
$ rpki-client -vvf rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/942BF3C013CA11ED983E350EC4F9AE02.roa
File: 942BF3C013CA11ED983E350EC4F9AE02.roa (raw, json)
Hash identifier: LczRyamjv+q6qql4U5+k9/pRxqo+Z2BSI6X/Qd9169k=
Subject key identifier: 64:25:4F:E2:6E:F2:1B:3C:43:2D:F3:D3:72:E1:4D:3D:28:9B:D2:18
Certificate issuer: /CN=A91894BE/serialNumber=ABE4A5C893F4FCAC72D964468ABE7ADF3E6FC8FE
Certificate serial: 02FB
Authority key identifier: AB:E4:A5:C8:93:F4:FC:AC:72:D9:64:46:8A:BE:7A:DF:3E:6F:C8:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/942BF3C013CA11ED983E350EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:06:29 +0000
ROA not before: Wed 17 Dec 2025 01:20:47 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 24313
IP address blocks: 153.107.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.crl
rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:56:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 763 (0x2fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91894BE, serialNumber=ABE4A5C893F4FCAC72D964468ABE7ADF3E6FC8FE
Validity
Not Before: Dec 17 01:20:47 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a42bc5-3c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b0:8e:94:b0:d8:59:0a:40:13:74:1b:81:fc:
4b:f1:d5:c1:8d:7d:d7:24:44:1d:d4:82:1c:7a:c4:
a1:c2:31:27:82:42:23:36:09:ba:f9:80:6e:03:70:
ba:12:77:12:3b:93:d4:e3:31:46:44:25:6f:42:82:
68:e5:da:32:5c:08:89:2c:ca:59:ca:d1:dc:8a:e5:
6e:c6:0e:5d:d1:b9:43:34:29:19:0e:d9:84:0e:96:
1a:ed:fc:54:95:7c:9c:a8:1e:ef:6b:15:d1:f8:dd:
7e:a4:78:27:d0:89:e8:09:ac:78:70:eb:47:5c:0a:
5c:e8:ca:6e:ba:e7:aa:53:7b:97:e0:f4:29:aa:c6:
c8:0a:0f:52:86:9b:a9:8c:07:7f:f2:8d:d5:6d:cf:
d7:0e:4c:ae:4b:e8:aa:41:5b:be:34:d0:40:51:72:
e6:1f:8c:b9:2b:c5:1b:d3:96:09:c6:bd:3d:82:89:
5f:8b:b7:bd:7e:2c:ab:e4:79:4a:5f:3a:b0:d6:98:
84:c6:80:63:fd:9c:02:eb:6e:1f:f7:f8:dc:5e:6c:
53:ed:0d:b7:af:c0:a6:9b:75:38:90:5e:2c:8b:be:
ef:2e:de:69:98:b4:ae:f1:e7:0b:3a:2f:77:35:b6:
3a:af:6b:5f:1f:c2:49:e7:4d:b3:d7:24:92:ab:e1:
b6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:25:4F:E2:6E:F2:1B:3C:43:2D:F3:D3:72:E1:4D:3D:28:9B:D2:18
X509v3 Authority Key Identifier:
keyid:AB:E4:A5:C8:93:F4:FC:AC:72:D9:64:46:8A:BE:7A:DF:3E:6F:C8:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/942BF3C013CA11ED983E350EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
153.107.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8d:9a:cf:91:46:fc:0e:05:2c:8f:01:a0:5d:76:fa:ce:06:9d:
7e:aa:1d:a0:ba:80:17:5c:ef:17:50:05:95:29:8e:62:ac:14:
58:29:0e:10:48:e2:56:d8:0c:4d:d6:b7:e5:45:20:f0:cd:e3:
c1:77:56:07:99:9e:5c:1a:81:0b:9b:9e:1a:26:9b:93:83:bb:
d3:15:28:70:31:28:6b:ed:e9:d0:8b:d5:95:fb:11:25:68:ad:
61:70:93:42:27:0d:f2:12:42:91:05:d6:11:41:23:e8:cf:77:
b1:ed:fe:76:ad:0f:f6:a4:e4:c4:74:ac:19:6c:39:a9:ba:3e:
d9:b6:2f:45:1b:8d:92:1a:9b:ea:b1:6d:4f:48:63:c6:69:8c:
03:15:d8:59:37:bb:8f:32:ab:56:6b:a2:d0:d3:3f:a4:61:1c:
a7:7f:ce:6b:4f:b2:a0:9d:11:4f:f3:0b:68:40:50:a0:c4:94:
6c:84:e9:e0:ea:72:a7:81:ed:ee:17:96:eb:d1:04:56:cd:ad:
b0:27:58:f2:a2:74:13:12:e2:fa:28:19:08:51:74:95:6c:c8:
54:ea:d9:7f:bd:6d:7b:9d:fc:b8:51:c9:ba:23:9d:39:34:48:
80:34:62:e1:0d:f0:b0:20:d4:89:5e:97:15:51:4f:6d:35:3b:
a8:e2:18:15
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:29:09 2026 by rpki-client