
$ rpki-client -vvf rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/04A3F314E94211F095EE60383C6F56BC.roa
File: 04A3F314E94211F095EE60383C6F56BC.roa (raw, json)
Hash identifier: E/pMPjrg0dCjAeEdBiXHBrQ/2l6q/HpNWw3HPIwPnM0=
Subject key identifier: B6:09:A6:D1:F9:D9:2D:7D:03:82:18:25:E9:A8:DD:5E:22:72:F4:56
Certificate issuer: /CN=A91918AB/serialNumber=662EC9A2B7B6CE42D23A5238534C657622325372
Certificate serial: 22
Authority key identifier: 66:2E:C9:A2:B7:B6:CE:42:D2:3A:52:38:53:4C:65:76:22:32:53:72
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/04A3F314E94211F095EE60383C6F56BC.roa
Signing time: Sun 01 Mar 2026 05:47:49 +0000
ROA not before: Sun 04 Jan 2026 07:50:20 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 142168
IP address blocks: 198.56.24.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.crl
rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:19:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91918AB, serialNumber=662EC9A2B7B6CE42D23A5238534C657622325372
Validity
Not Before: Jan 4 07:50:20 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a3d305-e47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:70:ed:31:84:5b:da:57:a7:93:8f:45:7a:12:
72:24:c7:f2:7a:a0:32:ea:93:ba:a3:87:ba:41:50:
86:99:69:3d:e0:b4:cd:c1:05:0a:06:0f:f6:f2:e3:
7c:8e:e7:71:1e:41:62:85:69:3b:d4:db:58:c2:a9:
ab:97:f0:3c:44:7a:a6:90:87:a2:43:5d:41:2c:5c:
65:67:f9:ca:61:fc:dd:3c:8e:f3:e1:f9:14:ca:a5:
5d:68:9e:8d:c6:d4:24:8e:30:9a:13:67:91:df:45:
1e:5d:7b:6b:11:02:e6:74:66:16:2e:27:b3:41:c8:
78:45:32:a5:5d:09:0b:ec:67:70:2b:ee:a2:58:41:
39:05:30:9e:a0:e6:11:c8:99:c8:ce:40:9f:ae:30:
1c:a7:05:4f:74:ee:46:c8:7e:e1:72:37:9f:2b:d3:
6c:ba:38:86:8c:04:41:24:b3:e3:05:6b:be:9e:ed:
7d:66:a7:82:29:a7:59:a2:95:b1:89:67:e8:06:77:
6b:92:c8:f5:ff:c1:b0:90:bd:5f:6a:c5:59:6d:79:
59:f6:7d:d1:f7:0b:91:e7:31:ad:08:07:7f:87:34:
fa:62:2c:6f:c8:7c:be:1f:c7:71:ca:33:a0:81:5a:
c3:cd:a6:d3:26:82:a1:6a:42:23:90:6e:87:bf:a0:
1a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:09:A6:D1:F9:D9:2D:7D:03:82:18:25:E9:A8:DD:5E:22:72:F4:56
X509v3 Authority Key Identifier:
keyid:66:2E:C9:A2:B7:B6:CE:42:D2:3A:52:38:53:4C:65:76:22:32:53:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/04A3F314E94211F095EE60383C6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
198.56.24.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:34:62:63:48:7a:43:99:48:bc:29:ed:79:c8:b7:41:69:04:
39:80:eb:eb:d8:02:45:50:96:be:5c:70:11:23:dd:f4:a7:1e:
e6:be:9b:09:19:5c:c9:8e:2f:e2:16:63:11:05:a7:3f:63:95:
7e:31:58:4c:31:a3:94:0c:15:d4:4c:63:ab:9e:05:2b:79:5c:
bb:6d:fc:52:c4:ff:9b:09:33:61:55:56:7e:35:68:99:b6:dc:
46:3b:c1:02:24:d9:ab:d6:8f:51:c7:14:f2:09:32:9c:37:dc:
f3:ff:73:90:f2:76:3f:4d:16:03:64:ae:00:a7:1d:08:b4:c5:
23:32:8d:42:04:83:b6:b7:c4:57:e4:32:2a:2a:aa:24:41:30:
b8:87:26:9b:b5:8a:26:fc:de:39:50:49:88:9d:7e:63:63:81:
ec:a2:59:f7:86:cc:6a:dc:f3:da:de:ee:80:3a:82:e0:8b:28:
33:bd:de:00:e5:67:c4:02:84:57:6b:c3:b9:2a:97:d3:90:7b:
99:81:99:ac:d4:e4:25:d2:3f:fd:49:c2:01:32:61:bf:ce:6e:
c7:dd:a2:37:32:35:39:f7:15:10:27:48:5c:64:17:c1:8a:30:
fe:37:8b:46:78:28:6b:65:fb:86:2b:07:0d:ea:db:8b:ce:b2:
c4:af:6f:30
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:29:36 2026 by rpki-client