
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/5B196FD80A4611ECAE818D54C4F9AE02.roa
File: 5B196FD80A4611ECAE818D54C4F9AE02.roa (raw, json)
Hash identifier: 6vabhaTHpQOEFTzBkXHaivtyknsCva2FpDIYXbdc9KA=
Subject key identifier: 00:C9:DD:5D:3E:03:DE:41:59:9F:9D:73:C6:30:BA:DC:11:B7:53:56
Certificate issuer: /CN=A91A5F82/serialNumber=7447B2835EACB88AC48727CB726BB87B97BA778A
Certificate serial: 08CF
Authority key identifier: 74:47:B2:83:5E:AC:B8:8A:C4:87:27:CB:72:6B:B8:7B:97:BA:77:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEeyg16suIrEhyfLcmu4e5e6d4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/5B196FD80A4611ECAE818D54C4F9AE02.roa
Signing time: Mon 14 Sep 2026 20:40:44 +0000
ROA not before: Mon 14 Sep 2026 20:40:44 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 7473
IP address blocks: 202.165.128.0/19 maxlen: 19
202.165.128.0/20 maxlen: 24
202.165.144.0/20 maxlen: 24
2400:7000::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.crl
rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEeyg16suIrEhyfLcmu4e5e6d4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 19:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2255 (0x8cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5F82, serialNumber=7447B2835EACB88AC48727CB726BB87B97BA778A
Validity
Not Before: Sep 14 20:40:44 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aa85bcc-ec4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a3:9b:7b:da:94:c4:e3:14:ea:90:af:a2:4f:
39:f1:84:f1:cf:1e:e2:f7:9d:da:73:5f:82:cf:17:
fe:1a:54:43:87:21:b9:fc:c4:6e:3a:a7:17:15:e5:
a7:ac:76:b5:1c:48:29:f4:08:f6:be:c3:0c:e6:76:
34:b6:bc:36:8a:2a:9d:da:ff:48:c3:49:82:c6:c0:
bd:0a:8b:25:ed:c2:b6:a2:58:ba:08:af:73:1d:19:
ea:36:9f:4e:ba:0e:50:74:49:42:e0:10:7c:ea:a3:
f4:35:f3:6d:ca:a6:a6:c5:8e:d2:09:12:93:09:3a:
03:e6:9f:05:3c:23:4a:49:ea:e0:77:ee:5b:a0:e7:
25:43:1f:2d:31:ac:ad:4d:24:ae:97:b2:0c:80:8e:
27:94:5e:44:55:6f:1e:3c:f2:e5:c3:43:97:91:87:
82:c2:7c:4a:27:d1:c2:ba:5b:c5:c7:1d:9e:4d:a7:
58:3c:93:90:8e:f6:b2:1a:96:33:d8:22:76:d3:86:
a0:eb:85:90:b0:41:f9:cc:92:cb:a1:93:79:8c:93:
9c:30:a4:55:54:4b:6c:eb:d7:f9:53:4c:9c:80:26:
4a:10:0f:1e:bb:96:d3:81:ea:5d:a9:49:f0:c2:14:
ce:c2:c8:f2:a0:15:a8:f4:a4:f3:ec:3a:0a:bf:eb:
a2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C9:DD:5D:3E:03:DE:41:59:9F:9D:73:C6:30:BA:DC:11:B7:53:56
X509v3 Authority Key Identifier:
keyid:74:47:B2:83:5E:AC:B8:8A:C4:87:27:CB:72:6B:B8:7B:97:BA:77:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEeyg16suIrEhyfLcmu4e5e6d4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/5B196FD80A4611ECAE818D54C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.165.128.0/19
IPv6:
2400:7000::/32
Signature Algorithm: sha256WithRSAEncryption
ab:e5:1f:4e:40:ca:c7:ea:8a:dc:f7:9d:4e:d2:3e:73:ab:a5:
a1:db:bd:9c:19:3d:ca:1f:8d:17:b0:95:bc:f0:5c:f9:9c:37:
a8:3c:7b:c6:ad:76:9e:29:ab:fb:ba:c9:da:5e:22:63:21:5a:
4c:a7:31:4f:70:d9:a3:cf:ee:06:0d:dc:61:7d:8c:01:26:32:
41:88:03:b0:d7:26:2c:e9:59:05:7f:ff:7e:3b:d9:6d:16:6b:
ed:b5:dc:be:1c:c6:79:5f:a0:b2:35:b6:7b:d3:10:9d:96:7a:
ca:b3:56:52:7f:a1:16:c1:66:06:a3:d2:2b:d7:bc:29:25:91:
73:8d:e5:05:ca:6e:04:38:d6:bc:91:15:51:42:c3:18:d6:12:
e7:e3:db:04:66:85:dc:06:93:72:f8:f4:8d:f1:1e:b6:bb:89:
48:1b:9f:8a:7d:38:5b:b8:61:b7:c3:ee:8f:14:ef:f4:31:ec:
22:21:f7:35:36:b1:c9:69:19:e4:2a:46:7a:10:3c:07:07:a1:
f5:6f:cb:ac:14:47:20:a3:92:34:2f:87:a7:3f:76:6a:10:22:
12:74:62:da:b1:4e:d6:ce:27:76:e5:8f:21:8b:61:64:f2:d0:
e4:70:45:df:33:77:c1:3a:34:6d:63:e4:95:e4:cf:51:57:48:
6d:7b:ad:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:54:43 2026 by rpki-client