
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/E5FC085A843011F0971BDC44C4F9AE02.roa
File: E5FC085A843011F0971BDC44C4F9AE02.roa (raw, json)
Hash identifier: dm3BcPGPdQuO5Idson2cH8Me4yvZsLSNX+U6zphRieA=
Subject key identifier: CD:6A:43:AF:70:1E:78:C4:36:8A:BC:EA:5F:2D:67:8C:09:42:39:F7
Certificate issuer: /CN=A91C8307/serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9
Certificate serial: EC
Authority key identifier: 4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/E5FC085A843011F0971BDC44C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:13:32 +0000
ROA not before: Sun 15 Feb 2026 06:25:09 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 133496
IP address blocks: 161.248.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.crl
rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:32:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236 (0xec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8307, serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9
Validity
Not Before: Feb 15 06:25:09 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a41f5c-2e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:10:a4:9c:85:99:dc:3c:2e:e1:22:38:41:bd:
60:50:7e:ed:36:63:72:d0:e4:3e:8b:6a:af:4a:30:
d3:38:ba:98:fd:14:c0:ce:24:3f:e7:71:f6:c9:c3:
a9:88:f5:6b:c7:aa:ac:78:5b:21:88:26:de:15:fb:
bc:ae:a8:63:cd:cf:b8:b1:8a:aa:52:22:06:4d:ab:
84:47:2c:7b:d4:28:1d:43:c2:de:49:37:24:40:f2:
b3:2f:aa:d2:23:9d:7e:b8:73:37:75:35:e5:06:00:
ed:10:60:58:be:7d:14:9b:1b:a3:07:fc:03:2e:70:
03:f0:c2:53:23:5e:f8:f6:b8:d0:09:4a:3d:f5:8b:
10:59:5a:cc:26:f2:85:ff:1a:56:7c:6c:7c:df:1d:
50:94:84:1b:ab:2f:dd:f3:1a:10:ee:cd:fa:84:48:
12:d0:52:3a:81:9c:61:a7:cc:50:0f:78:50:6a:0e:
f2:d4:3e:63:4f:00:cd:06:d4:60:77:c7:71:ce:22:
9c:c4:02:53:83:97:6f:0d:ef:1a:2f:ec:6b:dc:83:
b0:ff:15:8d:a1:c8:6d:3c:49:e8:cf:e7:fb:9d:c1:
94:e5:dd:2a:d9:29:de:ed:06:05:d1:ec:43:a9:4e:
6c:95:c4:29:e8:e2:b1:f0:cc:7c:43:4a:21:24:41:
62:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6A:43:AF:70:1E:78:C4:36:8A:BC:EA:5F:2D:67:8C:09:42:39:F7
X509v3 Authority Key Identifier:
keyid:4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/E5FC085A843011F0971BDC44C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
161.248.6.0/23
Signature Algorithm: sha256WithRSAEncryption
25:4d:70:1d:7e:c7:5b:df:3b:72:f3:5f:c7:25:e4:6b:fc:1a:
67:88:02:75:94:79:bd:18:61:1a:8e:05:45:9b:86:5b:14:b1:
9f:47:6c:1a:4c:77:f4:06:f9:70:28:1e:e5:e0:97:9d:75:13:
0a:c2:01:1e:27:84:71:4e:3d:5a:99:9b:28:cf:05:7c:68:6f:
9a:9f:72:4e:96:9a:27:fc:8c:51:eb:ce:0b:c6:5c:5f:ec:b7:
25:dd:9a:f7:9b:28:23:60:55:cb:6f:e3:ee:42:9e:76:5b:b5:
94:0e:00:0f:7e:2e:d8:fe:1c:df:d7:f7:69:31:46:cc:05:ff:
35:7a:f3:89:c3:16:44:ab:8f:47:f1:7d:4c:3c:a5:b5:37:93:
b4:a7:93:16:cb:0a:08:db:10:d5:a4:52:c0:10:c8:07:bc:ab:
e4:44:21:f9:55:03:37:de:f8:6c:70:db:ee:7a:3a:5c:e3:8d:
32:8e:b9:22:8b:b6:b1:62:49:f4:76:54:e3:20:95:54:38:94:
a7:f0:3b:13:5f:9d:72:30:ce:b5:e8:0f:b4:a9:94:81:34:b9:
2f:67:e5:19:4b:1f:02:94:91:94:f8:f5:50:8f:c2:2d:73:d1:
68:3d:67:b0:14:a7:36:f6:c4:78:cf:3b:9d:c5:27:19:51:df:
71:ca:99:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:56 2026 by rpki-client