
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE954/9AECC352B0AA11F1B92223C9A7EE528E/A756B364B0D211F187A0B2C76D11F970.roa
File: A756B364B0D211F187A0B2C76D11F970.roa (raw, json)
Hash identifier: FxNMhwtcR3oWuqNSjH9QDsn5zkl0d7S0gjylTihtbM4=
Subject key identifier: FB:CC:6E:45:F3:1B:F8:C1:8C:87:66:2B:58:3E:1B:FE:98:C8:1B:07
Certificate issuer: /CN=A91AE954/serialNumber=A028277C970847D3D8C68F8B7468F3F26C72FEF3
Certificate serial: 0E
Authority key identifier: A0:28:27:7C:97:08:47:D3:D8:C6:8F:8B:74:68:F3:F2:6C:72:FE:F3
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/oCgnfJcIR9PYxo-LdGjz8mxy_vM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE954/9AECC352B0AA11F1B92223C9A7EE528E/A756B364B0D211F187A0B2C76D11F970.roa
Signing time: Wed 23 Sep 2026 14:57:22 +0000
ROA not before: Wed 23 Sep 2026 14:57:21 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 4817
IP address blocks: 179.239.0.0/16 maxlen: 16
179.239.0.0/23 maxlen: 23
179.239.0.0/24 maxlen: 24
179.239.1.0/24 maxlen: 24
179.239.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE954/9AECC352B0AA11F1B92223C9A7EE528E/oCgnfJcIR9PYxo-LdGjz8mxy_vM.crl
rsync://rpki.apnic.net/member_repository/A91AE954/9AECC352B0AA11F1B92223C9A7EE528E/oCgnfJcIR9PYxo-LdGjz8mxy_vM.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/oCgnfJcIR9PYxo-LdGjz8mxy_vM.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 14:57:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE954, serialNumber=A028277C970847D3D8C68F8B7468F3F26C72FEF3
Validity
Not Before: Sep 23 14:57:21 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6ab3e8d1-6bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:77:7f:20:6f:38:55:c6:36:0b:c3:b6:f3:ad:
44:1d:70:dc:fc:39:ae:f9:d1:e4:86:c7:47:68:f2:
9e:5a:2d:60:3e:ae:5f:14:3b:3b:73:9c:26:1d:f4:
e6:fe:2c:16:9e:f9:aa:13:82:97:20:6d:8c:81:30:
93:18:ef:ec:03:08:b1:45:fb:2a:a8:b1:e0:a3:34:
d4:e6:8a:b1:dc:62:79:2b:1e:d1:a1:74:a6:8d:4c:
de:e9:4d:e5:64:77:26:e9:bd:78:99:c0:09:64:1e:
b1:2f:01:bd:1f:66:2f:48:c7:f8:fa:21:c0:5e:7d:
3d:eb:71:7a:13:f0:34:a0:7b:cb:a2:0f:49:1c:2b:
cd:36:37:68:70:b4:ee:a3:86:f5:20:26:d1:b0:30:
d8:26:ec:4d:2e:1e:00:bb:a6:65:37:9f:ee:70:7b:
34:8c:68:a2:28:b3:b6:f1:2a:38:07:8d:9b:62:65:
3f:7d:b5:9c:54:ed:a8:b3:8e:ad:16:b7:89:0d:03:
69:c0:ee:f3:6a:8a:41:de:61:06:38:f0:7c:2c:ee:
12:2b:d0:26:3b:db:a9:4c:dc:d5:bd:61:27:d1:15:
6c:a6:1d:b2:fe:50:3e:30:8d:3e:bf:8a:0a:17:5b:
92:1f:e6:b1:76:61:ea:3b:7c:cd:f0:37:a8:34:74:
a4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CC:6E:45:F3:1B:F8:C1:8C:87:66:2B:58:3E:1B:FE:98:C8:1B:07
X509v3 Authority Key Identifier:
keyid:A0:28:27:7C:97:08:47:D3:D8:C6:8F:8B:74:68:F3:F2:6C:72:FE:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE954/9AECC352B0AA11F1B92223C9A7EE528E/oCgnfJcIR9PYxo-LdGjz8mxy_vM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/oCgnfJcIR9PYxo-LdGjz8mxy_vM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE954/9AECC352B0AA11F1B92223C9A7EE528E/A756B364B0D211F187A0B2C76D11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
179.239.0.0/16
Signature Algorithm: sha256WithRSAEncryption
65:23:5f:4b:95:a0:6f:89:11:f0:44:06:57:86:5c:08:1d:82:
59:9f:02:16:43:1a:65:a7:89:4b:05:1a:71:0b:9b:67:3e:c2:
f0:53:ea:e6:0e:de:18:f0:fa:9b:27:ba:1c:a3:48:46:4b:0c:
99:5d:29:a3:b0:a7:c9:7b:57:b9:4c:c1:48:41:32:2a:0e:ab:
eb:74:24:b2:19:6f:b0:eb:11:56:91:a6:9e:e2:8d:b8:fa:c7:
6e:c0:8d:5d:e1:8a:d7:53:e9:8a:d5:be:6c:2d:ab:a2:fb:c1:
bf:fa:f0:ed:27:35:8d:2a:cc:ab:d2:f8:e0:d1:58:7b:85:5c:
a4:d5:f2:f1:59:42:15:95:16:43:c0:41:32:a0:df:db:4a:75:
de:c6:af:26:4d:48:98:3f:ae:d3:0d:ea:be:be:24:24:09:59:
c9:a6:11:fa:97:55:03:50:df:ef:50:5e:92:43:92:88:b3:ab:
fe:d8:6e:e3:5f:43:4f:d2:8d:42:a1:fc:35:e8:49:0c:e6:04:
c5:75:78:fa:34:b3:bd:89:24:38:90:47:c4:27:d1:f4:d7:81:
10:28:26:d0:f7:84:85:ed:a8:30:eb:47:9b:31:0d:23:5e:72:
5d:11:e3:c9:b7:be:86:11:ff:53:11:b3:17:ee:95:75:69:27:
31:d1:a4:e3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 25 00:53:24 2026 by rpki-client