
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/D6672BEE0BD111ECB2E9C868C4F9AE02.roa
File: D6672BEE0BD111ECB2E9C868C4F9AE02.roa (raw, json)
Hash identifier: VroGJygKLBjQNkDiUE3DzWiyxIeS84Ur+QvbCD7WMn0=
Subject key identifier: 05:31:66:9A:A2:09:29:59:FD:01:B2:65:1E:1A:73:77:5C:B1:30:61
Certificate issuer: /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial: 37D4
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/D6672BEE0BD111ECB2E9C868C4F9AE02.roa
Signing time: Thu 16 Apr 2026 15:14:29 +0000
ROA not before: Thu 16 Apr 2026 15:14:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140499
IP address blocks: 119.152.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:15:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14292 (0x37d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Validity
Not Before: Apr 16 15:14:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69e0fcd5-ea4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:47:ff:fc:29:0b:eb:47:a4:fd:96:53:cb:4e:
06:39:f8:66:c6:94:3f:71:f0:31:6a:11:6b:ec:0a:
1f:54:fb:e3:ca:10:bf:dd:f4:d9:9d:83:a1:1a:46:
64:00:68:7f:6a:0a:8c:7d:a7:47:8d:84:15:11:f4:
21:d6:ac:8e:3f:e0:7c:34:d7:98:7c:59:5f:9a:af:
52:6a:bb:90:e2:97:60:7a:5d:ee:52:ca:ba:a8:0c:
79:8c:73:80:dc:c6:d3:97:2f:10:bc:41:13:c5:0b:
43:1a:73:4b:0c:0c:59:3c:e9:36:f8:29:a8:af:c2:
1f:f2:77:ab:2f:9a:74:53:c8:33:bc:f5:f7:3e:54:
55:60:fc:ff:11:b9:1c:b6:39:cf:aa:c4:78:23:01:
a0:70:0f:b7:09:02:16:c4:7d:34:0e:3f:f0:09:d3:
3f:0b:e9:0e:6c:11:1e:59:ed:6e:b9:d1:f3:e4:c7:
17:4b:c5:18:cb:4b:fe:b3:44:29:2c:52:d3:50:bb:
50:a3:61:ff:fc:3b:78:7b:19:57:6c:da:37:e7:51:
78:5c:41:05:7a:de:72:78:8e:af:fb:04:e7:ff:1b:
20:e5:a2:1f:d3:d9:c7:c9:7c:98:9d:8c:96:15:3a:
a5:4c:7f:ba:bf:41:fd:bf:de:0a:34:b8:ff:41:36:
e5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:31:66:9A:A2:09:29:59:FD:01:B2:65:1E:1A:73:77:5C:B1:30:61
X509v3 Authority Key Identifier:
keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/D6672BEE0BD111ECB2E9C868C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
119.152.126.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:07:22:85:4b:be:1c:b4:17:07:7f:66:1f:34:7a:de:09:63:
59:1e:c1:fd:75:06:59:6f:99:1a:04:4a:0d:8f:4d:3c:be:ff:
18:9f:80:0c:99:a3:3b:b3:27:a1:55:85:f8:0e:36:11:a0:6d:
a0:8d:93:dc:00:95:4c:a4:13:c3:d8:9d:29:45:cc:0e:b0:7e:
78:7c:ad:af:31:02:fd:76:9c:a6:d2:e6:fd:c6:b1:7b:f0:97:
52:b5:7a:a7:44:af:74:b7:3a:4e:6a:64:73:ab:51:dd:a2:3a:
bc:60:9e:57:7e:6a:49:82:83:1e:d1:2a:68:c4:f4:d7:be:b9:
4f:50:76:93:c6:b9:4d:13:1c:ed:2b:58:a7:48:23:49:08:6e:
f7:b9:57:e7:8c:d7:ca:66:fa:c0:4d:5e:2f:0d:b5:aa:f8:4b:
6e:6e:84:4c:54:d7:30:7a:f9:a2:45:f1:98:80:5c:bd:39:68:
9f:52:e9:fd:76:c8:e2:be:c6:ff:46:78:45:25:49:59:93:5d:
9c:48:70:fd:b6:c8:fb:2a:fa:85:3a:59:5e:5f:92:25:16:ed:
72:56:af:46:dd:71:5a:42:77:82:ce:80:3c:90:85:ac:c2:da:
fd:3e:ba:87:75:9b:ab:a1:04:e3:b7:a8:c5:c8:b7:b2:af:8f:
d0:b7:20:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:22:14 2026 by rpki-client