
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/B2A566E2CB9B11F0A4EC673AC4F9AE02.roa
File: B2A566E2CB9B11F0A4EC673AC4F9AE02.roa (raw, json)
Hash identifier: IfHqfPuuN3I7BqsHVQ/rF6LxoZBDe7oRliH9Hyof7OI=
Subject key identifier: 6F:67:DC:5F:B8:93:B0:7C:B4:DB:DC:92:1E:F1:0A:60:39:46:D0:49
Certificate issuer: /CN=A91A4ACD/serialNumber=736EF357EF23F33EAC07B274EA5E3FEC0DFEE58A
Certificate serial: 34
Authority key identifier: 73:6E:F3:57:EF:23:F3:3E:AC:07:B2:74:EA:5E:3F:EC:0D:FE:E5:8A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c27zV-8j8z6sB7J06l4_7A3-5Yo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/B2A566E2CB9B11F0A4EC673AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 05:58:55 +0000
ROA not before: Thu 27 Nov 2025 14:16:43 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 154113
IP address blocks: 192.188.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.crl
rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c27zV-8j8z6sB7J06l4_7A3-5Yo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:03:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4ACD, serialNumber=736EF357EF23F33EAC07B274EA5E3FEC0DFEE58A
Validity
Not Before: Nov 27 14:16:43 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a3d59e-f2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b8:6e:4d:2b:df:19:dd:8c:b8:e9:57:e4:bf:
32:ef:54:79:b2:71:d8:29:e9:7b:5e:65:31:fa:52:
33:c8:84:a4:14:b6:74:25:9e:e1:ac:e1:37:05:4b:
4d:85:e3:e4:4a:25:6e:4e:d1:39:70:cd:72:63:ee:
d1:36:74:1a:88:45:f6:c1:e3:b7:19:4f:93:82:5c:
9f:c4:24:79:5a:8c:78:e7:aa:35:0c:86:2f:b4:14:
ac:72:00:41:d0:ee:11:40:74:f8:10:6d:dc:61:04:
0d:68:c6:6d:2d:6d:4d:0b:c9:35:a0:41:f3:c7:52:
de:2c:3d:07:d2:95:28:8d:1b:69:e9:de:08:b8:c4:
51:d9:68:fa:53:65:0b:3a:36:94:96:50:5d:06:a3:
3e:c1:f5:7e:65:73:a3:a1:57:db:aa:97:26:d7:86:
cf:14:3b:62:d7:e1:7d:74:73:4d:c1:8b:f7:bb:fb:
0d:8f:02:7f:e6:ba:16:c5:6e:02:da:02:50:18:37:
15:5a:97:3c:ff:0b:e7:fd:c2:23:38:67:67:36:b7:
11:d9:f0:26:dd:c0:a4:c2:7e:bc:e9:6d:2f:81:a5:
1e:c1:f7:8c:3f:7a:4e:84:31:86:0b:41:8c:34:86:
dc:d9:2f:9f:06:e7:b1:c6:7a:07:5c:33:a2:95:63:
6a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:67:DC:5F:B8:93:B0:7C:B4:DB:DC:92:1E:F1:0A:60:39:46:D0:49
X509v3 Authority Key Identifier:
keyid:73:6E:F3:57:EF:23:F3:3E:AC:07:B2:74:EA:5E:3F:EC:0D:FE:E5:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c27zV-8j8z6sB7J06l4_7A3-5Yo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/B2A566E2CB9B11F0A4EC673AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
192.188.90.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:e5:48:0e:15:ab:8c:33:d8:60:c5:26:eb:ee:60:03:a2:e8:
c7:1a:85:77:62:16:0f:06:bf:3c:1b:ae:4e:ff:c9:59:1c:c3:
5c:c5:a3:bb:12:30:5d:f8:b8:95:78:bf:99:f4:47:62:3e:22:
67:6b:83:bf:a8:f7:43:2e:51:59:3d:04:4c:38:1f:44:4f:ef:
26:62:88:c9:3d:4d:67:7e:a8:6a:b4:c4:fe:f6:4f:0a:98:94:
64:ba:83:3b:b0:da:9a:d9:79:e4:1d:a8:f5:71:31:c8:5e:f2:
37:a5:90:ff:72:d2:73:98:af:91:c1:09:f4:8c:c3:67:df:cb:
12:85:b0:63:d4:d4:f8:ca:de:b4:d0:3c:69:09:27:fe:47:39:
5a:4e:b9:38:19:60:59:28:93:98:c1:4e:eb:ec:81:e5:2f:3d:
8f:22:46:ce:c3:20:34:40:b6:32:9f:67:4a:42:37:dc:8e:46:
f0:1a:04:69:f8:9d:f8:4d:3e:22:dd:80:9d:ed:b5:7d:3b:5c:
0b:58:98:cf:6d:51:5c:87:c2:a6:9f:fd:49:8f:20:86:d7:e9:
bd:a8:f5:60:42:7b:17:df:0d:f2:6f:4c:bb:6c:d7:f3:5e:96:
eb:2b:c5:70:bc:c4:4b:71:71:83:1b:f9:aa:e5:04:b9:c5:9d:
85:4f:bb:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:23:53 2026 by rpki-client