
$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/926A40AC205E11F0A7552513C4F9AE02.roa
File: 926A40AC205E11F0A7552513C4F9AE02.roa (raw, json)
Hash identifier: YKiXx5HCj2zwN3jfK9q5GakLYQcoFw4kl98GWbjUs9o=
Subject key identifier: 89:D2:16:FE:FC:4F:A0:76:41:FC:AB:AE:03:9B:39:12:B4:47:07:91
Certificate issuer: /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
Certificate serial: 0233
Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/926A40AC205E11F0A7552513C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:22:52 +0000
ROA not before: Tue 16 Dec 2025 16:40:56 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 202736
IP address blocks: 185.254.242.0/24 maxlen: 24
213.139.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl
rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 563 (0x233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91991D3, serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
Validity
Not Before: Dec 16 16:40:56 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a483fc-a7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f2:7f:41:e0:93:3b:8e:36:3d:2b:62:73:dc:
32:46:9e:5d:67:7a:1f:3a:a6:53:a0:a9:48:6a:42:
17:40:76:c4:3e:5d:1f:96:f5:98:4b:d6:c2:7a:1f:
c6:2f:f3:fe:bb:65:c6:b1:3e:ba:6c:3c:96:2b:e4:
af:c2:54:24:97:17:fc:6a:96:87:0a:14:8d:38:4b:
38:fd:d3:12:db:0e:9b:d4:25:c4:5f:17:74:e6:42:
ed:31:b8:3a:8e:85:47:b7:87:a3:ac:ad:4b:22:11:
6c:42:a7:4f:63:af:a5:36:8c:f0:f8:c9:8f:18:c3:
53:06:dd:e1:b7:a5:9d:44:0e:19:76:23:26:66:77:
ca:29:fa:a5:7d:29:9c:99:13:93:5b:5c:11:1b:78:
db:98:c3:11:81:0c:b0:44:d6:45:94:0e:cc:97:06:
7b:dd:d7:db:22:35:4a:c3:bc:70:c3:2e:4f:66:f0:
b9:e7:53:0b:18:78:0a:72:86:94:9a:2d:69:b4:ac:
45:55:dc:3f:14:6c:e5:ea:9c:68:21:20:03:a7:ad:
c9:3e:11:90:f2:25:02:c1:1c:4f:ff:c6:14:e3:b8:
bb:94:b6:2e:1e:2b:a7:dd:d9:34:3b:3f:4c:95:f8:
e8:8d:b6:dc:e1:ff:0d:d0:74:e2:9b:bb:b6:06:b3:
f2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D2:16:FE:FC:4F:A0:76:41:FC:AB:AE:03:9B:39:12:B4:47:07:91
X509v3 Authority Key Identifier:
keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/926A40AC205E11F0A7552513C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
185.254.242.0/24
213.139.232.0/24
Signature Algorithm: sha256WithRSAEncryption
95:80:8c:48:8b:23:2d:39:89:51:d8:36:60:1a:9b:33:cb:80:
8c:65:8c:ca:5a:2d:d3:82:c0:08:5d:5c:47:91:c0:fc:36:f2:
75:e5:ef:0a:ff:c7:36:59:3a:7a:bf:24:66:c1:5e:8e:57:ff:
fb:86:0f:7a:33:17:2a:11:89:b7:46:66:9a:41:0b:74:6c:12:
c1:cf:1a:8a:c4:44:1a:9c:9e:8d:02:a6:7f:c5:10:70:05:49:
83:70:7c:90:ab:db:e7:4d:71:7d:8a:df:79:f9:71:1d:0c:ed:
85:7b:80:4a:6e:7f:35:16:e9:00:17:ea:fb:66:fd:58:63:dd:
e3:76:76:0d:f6:20:bd:d3:cc:1f:45:f0:e0:f1:7f:fa:d7:b0:
72:d9:51:6f:56:36:d4:7c:f4:c5:c9:4f:8f:53:e2:00:b8:e8:
ff:d8:de:dd:e1:df:94:db:5f:80:60:18:05:89:8c:f8:d7:b6:
f6:55:78:51:cd:fd:33:9c:c2:76:64:60:3a:07:d0:51:95:b2:
8e:5f:a1:e9:c9:94:1a:42:02:f6:e3:83:b1:03:bc:0e:f6:73:
24:44:b1:55:d9:c4:68:e2:9a:d8:23:0c:52:b3:76:00:50:54:
ca:54:a8:75:2a:c8:74:c3:3e:e4:c1:e5:4f:5d:21:3c:ef:4c:
68:b7:31:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:46 2026 by rpki-client