
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/1ECF684E387B11F1BDE8C228B8833773.roa
File: 1ECF684E387B11F1BDE8C228B8833773.roa (raw, json)
Hash identifier: S/Tt5Vr+xRIVcH8BCYMOSKSimexAoRp0itqrqHYRHlw=
Subject key identifier: A2:FE:39:12:6C:80:AD:86:6D:00:7C:BF:91:40:BB:3D:A6:80:D4:11
Certificate issuer: /CN=A91A4B9D/serialNumber=3C388E29FAA1A1FEEA38979F206F4668ADA8C89E
Certificate serial: 09
Authority key identifier: 3C:38:8E:29:FA:A1:A1:FE:EA:38:97:9F:20:6F:46:68:AD:A8:C8:9E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDiOKfqhof7qOJefIG9GaK2oyJ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/1ECF684E387B11F1BDE8C228B8833773.roa
Signing time: Wed 15 Apr 2026 03:28:08 +0000
ROA not before: Wed 15 Apr 2026 03:28:08 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 133159
IP address blocks: 66.226.144.0/20 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.crl
rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDiOKfqhof7qOJefIG9GaK2oyJ4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:59:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4B9D, serialNumber=3C388E29FAA1A1FEEA38979F206F4668ADA8C89E
Validity
Not Before: Apr 15 03:28:08 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69df05c7-1c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c7:3b:ff:ca:5f:da:54:72:0d:30:b3:4c:8c:
dd:4b:63:bd:8c:8f:c7:bf:e1:1b:44:9f:06:e1:26:
b3:87:d8:32:84:cf:d0:df:09:99:a5:12:bf:b9:ba:
c0:cd:dd:41:c2:2d:5f:4b:9e:29:e7:d8:78:43:56:
80:2a:03:f6:df:a8:4b:a0:b9:ce:3e:77:ae:89:bf:
87:db:c8:8b:62:0d:9b:f0:e2:3a:dc:64:2c:81:c2:
d1:9a:ec:02:76:15:6f:f8:3e:49:8a:bd:93:f5:13:
57:f7:63:13:09:95:d7:75:a0:42:29:0d:b4:e9:71:
5c:a7:81:ee:eb:ea:86:84:45:7b:2d:5b:0e:ac:3c:
7b:69:1e:b4:c8:97:9b:37:e0:6b:9b:de:3f:99:61:
58:c7:70:4a:ce:ed:e2:17:29:91:5c:8e:b7:fd:31:
f8:03:ab:dc:de:63:2d:c3:c2:be:79:0c:f5:5f:11:
22:3c:c7:83:bb:3a:e3:32:0d:c6:7f:b0:c9:a9:9f:
c6:c9:99:ec:98:c5:4f:13:2d:af:38:72:77:d2:4e:
56:4c:ab:70:31:df:b6:09:5c:a9:5f:e2:b2:e7:12:
d7:58:22:c8:bb:ef:02:98:c4:ec:f3:ba:a1:6b:d6:
b7:66:ee:6d:96:d7:6c:89:dd:fd:5b:33:68:61:ef:
c1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FE:39:12:6C:80:AD:86:6D:00:7C:BF:91:40:BB:3D:A6:80:D4:11
X509v3 Authority Key Identifier:
keyid:3C:38:8E:29:FA:A1:A1:FE:EA:38:97:9F:20:6F:46:68:AD:A8:C8:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDiOKfqhof7qOJefIG9GaK2oyJ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/1ECF684E387B11F1BDE8C228B8833773.roa
sbgp-ipAddrBlock: critical
IPv4:
66.226.144.0/20
Signature Algorithm: sha256WithRSAEncryption
9b:b9:4a:fc:2a:97:62:1e:15:39:5f:05:9f:d4:1a:df:4b:09:
92:d9:38:39:24:e9:02:cf:f4:0d:63:3d:65:dc:c7:6f:94:b4:
67:5f:79:fe:96:73:c4:33:8e:cd:84:c3:94:02:1a:da:04:1e:
81:b9:af:b0:06:62:d9:e7:6f:49:1c:af:7c:fe:ea:93:2e:29:
26:68:8b:0c:40:3b:0d:02:72:17:91:07:2f:a4:f9:7f:b1:22:
f3:98:77:b6:91:62:ea:7b:ff:da:b0:91:c0:07:3d:8a:35:8b:
54:cb:4c:40:06:3d:ee:02:fa:6d:25:dd:16:1a:c9:93:07:63:
fe:e9:9b:20:da:25:60:28:9b:05:a5:87:54:78:bf:9b:9c:cc:
fa:39:ad:7e:26:a2:d4:64:0a:f1:5c:aa:23:f5:8d:97:e7:3c:
9a:88:f5:4a:fb:e2:9f:0a:68:fd:13:0a:93:fb:ba:37:bd:49:
99:a8:38:1e:1f:1f:55:9d:9b:5a:5a:6b:a2:64:a0:82:5c:d8:
1b:27:13:40:b6:be:8a:6b:e7:22:ae:39:de:f7:94:54:1a:c9:
ec:40:a3:8b:7f:bf:4d:7a:af:66:de:a6:a9:32:6e:43:c9:e0:
d6:1d:aa:7e:61:b5:54:50:d5:3b:5f:06:ee:5c:6a:f4:56:55:
93:7f:34:8d
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
NEI5RDExMC8GA1UEBRMoM0MzODhFMjlGQUExQTFGRUVBMzg5NzlGMjA2RjQ2NjhB
REE4Qzg5RTAeFw0yNjA0MTUwMzI4MDhaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5ZGYwNWM3LTFjMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDWxzv/yl/aVHINMLNMjN1LY72Mj8e/4RtEnwbhJrOH2DKEz9DfCZmlEr+5usDN
3UHCLV9Lninn2HhDVoAqA/bfqEuguc4+d66Jv4fbyItiDZvw4jrcZCyBwtGa7AJ2
FW/4PkmKvZP1E1f3YxMJldd1oEIpDbTpcVynge7r6oaERXstWw6sPHtpHrTIl5s3
4Gub3j+ZYVjHcErO7eIXKZFcjrf9MfgDq9zeYy3Dwr55DPVfESI8x4O7OuMyDcZ/
sMmpn8bJmeyYxU8TLa84cnfSTlZMq3Ax37YJXKlf4rLnEtdYIsi77wKYxOzzuqFr
1rdm7m2W12yJ3f1bM2hh78HHAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUov45EmyA
rYZtAHy/kUC7PaaA1BEwHwYDVR0jBBgwFoAUPDiOKfqhof7qOJefIG9GaK2oyJ4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0QjlELzRDRjNCMzcwMkQx
MjExRjFCRkM0NzhGNTk4RUU1MjhFL1BEaU9LZnFob2Y3cU9KZWZJRzlHYUsyb3lK
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvUERpT0tmcWhvZjdxT0plZklHOUdhSzJveUo0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NEI5RC80Q0YzQjM3MDJEMTIxMUYxQkZDNDc4RjU5OEVFNTI4RS8xRUNGNjg0RTM4
N0IxMUYxQkRFOEMyMjhCODgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBARC4pAwDQYJKoZIhvcNAQELBQADggEBAJu5Svwql2IeFTlfBZ/UGt9L
CZLZODkk6QLP9A1jPWXcx2+UtGdfef6Wc8Qzjs2Ew5QCGtoEHoG5r7AGYtnnb0kc
r3z+6pMuKSZoiwxAOw0CcheRBy+k+X+xIvOYd7aRYup7/9qwkcAHPYo1i1TLTEAG
Pe4C+m0l3RYayZMHY/7pmyDaJWAomwWlh1R4v5uczPo5rX4motRkCvFcqiP1jZfn
PJqI9Ur74p8KaP0TCpP7uje9SZmoOB4fH1Wdm1paa6JkoIJc2BsnE0C2vopr5yKu
Od73lFQayexAo4t/v016r2bepqkybkPJ4NYdqn5htVRQ1TtfBu5cavRWVZN/NI0=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:31:39 2026 by rpki-client