
$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/11BAFC08E09911EAB8D3B833C4F9AE02.roa
File: 11BAFC08E09911EAB8D3B833C4F9AE02.roa (raw, json)
Hash identifier: ZCk+fEsQHe2jlnBNkTm2b7TPnu7HbyKCFYwP585vSWU=
Subject key identifier: 08:42:16:04:8B:76:4A:8E:E2:AF:EF:F1:7E:1D:5F:BA:2A:25:1C:1A
Certificate issuer: /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Certificate serial: 3146
Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/11BAFC08E09911EAB8D3B833C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:54:12 +0000
ROA not before: Wed 30 Apr 2025 15:52:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 17451
IP address blocks: 180.87.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12614 (0x3146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Validity
Not Before: Apr 30 15:52:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a47d44-8627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:62:1b:e0:75:b3:9f:c6:8f:98:76:8c:26:df:
e8:bb:a2:fd:90:97:4b:36:dd:dc:5f:b7:55:69:aa:
0f:5a:17:3b:83:7b:a8:1f:11:71:a0:d4:9b:a6:a8:
25:71:85:2e:76:31:8b:ed:03:20:82:82:be:bb:58:
76:db:56:cb:cb:ce:30:6d:74:fc:3f:1a:84:f6:27:
e6:a5:72:67:fb:3f:ce:8c:98:a0:6c:67:b2:b3:ff:
db:40:6e:28:95:40:52:aa:59:c9:8e:c0:ae:3e:d7:
9c:92:16:99:62:0c:e6:be:c5:59:af:66:44:93:4d:
cc:3d:8f:12:2c:5e:59:89:80:77:84:7d:f9:4a:29:
e1:e4:f3:05:70:83:88:df:e3:f9:48:32:cd:b3:e4:
3b:f1:a1:7a:c0:cf:b3:39:6d:d7:db:bb:53:8c:67:
be:7a:e7:98:33:40:7c:70:00:6c:41:3c:44:99:02:
69:67:ac:06:75:a9:d6:b0:d1:c9:20:f8:04:14:8a:
64:29:fd:84:b3:3f:84:5a:3c:26:5e:6e:7f:8f:52:
22:11:54:f1:00:aa:44:83:16:d8:9e:56:82:70:5d:
78:69:ce:d7:c3:5e:36:f6:07:1f:89:85:c2:ea:43:
a2:a1:6d:19:2b:e2:bb:42:23:73:7a:af:b8:25:f6:
72:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:42:16:04:8B:76:4A:8E:E2:AF:EF:F1:7E:1D:5F:BA:2A:25:1C:1A
X509v3 Authority Key Identifier:
keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/11BAFC08E09911EAB8D3B833C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
180.87.86.0/24
Signature Algorithm: sha256WithRSAEncryption
36:60:4d:12:2e:57:b2:1c:40:3c:da:2e:c9:65:65:e1:e7:38:
83:ca:2d:96:ed:08:87:a1:65:74:bc:5f:d8:f5:7e:fb:f6:2d:
f6:38:d5:e7:47:d2:f6:83:1b:d4:1a:cb:a4:fe:eb:15:d5:95:
f4:d2:2d:4e:46:a3:cd:b0:b2:59:39:bd:d9:6e:bd:46:fe:79:
31:e5:0a:2e:53:e0:81:05:3f:cd:a0:39:5e:9c:11:40:3f:5e:
d3:3f:57:19:11:33:d4:0f:88:d7:15:81:59:a9:59:72:e1:6f:
66:f0:31:77:8f:f3:5f:4d:38:8d:e7:84:85:c5:00:66:a4:23:
ab:45:2e:08:76:c8:9b:ff:4d:c0:9b:39:c1:00:fe:a1:54:99:
b1:3e:b5:d7:3b:41:90:c8:d3:73:05:c4:a4:19:01:33:c9:39:
5d:81:d2:ec:02:f8:6a:18:51:29:46:a1:66:41:19:b3:68:c9:
ab:7b:e9:16:63:18:f1:78:43:8f:f0:d2:56:1a:7b:8a:8a:d7:
eb:cb:78:17:41:1e:48:2d:6c:83:82:4f:c3:23:aa:ae:f6:74:
6a:29:34:c0:92:69:66:b1:4d:fb:06:a8:ad:1b:bb:50:fe:c4:
7c:56:f4:a7:b4:fb:54:57:d3:b0:29:12:1f:4b:f3:57:76:21:
70:cd:43:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:36 2026 by rpki-client