
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/882F06DEFF0E11EABBCCCF56C4F9AE02.roa
File: 882F06DEFF0E11EABBCCCF56C4F9AE02.roa (raw, json)
Hash identifier: nogjcEeLKI/bjkOxzOAcwH27Lq+dKCwt3K6wu8vPi/4=
Subject key identifier: 1D:80:78:EF:8C:C8:DB:51:40:0D:44:2D:6F:FB:5B:6E:59:33:7D:F0
Certificate issuer: /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Certificate serial: 6181
Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/882F06DEFF0E11EABBCCCF56C4F9AE02.roa
Signing time: Thu 16 Apr 2026 20:25:49 +0000
ROA not before: Thu 16 Apr 2026 20:25:49 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 63673
IP address blocks: 118.143.198.0/24 maxlen: 24
118.143.199.0/24 maxlen: 24
118.143.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:25:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24961 (0x6181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1323, serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Validity
Not Before: Apr 16 20:25:49 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69e145cd-60e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7d:c6:98:27:c2:fb:14:c5:76:ff:2d:14:6b:
56:98:eb:8f:de:d4:3e:e9:a5:85:87:34:a0:93:b4:
63:cf:af:ad:fc:90:e5:11:d5:22:d3:f2:09:8e:e7:
c5:c4:b0:36:be:b8:b7:52:5d:88:0b:c1:64:21:00:
dc:50:4b:ba:cc:a3:be:d1:3a:f0:73:d5:7f:91:88:
1b:ff:7c:4d:91:d7:c0:03:bf:f1:e5:85:8b:74:0e:
5a:c1:9f:90:2c:6c:67:99:9d:00:00:cc:bd:03:c5:
c1:a7:84:db:f9:18:cc:5a:ae:ea:75:d3:54:dc:84:
82:02:4f:17:d1:f8:fc:1b:39:4e:d0:77:d4:bd:46:
03:84:f8:c0:63:4f:2a:7b:75:8d:a0:f1:2c:76:92:
f6:ab:71:60:49:f9:bc:1d:0f:60:26:5d:93:ee:08:
f0:ba:fc:57:71:3b:c0:f0:7d:71:6f:42:c2:fc:80:
04:c2:db:04:7f:c5:8d:ed:d5:c3:c9:33:d4:5e:5b:
f0:8f:90:dc:9d:28:b8:22:02:9f:48:46:b0:61:a0:
57:ae:28:de:9c:c9:42:19:4e:9e:73:79:37:57:01:
ac:21:f3:d0:56:ba:03:5a:12:9f:d8:8d:d4:6f:a7:
fa:26:41:ab:a9:ee:54:b7:d1:0a:6d:0a:d5:c8:69:
d3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:80:78:EF:8C:C8:DB:51:40:0D:44:2D:6F:FB:5B:6E:59:33:7D:F0
X509v3 Authority Key Identifier:
keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/882F06DEFF0E11EABBCCCF56C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
118.143.198.0/23
118.143.215.0/24
Signature Algorithm: sha256WithRSAEncryption
72:c9:b4:9e:18:9b:e0:89:fd:7c:3a:45:14:71:3b:49:c0:6e:
3c:16:73:91:74:7a:3e:5e:98:09:40:db:3e:87:c7:fc:8b:1f:
7c:e8:55:7c:c0:02:4b:14:f7:e5:a0:d2:99:11:2c:b7:81:a3:
6f:2e:30:65:4a:24:41:c2:50:05:f7:7e:ef:0c:32:e8:35:11:
83:e1:99:38:ae:8b:21:a3:e3:2c:b5:74:c6:26:56:55:f1:4d:
80:9b:61:e8:49:ed:47:59:ee:72:48:be:78:0a:29:5a:74:d2:
23:ae:36:f1:39:54:c1:5c:78:ca:2e:27:6f:0b:02:bd:8e:16:
21:f9:ba:c4:e6:7b:d5:0e:31:7e:d5:6b:85:f2:7f:40:9b:96:
5f:e1:08:ae:dd:6b:84:b3:5d:64:e3:55:32:5a:7c:60:5e:d3:
cb:20:07:b1:42:50:37:07:5b:7c:31:59:95:3d:ad:02:8f:df:
5b:e5:56:63:09:0d:7e:c6:8e:8b:bc:49:8a:2b:d0:7e:4b:34:
00:a1:b5:1f:ff:e2:ac:a9:68:3a:fe:1f:95:fc:b1:a0:ee:69:
6d:19:6d:56:a6:11:b7:70:cf:7b:a2:fe:b3:da:b9:30:34:ab:
7b:2a:6f:77:cc:5c:db:52:f0:e0:63:7c:a5:4c:4e:48:35:c6:
a5:19:ba:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:18:19 2026 by rpki-client