
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/8B10B888061111F18D858310203D8C67.roa
File: 8B10B888061111F18D858310203D8C67.roa (raw, json)
Hash identifier: tOl6umKX3unrAEmRMF9DGSQuWUSsAqCraLPKeYMTquU=
Subject key identifier: 76:A6:D6:B7:22:F0:A8:76:95:96:4B:D9:51:8A:5F:FD:15:3D:BE:4B
Certificate issuer: /CN=A91A3AD9/serialNumber=A739387478C8AD9DD5D19553AB4B1DEEF1A961FF
Certificate serial: 19
Authority key identifier: A7:39:38:74:78:C8:AD:9D:D5:D1:95:53:AB:4B:1D:EE:F1:A9:61:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/8B10B888061111F18D858310203D8C67.roa
Signing time: Sun 01 Mar 2026 05:41:59 +0000
ROA not before: Mon 09 Feb 2026 23:46:24 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 149440
IP address blocks: 223.165.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl
rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:28:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3AD9, serialNumber=A739387478C8AD9DD5D19553AB4B1DEEF1A961FF
Validity
Not Before: Feb 9 23:46:24 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a3d1a7-a73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3d:05:ef:be:14:40:69:81:f7:1c:2e:99:a7:
33:51:6a:ae:a1:db:2b:3a:f5:8f:f0:6a:2d:e8:d8:
b3:9b:4f:b5:48:db:26:bd:e5:52:bc:e4:1d:3b:5b:
ec:20:03:f9:ee:e5:9c:47:01:07:ec:7e:f2:67:c0:
08:8f:d1:b9:fd:08:b7:7c:ba:c3:56:66:33:f8:20:
3a:b3:aa:19:c0:94:80:fa:67:49:4a:e7:a1:a3:3d:
59:06:88:f7:68:2a:94:b9:ce:95:40:52:dc:e1:0f:
a2:6c:4d:fb:de:e3:d9:48:87:1e:7d:a7:bd:4f:dd:
98:1d:af:aa:ea:df:38:d6:37:17:a9:63:ad:1a:fd:
66:4b:48:82:30:b0:7d:99:1f:72:4d:47:5d:bc:b5:
6e:48:08:8a:db:c3:cc:92:91:28:c7:a8:02:6d:77:
a6:b1:1b:05:fb:2f:85:67:0f:3f:84:72:d8:2f:bf:
02:ae:b5:bc:4a:2d:f7:70:8b:7b:59:50:69:e0:35:
28:25:10:10:52:6a:d2:15:e6:5d:b2:7e:4b:97:08:
b2:14:84:4f:02:0d:88:1f:1d:79:ce:43:9c:df:31:
56:19:7e:e7:79:13:c6:f8:2a:02:c9:0f:85:da:22:
b2:ac:f2:91:34:bd:94:c4:28:34:81:13:09:04:b4:
ee:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A6:D6:B7:22:F0:A8:76:95:96:4B:D9:51:8A:5F:FD:15:3D:BE:4B
X509v3 Authority Key Identifier:
keyid:A7:39:38:74:78:C8:AD:9D:D5:D1:95:53:AB:4B:1D:EE:F1:A9:61:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/8B10B888061111F18D858310203D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
223.165.6.0/24
Signature Algorithm: sha256WithRSAEncryption
00:f3:f8:72:2a:ca:9d:02:c5:e2:5c:7d:df:6a:07:8c:bd:f2:
d8:a1:a1:35:84:72:ab:02:03:6f:ab:7e:45:11:a9:1c:b6:9f:
0f:8e:aa:84:a5:b2:bd:6e:0a:57:76:85:6c:42:8e:e0:7d:d4:
49:15:f6:4c:a2:b4:87:c3:e0:43:6f:69:0f:90:7a:3d:63:27:
59:26:e3:37:56:fb:65:de:4c:42:81:a8:d4:7b:78:f3:27:0e:
3a:b4:c0:d3:fd:85:fe:de:5a:21:31:fb:70:30:1e:2a:f4:1e:
23:cc:9b:08:b6:3d:e1:17:06:df:41:44:1c:60:9c:ae:6f:39:
c0:a8:ca:ee:72:20:9e:06:ad:b8:d2:f6:78:e5:7c:fc:74:19:
43:16:c9:14:d7:f7:50:de:25:b8:35:b7:0d:f7:a2:8f:7e:7c:
47:83:a7:8c:fd:bc:c5:81:ea:44:95:6e:b3:21:b9:50:ea:29:
58:86:3d:f4:88:6e:1b:98:68:72:3c:33:d3:e6:a5:d6:3d:c1:
3e:e2:49:9f:1b:60:6d:d8:87:97:99:51:a4:48:32:85:c0:e4:
cf:4b:0d:d4:74:37:40:97:79:08:45:f7:52:92:c9:ea:ef:65:
2e:10:30:e1:e4:18:4d:1b:6f:ca:1d:9f:ea:b7:a8:79:9f:47:
d3:1d:bb:72
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:04:45 2026 by rpki-client