
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/E9A639DAB9EB11F0AE27CB70C4F9AE02.roa
File: E9A639DAB9EB11F0AE27CB70C4F9AE02.roa (raw, json)
Hash identifier: YFh8kkG+QLXCGW9AKwhLAh1lcjT3x4DocAw0SQLluL0=
Subject key identifier: FA:3B:AB:0E:D2:58:B0:39:07:BB:46:3A:95:85:28:82:DA:8E:6E:8E
Certificate issuer: /CN=A91BFE76/serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D
Certificate serial: B6
Authority key identifier: BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/E9A639DAB9EB11F0AE27CB70C4F9AE02.roa
Signing time: Sat 19 Sep 2026 07:56:45 +0000
ROA not before: Sat 19 Sep 2026 07:56:45 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 15830
IP address blocks: 138.252.8.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl
rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182 (0xb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFE76, serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D
Validity
Not Before: Sep 19 07:56:45 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6aae403d-e721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:85:72:32:d6:ee:c9:e8:26:56:50:1e:37:e3:
d0:a6:21:8a:15:b4:2e:18:1c:62:13:d5:ef:5a:40:
56:60:87:5f:bf:81:2a:5f:dc:17:15:e3:e1:bf:3d:
18:a4:e4:c7:7e:0c:50:c3:ab:0f:6e:b9:a5:80:23:
27:35:20:69:e3:1e:00:d8:45:97:d4:e5:3f:58:01:
a0:60:66:95:2a:89:7d:82:3f:07:38:a0:0d:f2:8c:
59:4a:49:48:ab:cd:4e:6d:1f:1a:ae:de:64:34:c2:
7b:58:44:2f:0b:2f:25:d6:02:6c:87:48:a9:b1:92:
98:37:c9:51:e1:fe:96:e8:16:d8:7b:1e:83:a7:78:
ad:78:91:5d:1f:82:b0:cc:50:ca:59:47:38:15:fe:
21:99:44:19:ab:30:28:c2:a6:8e:71:3c:b1:c3:b5:
58:d6:75:06:f1:95:bc:7c:37:a0:13:01:30:3d:4f:
89:b1:dd:57:4b:a8:e0:79:c6:31:b1:a7:eb:94:aa:
2f:43:08:0c:21:b8:4c:cc:d3:18:65:23:5f:14:fd:
da:0a:5e:79:e2:d3:f5:4e:b2:e0:ee:fb:42:11:b4:
e1:39:0c:68:88:1d:b4:3b:b6:25:3a:9f:a1:8e:ca:
c6:42:fa:90:57:89:34:e5:57:58:3b:3f:8c:9d:9d:
57:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3B:AB:0E:D2:58:B0:39:07:BB:46:3A:95:85:28:82:DA:8E:6E:8E
X509v3 Authority Key Identifier:
keyid:BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/E9A639DAB9EB11F0AE27CB70C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
138.252.8.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:ac:85:61:61:2b:7b:c0:d5:fa:90:88:df:20:5f:b1:b7:96:
c5:28:07:f9:a4:b1:f3:f6:91:2f:94:cb:e9:51:9f:e8:23:66:
c6:58:bb:2d:ef:1d:70:7a:d7:8d:8c:09:58:67:d4:b3:f7:08:
c6:70:92:a1:00:12:03:89:0d:b1:ea:75:74:b6:14:0a:9f:e8:
b1:c2:d6:9a:bd:95:47:97:25:f1:7c:cd:08:98:3a:42:10:44:
be:b0:e8:05:d6:c9:67:43:ce:0f:8c:71:8f:7e:87:20:8d:8c:
9d:b6:3a:69:d3:18:71:bc:49:96:09:9d:98:1b:ed:65:e4:2a:
c1:c9:ba:2f:d3:e6:18:09:ac:dc:cc:c2:69:db:17:5c:ac:15:
94:12:35:27:1b:0a:d1:88:e1:d9:28:7d:61:69:23:0e:75:07:
7f:89:b8:1f:59:9d:4b:40:9a:5a:ab:b9:a9:ad:a0:9e:3f:d0:
38:f5:13:a7:be:fb:7d:4d:24:26:f7:90:3b:5d:d7:2b:2b:ec:
4c:8f:11:75:f8:7a:63:74:8b:dc:6a:2f:1e:54:19:3b:25:db:
f7:9b:c8:2d:1f:e1:cd:01:80:36:79:36:17:e1:09:85:27:84:
ca:ef:ab:dd:2d:16:b9:c4:4e:ef:49:43:a8:64:29:32:82:eb:
0c:df:5f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:35:35 2026 by rpki-client