
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/A4857438FC7C11EF9988DB39C4F9AE02.roa
File: A4857438FC7C11EF9988DB39C4F9AE02.roa (raw, json)
Hash identifier: jatcPHhrDBROrQakEiDJXFQZ5JpqwULVe4xT2zI2DTs=
Subject key identifier: E7:5C:6C:9A:1A:43:CB:DD:95:6E:35:71:0A:BF:2E:D3:F8:3F:DE:B0
Certificate issuer: /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Certificate serial: 6175
Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/A4857438FC7C11EF9988DB39C4F9AE02.roa
Signing time: Thu 16 Apr 2026 20:25:26 +0000
ROA not before: Thu 16 Apr 2026 20:25:26 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 152136
IP address blocks: 210.0.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:25:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24949 (0x6175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1323, serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Validity
Not Before: Apr 16 20:25:26 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69e145b6-be68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b5:f5:0a:47:fb:e7:11:57:64:69:7c:3a:1c:
18:73:ab:84:51:54:bd:a9:37:a1:95:75:c8:1a:a8:
e5:19:7d:09:1f:fc:a7:b8:92:49:8f:74:d9:8a:9b:
bc:c8:86:1e:34:d1:99:76:49:b9:97:a3:48:c5:14:
41:85:29:46:e8:88:ed:4f:e6:95:3b:ab:db:54:e2:
97:13:15:54:a3:13:d1:f9:bd:04:f2:46:cf:73:65:
51:be:71:65:2c:f3:55:3e:c7:aa:c0:f3:39:f7:92:
15:f4:e9:e5:87:f9:ee:0b:e0:ad:e0:80:14:16:99:
f3:51:7b:a0:df:79:5c:4c:e0:e6:4a:a6:ad:77:5a:
0d:f5:52:e7:99:52:dd:0d:b5:f7:6c:92:6b:ef:f2:
41:49:56:36:09:44:13:ae:75:54:a3:9b:bc:64:97:
64:3b:8f:cc:e8:38:8b:c1:cc:68:da:e7:70:b7:ea:
e9:66:38:7a:b6:e7:1f:50:9f:8a:fb:47:16:36:73:
69:5f:18:9b:ae:fc:b7:83:e1:93:c7:f7:30:ff:e6:
02:f5:0d:9d:13:05:c2:66:5a:77:47:69:86:99:1b:
04:0a:22:4c:a3:c5:b9:05:4d:a8:90:a2:a5:12:f3:
f4:e7:59:61:2a:ca:4b:3a:78:f0:b0:45:81:9c:45:
12:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5C:6C:9A:1A:43:CB:DD:95:6E:35:71:0A:BF:2E:D3:F8:3F:DE:B0
X509v3 Authority Key Identifier:
keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/A4857438FC7C11EF9988DB39C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.0.238.0/24
Signature Algorithm: sha256WithRSAEncryption
90:b3:d2:ca:c1:7f:e6:3d:1f:8f:3c:ee:85:5d:e4:f2:7a:22:
e4:ce:12:e7:a7:fa:41:07:aa:18:a6:30:b5:59:fe:10:a8:62:
ab:9b:be:fb:4e:43:7f:31:77:69:99:17:50:7b:a5:b2:1a:45:
c9:7b:56:69:f7:3d:22:27:ee:99:5b:19:bc:ec:8d:76:09:bb:
20:20:98:61:de:c6:19:66:01:b9:57:bd:c5:b4:8d:ea:d6:be:
4d:50:89:d8:b6:45:72:8b:da:88:1c:36:49:7e:e2:45:13:9c:
5e:3f:ea:64:3c:2b:76:78:c7:6b:ab:48:62:7f:da:2b:c7:92:
93:92:bf:56:50:85:f0:b1:79:03:7c:c2:f7:1c:e8:79:15:ad:
4d:8a:fe:bd:d0:aa:12:4a:bb:39:44:12:31:df:48:66:fe:5a:
9e:dc:84:c5:24:ce:1b:fb:ab:90:cd:5d:d5:7b:47:51:ad:b7:
d5:52:5c:13:e6:f7:2b:00:74:03:d9:17:28:9e:1d:1a:fd:65:
f9:65:34:66:9a:e0:f1:c2:f0:ee:38:a4:0d:6a:be:32:b6:38:
2b:12:b7:d5:ba:63:8c:b3:3a:a9:cd:dd:96:70:31:0f:44:9f:
c1:44:22:9b:4d:8b:74:4a:6b:79:e0:b6:2f:f8:7d:42:6d:68:
a6:1b:eb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:58:22 2026 by rpki-client