
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/23E0203034AF11EE90E6263DC4F9AE02.roa
File: 23E0203034AF11EE90E6263DC4F9AE02.roa (raw, json)
Hash identifier: kQlooTOYF7DNmDZKuzweY7EEd5/y9UZLGCRSSGQFlGE=
Subject key identifier: A0:3D:F1:30:F5:01:3A:73:75:35:23:C2:0E:58:F1:3E:3A:61:8D:75
Certificate issuer: /CN=A91C74B5/serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209
Certificate serial: 01FE
Authority key identifier: E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/23E0203034AF11EE90E6263DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:12:03 +0000
ROA not before: Sat 31 Jan 2026 03:22:24 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 16509
IP address blocks: 192.150.138.0/24 maxlen: 24
192.150.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl
rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 510 (0x1fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C74B5, serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209
Validity
Not Before: Jan 31 03:22:24 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a46553-ed2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:82:3f:8a:d1:73:de:d3:78:48:e3:8b:79:ca:
50:4e:aa:cc:a5:b3:47:3b:bd:c7:92:46:19:b6:40:
f0:af:1d:06:4f:f2:4c:87:46:fb:50:fa:f6:fe:df:
d7:5b:b1:b2:75:08:cc:1f:7c:85:0a:93:e0:d3:4b:
82:61:15:26:a6:c4:43:47:5e:16:76:2b:09:8c:c8:
d2:07:13:59:c7:e1:86:b6:a2:33:28:89:f2:9f:43:
49:ad:11:46:c6:2b:bc:8d:ce:65:fe:83:b0:11:ce:
26:88:2c:3d:2b:aa:ac:03:d7:4b:3c:a3:8d:9b:90:
c4:92:4a:00:a2:5a:e0:58:1e:d8:4b:e8:62:96:15:
c6:e0:92:32:0c:c7:03:ad:23:8e:6a:71:d6:0b:18:
5f:c3:f2:d1:90:3f:75:cb:ce:6d:8c:1f:b6:d1:5e:
48:5b:98:6e:21:f6:ec:10:20:39:2d:98:14:7e:53:
6b:bc:4d:5c:4e:79:47:01:26:96:e7:aa:24:2d:7f:
af:ec:56:b5:44:02:f2:9b:74:73:99:22:34:2a:82:
05:4c:34:f6:5f:4d:36:02:ae:6f:cf:4d:e4:1b:12:
0c:1f:c3:eb:74:71:0e:64:ce:c7:35:67:76:74:6e:
ba:20:c1:63:ae:05:40:86:09:51:41:96:64:f7:c3:
36:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3D:F1:30:F5:01:3A:73:75:35:23:C2:0E:58:F1:3E:3A:61:8D:75
X509v3 Authority Key Identifier:
keyid:E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/23E0203034AF11EE90E6263DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
192.150.138.0/23
Signature Algorithm: sha256WithRSAEncryption
10:6a:27:13:ce:6d:85:ad:5d:11:88:d3:f2:23:d0:c3:c3:0e:
b3:99:e1:e9:0d:50:57:23:6c:e2:f0:33:cb:1c:0a:ac:2f:ab:
10:ed:f3:b9:00:54:9d:21:8e:3e:a0:f6:25:12:da:38:fb:8a:
3d:f6:d3:dd:2e:eb:36:f9:5d:9e:cc:3d:50:55:1f:f9:0c:26:
e7:9c:75:8b:25:24:cb:5e:78:82:ad:17:46:ce:dd:d4:60:d3:
a5:f2:84:0e:5b:81:c4:4c:f1:16:66:6c:27:a7:89:4e:81:f0:
f2:db:c4:28:db:6e:bb:e2:c1:74:b4:f6:61:ab:97:36:9b:82:
9a:bb:6c:4c:a4:09:ec:d0:6f:31:f0:26:be:26:03:de:9b:a7:
00:1e:be:04:ff:4e:b7:0f:29:37:8d:b5:01:fb:4b:92:47:3b:
06:8a:17:bf:f3:e7:06:21:f2:05:b8:60:94:7e:1b:3b:8c:08:
9b:7f:15:86:5a:f5:33:72:20:c8:47:8e:7e:14:66:ca:a5:f0:
1c:66:f7:82:e9:de:c2:24:5c:3d:5b:15:2b:c6:e0:80:44:e6:
49:58:75:f3:e2:ff:d5:52:69:d2:87:08:31:79:56:8e:e5:b8:
8f:74:15:05:f8:7d:4d:8b:7c:e4:39:1d:05:1e:10:76:ed:c8:
09:fe:d4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:22:09 2026 by rpki-client