
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0807/FF0A52F4CCBD11F0840DDC22C4F9AE02/507C7202CCBE11F0AAAC3C24C4F9AE02.roa
File: 507C7202CCBE11F0AAAC3C24C4F9AE02.roa (raw, json)
Hash identifier: 32SWwd/uA3kg1otVJJYx1D2OTVjSQSkyd9lnzIXFPaQ=
Subject key identifier: EA:FB:2A:0B:69:EF:5B:14:F7:E1:AB:47:BF:03:06:09:85:94:C5:76
Certificate issuer: /CN=A91A0807/serialNumber=116FF82AAC9D77F6FF216368F4034600F0B3418F
Certificate serial: 32
Authority key identifier: 11:6F:F8:2A:AC:9D:77:F6:FF:21:63:68:F4:03:46:00:F0:B3:41:8F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW_4Kqydd_b_IWNo9ANGAPCzQY8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0807/FF0A52F4CCBD11F0840DDC22C4F9AE02/507C7202CCBE11F0AAAC3C24C4F9AE02.roa
Signing time: Sun 01 Mar 2026 05:56:52 +0000
ROA not before: Sat 29 Nov 2025 00:57:01 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 154289
IP address blocks: 138.252.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0807/FF0A52F4CCBD11F0840DDC22C4F9AE02/EW_4Kqydd_b_IWNo9ANGAPCzQY8.crl
rsync://rpki.apnic.net/member_repository/A91A0807/FF0A52F4CCBD11F0840DDC22C4F9AE02/EW_4Kqydd_b_IWNo9ANGAPCzQY8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW_4Kqydd_b_IWNo9ANGAPCzQY8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:04:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0807, serialNumber=116FF82AAC9D77F6FF216368F4034600F0B3418F
Validity
Not Before: Nov 29 00:57:01 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a3d524-1666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:b8:87:8e:24:d8:79:b3:b9:bf:6b:43:12:
5f:70:8b:e1:ed:7e:ff:fd:5f:89:5b:77:b7:ab:b5:
1a:d5:ba:7a:94:cd:b9:e4:c2:eb:b5:63:4c:cb:55:
30:56:56:83:e8:ae:c2:16:73:f7:13:21:61:2e:ec:
cf:02:3f:d0:b7:51:a0:ae:f1:26:b0:7f:04:72:b8:
d6:2d:b7:a9:b7:c3:43:1a:4b:a4:1f:64:e6:a7:f4:
26:07:84:77:6b:04:1b:07:90:ea:10:ed:60:4d:df:
97:f5:11:b1:05:c1:56:0d:d8:7d:ec:92:ec:e7:9c:
3e:63:07:d8:d9:6c:49:bf:31:cb:79:0e:43:df:51:
a6:d6:67:ad:49:5a:a2:06:a0:8a:89:9b:fe:7f:e5:
58:40:fc:7b:fe:a3:f1:8c:f5:88:41:b5:1e:81:96:
6c:8e:a8:2c:29:4a:04:4b:9f:60:d3:e1:ee:2c:e4:
4b:e2:38:42:68:50:28:f0:e3:9f:5b:92:47:ab:73:
fc:71:3b:46:67:12:e2:73:04:82:2f:44:dd:90:95:
83:16:49:91:6d:fd:b0:82:84:05:25:2b:07:fd:a5:
16:37:4a:e1:46:3a:88:ed:a9:c1:fc:a3:30:a1:de:
29:80:3d:2c:bd:bd:a5:dc:3e:21:9b:ab:79:b3:07:
ec:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FB:2A:0B:69:EF:5B:14:F7:E1:AB:47:BF:03:06:09:85:94:C5:76
X509v3 Authority Key Identifier:
keyid:11:6F:F8:2A:AC:9D:77:F6:FF:21:63:68:F4:03:46:00:F0:B3:41:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0807/FF0A52F4CCBD11F0840DDC22C4F9AE02/EW_4Kqydd_b_IWNo9ANGAPCzQY8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW_4Kqydd_b_IWNo9ANGAPCzQY8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0807/FF0A52F4CCBD11F0840DDC22C4F9AE02/507C7202CCBE11F0AAAC3C24C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
138.252.24.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:13:8e:b7:a3:7e:dc:1c:27:5e:f4:a8:8b:44:61:fe:45:0e:
f0:f8:14:58:32:75:78:57:9b:19:ed:42:14:cf:ed:8b:6b:c3:
b5:08:de:cf:b8:d6:d1:6b:7b:a4:a9:10:70:84:b0:07:f0:60:
62:00:3f:9b:0b:be:0b:7e:ba:70:b6:b6:d6:8d:30:9c:4e:3f:
89:53:c5:45:29:df:de:7f:83:8c:da:7f:02:57:39:8e:68:da:
af:e6:1f:2b:d4:e6:2b:61:cf:5a:7c:f6:51:8a:c9:c4:bd:9b:
04:d5:7a:e5:93:53:c8:4f:8f:21:0f:d8:a0:be:19:a7:38:f2:
80:28:b7:23:a5:d7:a2:ab:8e:19:1a:7b:69:c5:80:72:3a:2e:
56:ac:7a:85:8c:f2:68:b9:2d:43:95:a0:1c:f6:b4:d6:83:a9:
ec:6a:80:71:5a:fa:0f:36:06:87:a3:62:de:2f:04:cc:56:04:
98:b9:6c:16:5a:db:1d:a2:67:24:71:11:58:84:6a:84:8b:91:
fe:7c:2e:1b:ff:b3:3b:c1:9b:e9:39:76:52:0e:4b:2e:89:66:
91:59:62:59:36:66:de:d3:ed:e5:b8:29:65:75:aa:cb:b7:c1:
90:db:aa:32:79:d8:52:ff:95:cb:99:e1:3a:52:07:e0:ad:4a:
c0:b6:7f:a0
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
MDgwNzExMC8GA1UEBRMoMTE2RkY4MkFBQzlENzdGNkZGMjE2MzY4RjQwMzQ2MDBG
MEIzNDE4RjAeFw0yNTExMjkwMDU3MDFaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNkNTI0LTE2NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2QriHjiTYebO5v2tDEl9wi+Htfv/9X4lbd7ertRrVunqUzbnkwuu1Y0zLVTBW
VoPorsIWc/cTIWEu7M8CP9C3UaCu8SawfwRyuNYtt6m3w0MaS6QfZOan9CYHhHdr
BBsHkOoQ7WBN35f1EbEFwVYN2H3skuznnD5jB9jZbEm/Mct5DkPfUabWZ61JWqIG
oIqJm/5/5VhA/Hv+o/GM9YhBtR6BlmyOqCwpSgRLn2DT4e4s5EviOEJoUCjw459b
kkerc/xxO0ZnEuJzBIIvRN2QlYMWSZFt/bCChAUlKwf9pRY3SuFGOojtqcH8ozCh
3imAPSy9vaXcPiGbq3mzB+wVAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU6vsqC2nv
WxT34atHvwMGCYWUxXYwHwYDVR0jBBgwFoAUEW/4Kqydd/b/IWNo9ANGAPCzQY8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwODA3L0ZGMEE1MkY0Q0NC
RDExRjA4NDBEREMyMkM0RjlBRTAyL0VXXzRLcXlkZF9iX0lXTm85QU5HQVBDelFZ
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvRVdfNEtxeWRkX2JfSVdObzlBTkdBUEN6UVk4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MDgwNy9GRjBBNTJGNENDQkQxMUYwODQwRERDMjJDNEY5QUUwMi81MDdDNzIwMkND
QkUxMUYwQUFBQzNDMjRDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACK/BgwDQYJKoZIhvcNAQELBQADggEBAAsTjrejftwcJ170qItEYf5F
DvD4FFgydXhXmxntQhTP7Ytrw7UI3s+41tFre6SpEHCEsAfwYGIAP5sLvgt+unC2
ttaNMJxOP4lTxUUp395/g4zafwJXOY5o2q/mHyvU5ithz1p89lGKycS9mwTVeuWT
U8hPjyEP2KC+Gac48oAotyOl16Krjhkae2nFgHI6LlaseoWM8mi5LUOVoBz2tNaD
qexqgHFa+g82BoejYt4vBMxWBJi5bBZa2x2iZyRxEViEaoSLkf58Lhv/szvBm+k5
dlIOSy6JZpFZYlk2Zt7T7eW4KWV1qsu3wZDbqjJ52FL/lcuZ4TpSB+CtSsC2f6A=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:27 2026 by rpki-client