
$ rpki-client -vvf rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/8EA288F62E9511E9896EFA1DC4F9AE02.roa
File: 8EA288F62E9511E9896EFA1DC4F9AE02.roa (raw, json)
Hash identifier: tCQBUtYFoGYz0mkeelr2MTFt0PRYSbZ9klpLIVmb1oc=
Subject key identifier: 34:D6:DB:26:25:AD:3D:DB:B3:E8:97:78:A2:8D:96:45:43:4F:86:E1
Certificate issuer: /CN=A91709BC/serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F
Certificate serial: 11D6
Authority key identifier: 36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/8EA288F62E9511E9896EFA1DC4F9AE02.roa
Signing time: Tue 26 May 2026 17:26:33 +0000
ROA not before: Tue 26 May 2026 17:26:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45782
IP address blocks: 210.4.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl
rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:11:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4566 (0x11d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91709BC, serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F
Validity
Not Before: May 26 17:26:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a15d7c9-c674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:45:6e:5b:fe:fb:e8:7b:c0:ee:c6:11:3b:6a:
96:54:11:95:d6:05:ce:8c:5a:2c:27:5d:4f:86:00:
cc:67:e4:95:ee:06:33:5d:e3:52:1a:c1:d6:f6:d7:
17:11:fe:3a:54:7f:e6:7a:69:7f:ba:47:c8:ac:8e:
71:80:1f:10:ef:18:cf:a1:21:70:7b:f7:dd:0c:82:
09:16:f0:56:fc:6c:0a:4e:c5:ec:ae:49:44:08:7b:
98:9d:66:95:2f:79:cc:b1:0f:ec:ff:8d:99:81:32:
a5:da:21:7b:6e:2d:bc:ca:a7:b6:8a:85:19:32:40:
02:3e:52:b2:b4:b4:2e:f3:bd:dc:62:77:e8:d8:38:
46:a8:29:f3:a4:3a:33:3d:85:54:bd:02:63:c6:22:
c5:43:51:01:75:88:aa:4b:a6:b6:40:83:1e:51:31:
47:29:83:fc:1c:ac:76:a8:1c:fd:65:c2:0d:85:c0:
88:9f:8b:b4:45:11:d5:aa:15:27:7c:79:48:3a:4a:
b4:d0:04:83:19:83:b5:cb:16:b3:ed:70:7c:4a:06:
74:5b:aa:e2:0e:40:90:00:55:dd:fc:8e:8a:83:ce:
80:fe:70:9c:fe:ff:19:70:26:52:8b:ba:62:24:27:
61:58:71:4c:ac:e0:67:38:f5:ae:95:bc:77:df:45:
53:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D6:DB:26:25:AD:3D:DB:B3:E8:97:78:A2:8D:96:45:43:4F:86:E1
X509v3 Authority Key Identifier:
keyid:36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/8EA288F62E9511E9896EFA1DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.4.6.0/24
Signature Algorithm: sha256WithRSAEncryption
11:23:bd:d7:d3:5f:06:dd:4c:48:54:76:80:d4:ed:4b:80:02:
69:6f:5d:7e:2a:81:9e:26:05:df:e1:55:9f:49:a2:da:15:07:
c4:7b:b3:1e:5a:ed:84:b9:5d:8d:68:f4:48:70:d6:b8:71:f5:
4f:7d:9e:61:62:84:2e:ad:ef:40:33:cc:eb:51:88:23:95:c0:
58:8b:ef:03:40:44:41:71:65:bf:ed:79:9f:76:b6:c9:14:f6:
df:58:36:95:2a:d3:9b:4e:00:51:4a:10:d7:8c:ba:22:f0:48:
f2:6a:82:ba:54:66:85:36:93:da:b2:28:5c:81:46:b4:fb:61:
30:f3:9d:f6:7f:9f:47:43:0e:9d:bc:7e:0c:96:6d:da:f9:fc:
15:de:28:f7:77:b7:ca:36:b6:49:da:9c:6a:8d:8f:dc:b7:f6:
4a:b9:cb:d7:ec:ce:18:45:c8:76:7e:38:22:06:0d:67:1c:60:
23:93:51:0c:97:f8:c7:5b:80:f5:bb:84:cb:49:73:a9:8f:69:
99:87:9c:74:70:66:23:e2:df:e3:ed:81:ed:0c:a7:3d:6f:cc:
1a:85:02:55:eb:12:68:f1:f7:2b:9d:28:2e:eb:82:84:54:80:
4f:7b:2e:4e:17:a3:36:09:84:be:6b:34:de:e7:f1:61:1c:ad:
9f:b8:0c:4d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICEdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzA5QkMxMTAvBgNVBAUTKDM2RUU4QTQwMTMwNUVCMzhFMjhEODZBNURCN0Y3NjI4
QUFCN0UyNEYwHhcNMjYwNTI2MTcyNjMzWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTE1ZDdjOS1jNjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7UVuW/776HvA7sYRO2qWVBGV1gXOjFosJ11PhgDMZ+SV7gYzXeNSGsHW9tcX
Ef46VH/meml/ukfIrI5xgB8Q7xjPoSFwe/fdDIIJFvBW/GwKTsXsrklECHuYnWaV
L3nMsQ/s/42ZgTKl2iF7bi28yqe2ioUZMkACPlKytLQu873cYnfo2DhGqCnzpDoz
PYVUvQJjxiLFQ1EBdYiqS6a2QIMeUTFHKYP8HKx2qBz9ZcINhcCIn4u0RRHVqhUn
fHlIOkq00ASDGYO1yxaz7XB8SgZ0W6riDkCQAFXd/I6Kg86A/nCc/v8ZcCZSi7pi
JCdhWHFMrOBnOPWulbx330VTywIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDTW2yYl
rT3bs+iXeKKNlkVDT4bhMB8GA1UdIwQYMBaAFDbuikATBes44o2Gpdt/diiqt+JP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDlCQy84OTI4OTczMDJF
OTAxMUU5OTE3Nzk2MEZDNEY5QUUwMi9OdTZLUUJNRjZ6amlqWWFsMjM5MktLcTM0
azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL051NktRQk1GNnpqaWpZYWwyMzkyS0txMzRrOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzA5QkMvODkyODk3MzAyRTkwMTFFOTkxNzc5NjBGQzRGOUFFMDIvOEVBMjg4RjYy
RTk1MTFFOTg5NkVGQTFEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQA0gQGMA0GCSqGSIb3DQEBCwUAA4IBAQARI73X018G3UxIVHaA1O1L
gAJpb11+KoGeJgXf4VWfSaLaFQfEe7MeWu2EuV2NaPRIcNa4cfVPfZ5hYoQure9A
M8zrUYgjlcBYi+8DQERBcWW/7XmfdrbJFPbfWDaVKtObTgBRShDXjLoi8EjyaoK6
VGaFNpPasihcgUa0+2Ew8532f59HQw6dvH4Mlm3a+fwV3ij3d7fKNrZJ2pxqjY/c
t/ZKucvX7M4YRch2fjgiBg1nHGAjk1EMl/jHW4D1u4TLSXOpj2mZh5x0cGYj4t/j
7YHtDKc9b8wahQJV6xJo8fcrnSgu64KEVIBPey5OF6M2CYS+azTe5/FhHK2fuAxN
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:53:24 2026 by rpki-client