
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/932C5CF28B2C11F1938379423E11F970.roa
File: 932C5CF28B2C11F1938379423E11F970.roa (raw, json)
Hash identifier: 6x4zg3RShZkV+0VjijXtAsRZy4Cy68u6hzwg44RyXgo=
Subject key identifier: 14:C7:0E:89:C8:F6:2A:18:E2:81:CA:A2:C1:AC:36:66:A9:BE:5F:33
Certificate issuer: /CN=A919EAF3/serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D
Certificate serial: 1A98
Authority key identifier: 29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/932C5CF28B2C11F1938379423E11F970.roa
Signing time: Wed 29 Jul 2026 09:04:59 +0000
ROA not before: Wed 29 Jul 2026 09:04:59 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 149315
IP address blocks: 66.150.244.0/24 maxlen: 24
66.150.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl
rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 08:32:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6808 (0x1a98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EAF3, serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D
Validity
Not Before: Jul 29 09:04:59 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a69c23b-b3ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ad:65:6f:39:fa:eb:52:8d:80:fa:4d:05:29:
d2:02:88:47:0f:77:c3:7f:53:48:ec:ff:c9:80:e9:
aa:1c:ef:46:05:b6:95:0a:81:f2:1f:89:38:85:c0:
90:15:a1:f7:7c:9f:9c:b7:3d:83:39:d2:3a:8e:d4:
b0:38:2b:98:be:b7:ee:28:ca:bb:d2:34:93:f0:b8:
54:55:f3:e5:dc:03:b7:ce:0c:94:84:ad:82:c3:78:
54:d5:14:29:1c:0c:c2:40:c8:52:be:48:07:4f:07:
dc:b6:9a:c9:c9:a6:f3:d7:4b:de:ff:b4:eb:2b:b3:
a7:6f:9e:8e:f0:fb:b3:47:87:f3:7c:81:f6:62:48:
02:4f:54:db:2a:a9:08:b3:2b:ff:d8:da:56:77:81:
f6:bb:c9:73:05:38:38:32:98:8f:e2:3e:fb:2b:03:
07:bf:3a:fb:4d:39:e0:e6:a0:9b:fa:ba:5c:f2:bb:
0d:52:4a:e6:35:45:2f:46:5a:ca:a9:b1:67:96:88:
87:6b:d6:1b:2b:7a:33:e8:78:6c:c8:fd:44:a2:c7:
99:1f:e4:b2:0b:21:0c:8e:3f:32:7d:e3:07:cc:d0:
31:73:1e:72:81:ea:0e:00:a9:3e:ab:a8:bc:0c:4d:
e3:5d:dd:54:0e:a8:c5:16:f3:6b:4a:0b:b6:32:7b:
0e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C7:0E:89:C8:F6:2A:18:E2:81:CA:A2:C1:AC:36:66:A9:BE:5F:33
X509v3 Authority Key Identifier:
keyid:29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/932C5CF28B2C11F1938379423E11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
66.150.244.0/23
Signature Algorithm: sha256WithRSAEncryption
c5:74:b4:6b:d7:4a:23:ae:7b:a4:a2:76:ad:a2:d5:3e:96:db:
5f:de:83:14:99:d0:3a:53:d7:d5:51:a4:f8:a7:93:17:14:6d:
26:34:96:2c:59:59:3e:0e:51:0d:d9:72:3d:28:12:57:d0:c9:
6e:3a:03:8b:89:bd:ac:d8:1e:d8:f3:1f:2d:c1:24:40:5d:ef:
92:00:02:af:e8:b9:e7:6c:ae:b2:8f:d6:c8:ff:ff:79:26:2a:
d5:5e:90:b8:f2:ec:d9:a5:17:97:ab:f5:35:cc:8d:3d:36:58:
88:ed:1a:d1:2a:72:bf:77:30:94:dc:36:8d:39:19:99:74:b8:
1f:d0:d6:98:d7:ea:80:03:3f:d9:78:62:b5:45:4b:2a:74:05:
31:39:cc:a6:a2:20:84:fe:66:20:dc:9f:2f:09:0c:24:be:0d:
9d:e9:60:6c:86:c3:af:90:37:6e:d7:99:fc:7c:96:41:ad:bf:
cc:20:32:ee:8a:fc:dd:99:60:30:ef:07:ad:59:b1:9c:79:54:
e7:21:94:78:b4:c5:d0:8d:06:89:20:30:7b:35:b6:19:68:98:
a0:cf:b4:84:d6:41:e7:fe:f3:28:d7:e5:26:5a:be:ae:0f:c3:
ad:89:26:2e:0e:e3:0d:ca:aa:e3:e8:6d:1f:e1:77:3a:21:6f:
ca:7b:38:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:07:39 2026 by rpki-client