
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/B3795CBC64F211ED9AEC046FC4F9AE02.roa
File: B3795CBC64F211ED9AEC046FC4F9AE02.roa (raw, json)
Hash identifier: WcWgzJGh0m7kjX3X0vlH0++NcJ8zb8A6kxhRMuoMb8k=
Subject key identifier: FF:6C:F4:A9:7C:C9:9C:52:A7:9C:9A:62:EE:55:89:46:DF:D9:25:39
Certificate issuer: /CN=A91B5CEA/serialNumber=4484D07DA68D53050CDCF6B13C0C0545E6457CE5
Certificate serial: 0270
Authority key identifier: 44:84:D0:7D:A6:8D:53:05:0C:DC:F6:B1:3C:0C:05:45:E6:45:7C:E5
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/B3795CBC64F211ED9AEC046FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:14:42 +0000
ROA not before: Thu 07 Aug 2025 03:08:53 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 133606
IP address blocks: 185.126.46.0/23 maxlen: 24
185.242.38.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.crl
rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 624 (0x270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5CEA, serialNumber=4484D07DA68D53050CDCF6B13C0C0545E6457CE5
Validity
Not Before: Aug 7 03:08:53 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a3f572-f1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:da:1c:5c:46:3f:3a:3a:cf:e3:b8:50:5e:65:
2d:9b:a2:52:9a:44:43:63:72:19:82:59:68:86:7e:
88:d2:11:7e:9a:a1:3e:5d:69:98:65:5e:61:3a:69:
b8:72:19:d5:fd:44:a2:10:b8:08:0a:40:95:84:ff:
8b:69:60:54:34:23:88:9c:01:d4:61:13:74:b7:9c:
ba:af:45:68:3b:fb:fa:bf:fb:ab:7a:b5:4a:86:62:
97:63:bf:a5:0f:1d:83:7b:d7:8d:0d:57:1e:36:00:
fb:df:2f:e6:7e:78:46:f3:27:89:aa:7d:4b:84:c3:
fc:cc:a6:6a:5d:03:09:e8:5e:71:87:c1:3f:24:a4:
f0:c3:fd:6e:68:04:9f:53:a2:6f:2d:95:83:35:7b:
a6:45:03:e9:b5:f4:03:18:ee:10:06:36:67:01:b8:
17:0c:2f:e9:c2:5a:41:7f:c4:41:cc:c1:34:14:7f:
5d:08:e0:01:36:02:cb:dc:9b:c6:d3:8b:da:e0:73:
55:13:6a:92:6e:4b:ce:6e:75:88:69:43:62:2c:e2:
8d:18:f2:cd:d6:82:f9:59:c2:ad:4f:93:a7:bf:62:
df:a1:39:ed:46:6c:d5:26:fb:54:39:eb:1a:b7:b5:
a5:f5:e9:2d:f2:44:94:1d:e4:ff:6d:e3:a1:3e:30:
55:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6C:F4:A9:7C:C9:9C:52:A7:9C:9A:62:EE:55:89:46:DF:D9:25:39
X509v3 Authority Key Identifier:
keyid:44:84:D0:7D:A6:8D:53:05:0C:DC:F6:B1:3C:0C:05:45:E6:45:7C:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/B3795CBC64F211ED9AEC046FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
185.126.46.0/23
185.242.38.0/23
Signature Algorithm: sha256WithRSAEncryption
97:3b:8e:08:6f:47:e5:b1:39:1a:80:33:74:41:e1:9a:3a:2e:
5f:05:0c:22:9c:45:35:46:22:6d:b6:bb:df:14:1d:a4:73:ed:
e3:27:ff:4c:6a:69:d7:97:85:69:7c:a2:28:e2:f4:05:b6:83:
f7:87:61:51:3d:ee:31:db:bd:c5:4a:12:af:44:14:ca:9c:53:
b5:95:b4:9a:8f:dd:eb:14:7f:cc:cc:6c:cf:63:1f:35:6b:8a:
a0:cb:e5:d5:3f:ca:ae:82:87:4d:bb:25:36:60:25:fa:71:5a:
0b:04:36:ee:9a:74:70:e7:2f:5f:6a:fd:87:f2:30:97:72:a0:
57:dc:89:0f:25:12:66:81:34:a3:cb:c2:07:a3:36:f1:05:77:
47:2f:8b:fc:69:20:47:5f:bb:04:0c:19:1f:93:ec:01:f8:a8:
ad:e0:f1:cd:68:4b:f7:ae:23:35:f5:c8:84:5e:75:b2:1a:06:
b9:45:dd:09:a0:0d:ea:3b:c3:78:c4:d2:f7:a9:9b:47:78:1d:
3e:49:e3:0c:a1:19:65:59:8a:1f:63:67:d9:d8:ea:91:af:bb:
88:89:50:c5:b3:b9:f3:9a:3a:ac:74:f7:7c:43:bd:50:38:91:
b5:89:7f:e9:8f:06:82:ed:67:dd:e5:24:75:58:a2:c1:77:7e:
d8:f3:a8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:34 2026 by rpki-client