
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/B97B11B2C84211F0A053E068C4F9AE02.roa
File: B97B11B2C84211F0A053E068C4F9AE02.roa (raw, json)
Hash identifier: h69/lB6IB2C2a9XDqwm1K+HvA2A6PhRI/W5WdSklT2M=
Subject key identifier: 50:3A:E7:2A:61:56:9E:08:09:7B:40:AB:57:8B:B7:ED:7A:8C:F0:53
Certificate issuer: /CN=A91CCDAE/serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A
Certificate serial: 52
Authority key identifier: 2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/B97B11B2C84211F0A053E068C4F9AE02.roa
Signing time: Fri 27 Mar 2026 08:43:47 +0000
ROA not before: Fri 27 Mar 2026 08:43:47 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 401701
IP address blocks: 82.158.224.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl
rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82 (0x52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCDAE, serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A
Validity
Not Before: Mar 27 08:43:47 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69c64343-c5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:12:06:b4:34:3f:4d:a1:8c:59:a8:35:53:63:
00:8b:83:7c:89:7a:f6:8e:6e:b2:0c:89:96:bb:17:
2c:b9:bb:f4:4c:78:72:a8:0b:ab:a5:f0:f9:59:9e:
ee:5c:d6:f0:3f:d9:dc:6c:c5:3b:1f:8b:d9:30:f7:
0f:cd:33:4a:79:2f:6a:31:55:10:97:2b:43:c1:fa:
60:70:79:36:d9:ad:65:44:3f:14:62:8d:64:cc:b3:
93:a3:91:7b:a5:00:bf:0c:c9:cd:f1:04:6d:6d:a6:
bd:cb:cd:64:a7:80:75:23:42:13:67:40:33:c6:4c:
95:35:c1:31:3d:1d:fc:b9:51:53:d3:04:7e:e8:98:
8d:9d:17:de:b3:34:96:d0:a2:2c:76:d3:0a:6d:18:
95:7b:05:94:fb:34:30:f8:83:9a:f4:4c:4f:c3:35:
31:b2:63:b9:1c:1b:bb:9a:74:96:88:98:74:a2:34:
f5:b7:8b:db:91:1b:3e:01:40:d4:42:93:f7:5d:a4:
d0:84:cf:e1:d1:0f:70:9c:93:4b:38:c2:11:fc:c4:
52:af:e4:c2:b0:80:aa:01:80:6c:d2:6e:c4:9a:ce:
5a:12:4f:27:53:db:7b:84:dd:b0:ee:6a:a8:85:f5:
7b:91:f8:73:04:dc:d7:5d:8f:85:ca:78:d7:59:a1:
a3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3A:E7:2A:61:56:9E:08:09:7B:40:AB:57:8B:B7:ED:7A:8C:F0:53
X509v3 Authority Key Identifier:
keyid:2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/B97B11B2C84211F0A053E068C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
82.158.224.0/21
Signature Algorithm: sha256WithRSAEncryption
59:7f:c4:2e:98:d1:ab:09:ed:57:b8:ec:bc:fc:e9:35:5b:6c:
92:a4:47:e9:cf:ce:a1:7b:75:09:38:17:2d:68:56:fd:fb:54:
2c:3f:8e:ec:0d:af:cb:26:97:83:62:e5:da:bb:15:c9:ca:3c:
16:a5:2e:fd:c7:e3:db:23:fe:21:8f:3a:a3:a1:20:db:65:be:
4b:e5:c3:ab:13:21:46:5e:17:d4:d7:31:6a:f2:bb:fc:dc:c4:
cc:95:91:f3:0e:ab:01:36:09:1b:7a:ac:3e:7a:ee:fb:46:58:
a7:c0:35:53:99:2f:85:cd:7d:fd:38:fb:1c:e1:9c:24:5b:6b:
20:25:3e:ad:b6:ff:69:88:29:34:46:d2:3e:5c:40:88:50:c5:
0d:51:a1:84:b2:44:cd:43:89:44:95:c4:c5:cb:4c:8b:36:e1:
b6:05:61:f3:c3:1f:3f:5b:18:cb:e8:89:02:d9:83:aa:b4:35:
cf:3f:ff:1f:4a:8c:08:7a:a1:ab:59:e4:e5:53:9c:3a:02:95:
5b:09:99:e8:e5:09:8a:b1:4c:e9:54:9f:8a:22:7f:1f:ae:f4:
3b:e5:30:c2:a2:09:6e:44:e3:69:80:c7:0f:30:21:df:b0:f6:
67:e4:5f:a9:37:d2:d6:cb:0c:fe:f4:46:aa:20:90:b0:5f:ae:
c0:8c:b5:c2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:47:16 2026 by rpki-client