ed:b1:47:09:
7c:7f:18:de:5f:c5:59:f9:c1:31:bb:76:35:38:57:94:be:5b:
4e:f1:6b:4c:f7:ac:2e:62:43:84:f4:e6:c6:3b:f8:ed:b8:ee:
e4:52:74:96:95:ce:e1:5e:dc:22:fc:67:87:ae:60:dd:78:1b:
42:fd:19:f6:1d:07:f4:a3:4c:97:3d:15:31:5d:af:d9:08:0b:
fb:7f:3f:67:2f:ed:94:57:68:3a:90:df:02:6a:dc:07:3f:3a:
28:8f:8a:e6:bf:81:a9:9c:d1:e6:b9:1f:40:76:14:c2:70:45:
20:4d:ad:71:d7:2b:35:0c:a7:58:cc:16:68:65:fa:56:30:56:
15:14:b6:37:74:85:9a:e0:94:86:e7:d8:08:19:80:47:6f:b1:
c7:db:aa:89:4c:44:15:8f:d5:87:5a:ee:ad:e5:f8:cb:c8:9a:
44:a4:fe:5f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICEdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzA5QkMxMTAvBgNVBAUTKDM2RUU4QTQwMTMwNUVCMzhFMjhEODZBNURCN0Y3NjI4
QUFCN0UyNEYwHhcNMjYwNTI2MTcyNjI1WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTE1ZDdjMS1iMWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1cgNiiY3KCh++VE1ThtbpIeolQwQ2tlZrRG+l7fCEYY9oh/L2xQRoKGfzIG8
zR7rWHLkru3IinpcS2TOIMK/QR0Wv5ZXCYtT2ZmUT7jw4Z/egZtJZSAhI9rOAJtv
4h5v35OkYAzu/X4a5mIh7vKKu7OZOSx4UVtdA0jPicDms1Cy22/TR2bDZ9y3qzgm
9fTt8j1GLnZ+XU2ZitTqBkzj5gxF00V21/TkGoJtY/uTmn5pNH+c+JyNuN9wMZxR
HAhXGZzg3ixpfnk2bSXCIMi9BKQykuTVkAFtiolAyf4hvDTIoxnk2sInED9wmfdx
iMhpYRupoX8gaYkHugZT+pKzxQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFI1QRuSa
/BP6lhYsb/C5vq9xq6gyMB8GA1UdIwQYMBaAFDbuikATBes44o2Gpdt/diiqt+JP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDlCQy84OTI4OTczMDJF
OTAxMUU5OTE3Nzk2MEZDNEY5QUUwMi9OdTZLUUJNRjZ6amlqWWFsMjM5MktLcTM0
azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL051NktRQk1GNnpqaWpZYWwyMzkyS0txMzRrOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzA5QkMvODkyODk3MzAyRTkwMTFFOTkxNzc5NjBGQzRGOUFFMDIvMjY0REJBODgy
RTk0MTFFOUE3MjMyQTE5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAeWATMA0GCSqGSIb3DQEBCwUAA4IBAQAhPJO6yHmfTSkPDH7H/m6j
7c688UHUbt3/g2Wplbsw0EVzOV52p2cz6/jMHMHT2GOZ6J04ofqkaYsKmwbla01L
OVAPqnZPzXgcB/R2yXYZNgJMizXwf+2xRwl8fxjeX8VZ+cExu3Y1OFeUvltO8WtM
96wuYkOE9ObGO/jtuO7kUnSWlc7hXtwi/GeHrmDdeBtC/Rn2HQf0o0yXPRUxXa/Z
CAv7fz9nL+2UV2g6kN8CatwHPzooj4rmv4GpnNHmuR9AdhTCcEUgTa1x1ys1DKdY
zBZoZfpWMFYVFLY3dIWa4JSG59gIGYBHb7HH26qJTEQVj9WHWu6t5fjLyJpEpP5f
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:52:10 2026 by rpki-client