
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1762/9750A1A6A5E111F1A1CF85683911F970/6220E2A0A5E311F18F4907A63911F970.roa
File: 6220E2A0A5E311F18F4907A63911F970.roa (raw, json)
Hash identifier: 2D1+7YOXpocTI5Apx47pkTX7efEesqW2lQh2T1rb6Us=
Subject key identifier: 6B:73:9F:A1:52:9E:47:EA:70:4C:8C:88:4D:60:E6:86:36:D5:BD:E8
Certificate issuer: /CN=A91A1762/serialNumber=45DB9EEA2EF893AFFC33343A2320D9FCB1108E88
Certificate serial: 02
Authority key identifier: 45:DB:9E:EA:2E:F8:93:AF:FC:33:34:3A:23:20:D9:FC:B1:10:8E:88
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Rdue6i74k6_8MzQ6IyDZ_LEQjog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1762/9750A1A6A5E111F1A1CF85683911F970/6220E2A0A5E311F18F4907A63911F970.roa
Signing time: Tue 01 Sep 2026 08:59:05 +0000
ROA not before: Tue 01 Sep 2026 08:59:05 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 4605
IP address blocks: 158.182.0.0/16 maxlen: 16
158.182.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1762/9750A1A6A5E111F1A1CF85683911F970/Rdue6i74k6_8MzQ6IyDZ_LEQjog.crl
rsync://rpki.apnic.net/member_repository/A91A1762/9750A1A6A5E111F1A1CF85683911F970/Rdue6i74k6_8MzQ6IyDZ_LEQjog.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Rdue6i74k6_8MzQ6IyDZ_LEQjog.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1762, serialNumber=45DB9EEA2EF893AFFC33343A2320D9FCB1108E88
Validity
Not Before: Sep 1 08:59:05 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a9693d9-9a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d0:c2:76:16:c4:89:0d:ca:c1:05:2e:4a:d8:
98:9e:59:78:d8:69:ea:c3:95:0d:0b:db:31:c6:92:
8d:99:a2:b8:e2:9d:88:ae:cd:95:58:5f:5e:66:2a:
8a:47:97:15:df:e7:4a:df:a5:42:f6:b8:7a:95:84:
f6:37:2e:35:41:e6:b4:9e:6f:9b:68:ac:fa:39:60:
0b:87:ea:c6:bb:f5:16:51:7a:2b:58:0c:7b:0e:77:
7b:72:91:5c:c3:6b:16:44:09:29:53:b6:37:c0:d9:
80:8b:a0:27:8a:90:36:ae:f5:76:1a:e6:6e:42:e3:
a8:09:23:76:80:f1:d6:c9:1d:52:56:07:89:45:9a:
45:d5:bf:c3:f6:57:76:12:ad:87:31:53:db:8c:07:
9b:b3:98:48:10:9d:6f:bb:d2:51:d2:ec:28:03:39:
a0:36:ac:38:49:b0:a1:73:04:ad:33:b6:7a:3a:77:
c7:e0:33:1d:90:45:5b:26:36:cd:74:d3:3a:08:3f:
c4:55:87:ac:31:22:d0:53:1c:56:7b:41:c1:ed:06:
ba:21:bc:dd:43:b6:53:d7:41:56:27:02:d2:05:7c:
28:8b:e3:d7:ea:59:12:bb:1f:af:2d:af:15:8f:8a:
b2:57:d8:02:c1:24:25:26:b1:a2:94:3e:eb:b6:d2:
9d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:73:9F:A1:52:9E:47:EA:70:4C:8C:88:4D:60:E6:86:36:D5:BD:E8
X509v3 Authority Key Identifier:
keyid:45:DB:9E:EA:2E:F8:93:AF:FC:33:34:3A:23:20:D9:FC:B1:10:8E:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1762/9750A1A6A5E111F1A1CF85683911F970/Rdue6i74k6_8MzQ6IyDZ_LEQjog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Rdue6i74k6_8MzQ6IyDZ_LEQjog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1762/9750A1A6A5E111F1A1CF85683911F970/6220E2A0A5E311F18F4907A63911F970.roa
sbgp-ipAddrBlock: critical
IPv4:
158.182.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9e:2a:7c:e2:69:e6:eb:6c:fa:65:d9:dc:0d:e4:46:6b:0e:23:
96:e5:e0:c1:8f:77:3b:31:7c:dd:f0:1e:1b:2c:38:bd:27:ac:
6c:69:7e:74:77:9b:8e:73:6c:75:3c:4a:4f:6b:76:93:e2:1b:
82:f5:2a:02:c7:56:03:77:67:9f:2e:fd:74:80:fc:66:b3:f1:
b7:53:2c:11:0c:49:9f:30:fb:08:84:f0:1c:94:da:a9:e7:6a:
62:db:1e:09:e0:f0:82:27:b8:7f:88:5f:3b:ef:28:b1:bd:34:
f9:72:06:78:1a:36:94:1a:61:b6:08:18:26:fc:84:a1:a9:9d:
01:79:dc:23:29:39:14:4f:a0:33:1f:10:f0:79:fb:a3:7f:5c:
04:ba:03:72:d8:d1:36:0d:9c:c8:15:46:df:32:3e:4e:64:9d:
99:f8:a9:cc:55:42:19:25:9f:ca:c5:0a:36:fe:3c:1b:32:66:
14:cf:a9:3f:ab:80:4e:cb:ea:ce:35:f3:63:d6:7c:bd:97:c9:
11:b0:dc:f4:97:67:4b:d8:5a:c1:46:c8:43:1c:8b:11:2e:82:
2b:10:51:7b:78:1d:c1:bb:8c:7f:9c:0f:14:5a:96:ab:8f:a2:
45:50:4d:f7:ec:0a:ce:de:a5:a1:89:bd:e7:8b:8f:3d:b3:a9:
5a:9f:4f:14
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Sep 20 10:55:35 2026 by rpki-client