
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/DD004670C39711F0A241F86DC4F9AE02.roa
File: DD004670C39711F0A241F86DC4F9AE02.roa (raw, json)
Hash identifier: ILb2f5MFl0hmYnyJlCFO6BUBR2uQox0knIxNniHNGBA=
Subject key identifier: 56:62:2A:A7:5B:17:64:FA:5A:E5:F0:90:C7:64:CB:27:E7:D5:9F:EA
Certificate issuer: /CN=A91A86D0/serialNumber=16331676211AEE6773485B65233C62C3A4587AFD
Certificate serial: 0CCA
Authority key identifier: 16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/DD004670C39711F0A241F86DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:01:16 +0000
ROA not before: Tue 02 Dec 2025 17:17:59 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 139051
IP address blocks: 185.205.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl
rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3274 (0xcca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A86D0, serialNumber=16331676211AEE6773485B65233C62C3A4587AFD
Validity
Not Before: Dec 2 17:17:59 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a470dc-642c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1c:00:60:73:0e:ae:b4:cc:72:71:be:0c:95:
e6:77:da:a2:c8:d5:36:31:19:b9:54:52:2a:ee:bd:
2b:da:d5:29:75:d8:8f:f7:15:08:b2:4d:ee:1d:01:
69:c6:28:c4:44:d1:17:7f:eb:de:10:b2:52:40:dd:
d5:3e:18:81:82:ac:29:7f:87:7a:8e:b1:4e:00:41:
9a:9b:07:84:cd:c0:d2:fc:e5:0d:be:ae:e4:ab:ae:
f4:10:1a:91:60:f3:4d:11:6f:48:64:60:6d:08:83:
b2:11:70:0a:8a:da:8f:c2:03:91:33:fa:0c:71:46:
28:21:d4:01:c9:2e:9f:40:f0:5f:76:7f:80:33:6c:
09:52:0f:2c:a5:3a:c0:04:df:5c:d0:39:55:b1:4a:
50:e7:38:97:c4:3f:46:d8:02:b5:07:bd:eb:77:83:
66:0d:3d:40:64:15:90:8b:95:d3:fd:c2:fa:08:2f:
f3:27:f7:44:91:be:9b:8a:8d:f4:68:62:e2:65:0b:
c1:d2:66:76:b1:44:a4:ce:14:47:c5:33:f1:83:e3:
f0:97:5c:04:fb:9d:23:61:e4:f4:dc:53:25:94:e9:
4b:06:2e:28:85:d6:d1:37:9a:27:47:2a:c8:47:26:
c4:be:0e:c9:b4:26:42:3d:1c:b3:f6:2b:e9:90:e9:
4f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:62:2A:A7:5B:17:64:FA:5A:E5:F0:90:C7:64:CB:27:E7:D5:9F:EA
X509v3 Authority Key Identifier:
keyid:16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/DD004670C39711F0A241F86DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
185.205.143.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:2a:2d:8b:24:f7:a9:48:f1:a9:98:a2:3b:3e:5d:2f:52:d5:
86:1d:5d:8e:07:67:d2:a2:71:e4:7d:71:08:7c:fe:b4:7c:aa:
3e:fe:61:90:1f:6d:1e:cd:c9:26:cc:5e:e1:95:29:a1:16:67:
02:62:3f:9f:55:81:32:d1:71:ff:4f:03:36:7c:8d:f7:a5:49:
48:61:19:5c:48:ee:35:a8:f6:89:30:38:53:80:2a:8a:5d:e6:
72:34:eb:1e:77:f2:4f:fa:bb:a4:ed:fc:fb:6f:1c:f8:dd:d4:
42:f6:df:c2:11:af:86:fc:09:63:b7:47:29:f7:0d:e5:c2:84:
19:da:99:41:85:0b:a1:35:e0:03:38:77:db:c1:49:ee:01:d0:
53:0e:df:47:ec:45:54:86:6c:14:a6:86:00:0f:ec:8f:8c:a1:
25:f2:78:69:ea:31:85:5c:1c:af:42:62:db:62:8b:ed:e3:45:
8d:30:c7:39:a1:1f:a3:95:6b:43:3c:9e:62:f9:79:0b:58:50:
7c:19:1e:d4:f8:da:43:32:2d:73:8f:92:91:da:fd:20:1c:c1:
94:a6:5a:d5:91:fb:cb:2b:7b:6f:21:05:05:d3:8f:1a:4c:ba:
64:83:ef:e7:0b:9a:1e:d4:0c:05:54:d5:81:cc:ff:bb:8a:be:
d6:c9:18:d7
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTg2RDAxMTAvBgNVBAUTKDE2MzMxNjc2MjExQUVFNjc3MzQ4NUI2NTIzM0M2MkMz
QTQ1ODdBRkQwHhcNMjUxMjAyMTcxNzU5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzBkYy02NDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjRwAYHMOrrTMcnG+DJXmd9qiyNU2MRm5VFIq7r0r2tUpddiP9xUIsk3uHQFp
xijERNEXf+veELJSQN3VPhiBgqwpf4d6jrFOAEGamweEzcDS/OUNvq7kq670EBqR
YPNNEW9IZGBtCIOyEXAKitqPwgORM/oMcUYoIdQByS6fQPBfdn+AM2wJUg8spTrA
BN9c0DlVsUpQ5ziXxD9G2AK1B73rd4NmDT1AZBWQi5XT/cL6CC/zJ/dEkb6bio30
aGLiZQvB0mZ2sUSkzhRHxTPxg+Pwl1wE+50jYeT03FMllOlLBi4ohdbRN5onRyrI
RybEvg7JtCZCPRyz9ivpkOlP5QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFZiKqdb
F2T6WuXwkMdkyyfn1Z/qMB8GA1UdIwQYMBaAFBYzFnYhGu5nc0hbZSM8YsOkWHr9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODZEMC84RDhGMEFCRTBC
NUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdtZHpTRnRsSXp4aXc2Ulll
djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0ZqTVdkaUVhN21kelNGdGxJenhpdzZSWWV2MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTg2RDAvOEQ4RjBBQkUwQjVBMTFFQTkwOTIzMDY2QzRGOUFFMDIvREQwMDQ2NzBD
Mzk3MTFGMEEyNDFGODZEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAuc2PMA0GCSqGSIb3DQEBCwUAA4IBAQC4Ki2LJPepSPGpmKI7Pl0v
UtWGHV2OB2fSonHkfXEIfP60fKo+/mGQH20ezckmzF7hlSmhFmcCYj+fVYEy0XH/
TwM2fI33pUlIYRlcSO41qPaJMDhTgCqKXeZyNOsed/JP+ruk7fz7bxz43dRC9t/C
Ea+G/Aljt0cp9w3lwoQZ2plBhQuhNeADOHfbwUnuAdBTDt9H7EVUhmwUpoYAD+yP
jKEl8nhp6jGFXByvQmLbYovt40WNMMc5oR+jlWtDPJ5i+XkLWFB8GR7U+NpDMi1z
j5KR2v0gHMGUplrVkfvLK3tvIQUF048aTLpkg+/nC5oe1AwFVNWBzP+7ir7WyRjX
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:02 2026 by rpki-client