
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4BD5/E6724350B0C411F1B94FF2076A11F970/6B512CACB0DF11F1A7F8AD013211F970.roa
File: 6B512CACB0DF11F1A7F8AD013211F970.roa (raw, json)
Hash identifier: kBpDJXxsccHCgHrGQT/RhGYrU0riC9QlFLsRl7lYj74=
Subject key identifier: 22:EE:E7:E8:98:D0:96:C5:C5:7B:8D:25:16:E5:10:A2:20:EE:F9:5B
Certificate issuer: /CN=A91A4BD5/serialNumber=767865503500808EE473BD23310D9534E8DECAC5
Certificate serial: 03
Authority key identifier: 76:78:65:50:35:00:80:8E:E4:73:BD:23:31:0D:95:34:E8:DE:CA:C5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dnhlUDUAgI7kc70jMQ2VNOjeysU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4BD5/E6724350B0C411F1B94FF2076A11F970/6B512CACB0DF11F1A7F8AD013211F970.roa
Signing time: Tue 15 Sep 2026 08:28:25 +0000
ROA not before: Tue 15 Sep 2026 08:28:25 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 201130
IP address blocks: 162.4.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4BD5/E6724350B0C411F1B94FF2076A11F970/dnhlUDUAgI7kc70jMQ2VNOjeysU.crl
rsync://rpki.apnic.net/member_repository/A91A4BD5/E6724350B0C411F1B94FF2076A11F970/dnhlUDUAgI7kc70jMQ2VNOjeysU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dnhlUDUAgI7kc70jMQ2VNOjeysU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 09:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4BD5, serialNumber=767865503500808EE473BD23310D9534E8DECAC5
Validity
Not Before: Sep 15 08:28:25 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6aa901a9-666b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:46:68:ee:9a:fd:cb:21:28:7c:d3:63:31:bc:
9f:26:9e:da:35:05:65:75:3e:70:70:31:97:b6:7a:
7f:71:dc:3b:86:bd:90:1a:ff:5a:06:f3:9c:00:1f:
7a:34:8f:db:82:50:0f:c6:c0:56:28:ae:14:69:1d:
e0:d8:fe:e5:fa:bd:84:c2:4d:e6:f1:78:70:85:2a:
fb:25:47:59:1a:53:84:a3:48:94:72:1c:29:5a:ac:
05:43:73:b8:8b:f9:26:d7:20:30:81:39:07:b5:a3:
d3:c4:d1:d4:f1:d6:78:6d:b5:04:61:0a:86:69:e2:
39:3b:e1:ca:5b:86:4b:d8:cf:7e:e3:5f:07:62:38:
86:d2:64:a3:49:36:60:7c:82:de:7c:74:23:d1:a1:
31:31:ce:76:4c:90:2e:33:cd:9a:aa:1a:12:40:04:
b9:b0:6b:e0:8a:68:3a:35:d3:38:f0:e6:66:16:12:
3a:1f:d4:d4:97:fb:32:b5:c1:4b:84:4c:3d:5c:8e:
e6:71:a4:ef:3b:26:48:ce:bc:8e:d5:d1:4c:c3:4d:
44:8b:71:9a:bc:ec:16:2a:a7:cd:29:95:74:08:8e:
7f:9a:9f:47:72:67:57:c6:bf:0d:5e:76:fd:33:4f:
1c:6f:c8:ee:94:15:3b:db:e2:7e:70:2b:98:37:bd:
0a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:EE:E7:E8:98:D0:96:C5:C5:7B:8D:25:16:E5:10:A2:20:EE:F9:5B
X509v3 Authority Key Identifier:
keyid:76:78:65:50:35:00:80:8E:E4:73:BD:23:31:0D:95:34:E8:DE:CA:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4BD5/E6724350B0C411F1B94FF2076A11F970/dnhlUDUAgI7kc70jMQ2VNOjeysU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dnhlUDUAgI7kc70jMQ2VNOjeysU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4BD5/E6724350B0C411F1B94FF2076A11F970/6B512CACB0DF11F1A7F8AD013211F970.roa
sbgp-ipAddrBlock: critical
IPv4:
162.4.190.0/24
Signature Algorithm: sha256WithRSAEncryption
08:5d:50:52:11:74:cd:cb:0b:53:cd:5e:dd:d4:24:29:2f:cf:
b2:22:ae:f5:a9:a8:a6:cc:72:3f:a6:a5:0c:3b:a5:10:64:71:
fc:01:fc:fc:46:65:7c:e8:98:b4:12:1d:eb:f4:f2:67:ae:4b:
28:06:36:26:97:c9:7a:c1:52:7e:43:3e:aa:44:21:72:11:9e:
63:13:f6:1c:10:3f:89:cf:36:00:f8:26:83:ff:64:0b:6b:7f:
2a:1b:82:f6:c5:8a:f4:57:89:e1:29:1e:2f:44:cc:e2:c9:95:
52:0d:22:c1:17:b3:7a:2f:10:89:a7:19:1c:65:49:ad:c8:62:
a8:87:e5:bd:80:34:ae:c5:17:96:75:8b:3a:f4:97:5a:da:4e:
8b:78:48:2d:0c:36:47:af:a9:c8:10:b0:8e:d4:7f:b2:c0:0c:
b0:94:95:4f:91:0f:3b:a6:58:77:77:a6:c9:8a:c2:3f:64:6d:
ce:d6:01:c5:ca:4a:ed:36:83:d8:d5:56:76:ce:c2:5c:39:1c:
89:6e:74:af:2c:84:40:b2:35:96:31:5b:71:4b:c4:82:9b:93:
16:05:d9:8d:84:be:d8:cc:f3:36:43:2b:f5:20:1f:70:db:d0:
ae:2b:0b:fb:ed:df:e3:3d:38:8d:1a:ba:59:c3:06:c8:3a:82:
a6:43:ca:d6
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
NEJENTExMC8GA1UEBRMoNzY3ODY1NTAzNTAwODA4RUU0NzNCRDIzMzEwRDk1MzRF
OERFQ0FDNTAeFw0yNjA5MTUwODI4MjVaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhYTkwMWE5LTY2NmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDTRmjumv3LISh802MxvJ8mnto1BWV1PnBwMZe2en9x3DuGvZAa/1oG85wAH3o0
j9uCUA/GwFYorhRpHeDY/uX6vYTCTebxeHCFKvslR1kaU4SjSJRyHClarAVDc7iL
+SbXIDCBOQe1o9PE0dTx1nhttQRhCoZp4jk74cpbhkvYz37jXwdiOIbSZKNJNmB8
gt58dCPRoTExznZMkC4zzZqqGhJABLmwa+CKaDo10zjw5mYWEjof1NSX+zK1wUuE
TD1cjuZxpO87JkjOvI7V0UzDTUSLcZq87BYqp80plXQIjn+an0dyZ1fGvw1edv0z
TxxvyO6UFTvb4n5wK5g3vQp/AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUIu7n6JjQ
lsXFe40lFuUQoiDu+VswHwYDVR0jBBgwFoAUdnhlUDUAgI7kc70jMQ2VNOjeysUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0QkQ1L0U2NzI0MzUwQjBD
NDExRjFCOTRGRjIwNzZBMTFGOTcwL2RuaGxVRFVBZ0k3a2M3MGpNUTJWTk9qZXlz
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvZG5obFVEVUFnSTdrYzcwak1RMlZOT2pleXNVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NEJENS9FNjcyNDM1MEIwQzQxMUYxQjk0RkYyMDc2QTExRjk3MC82QjUxMkNBQ0Iw
REYxMUYxQTdGOEFEMDEzMjExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACiBL4wDQYJKoZIhvcNAQELBQADggEBAAhdUFIRdM3LC1PNXt3UJCkv
z7IirvWpqKbMcj+mpQw7pRBkcfwB/PxGZXzomLQSHev08meuSygGNiaXyXrBUn5D
PqpEIXIRnmMT9hwQP4nPNgD4JoP/ZAtrfyobgvbFivRXieEpHi9EzOLJlVINIsEX
s3ovEImnGRxlSa3IYqiH5b2ANK7FF5Z1izr0l1raTot4SC0MNkevqcgQsI7Uf7LA
DLCUlU+RDzumWHd3psmKwj9kbc7WAcXKSu02g9jVVnbOwlw5HIludK8shECyNZYx
W3FLxIKbkxYF2Y2EvtjM8zZDK/UgH3Db0K4rC/vt3+M9OI0aulnDBsg6gqZDytY=
-----END CERTIFICATE-----
Generated at Wed Sep 23 10:04:51 2026 by rpki-client