
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/88B9736AA77811F092FD731BC4F9AE02.roa
File: 88B9736AA77811F092FD731BC4F9AE02.roa (raw, json)
Hash identifier: t9dZnts+IlYuSJrBx0IgU/pwjcYxg43h5hJtdZZSKtM=
Subject key identifier: 88:4A:6E:02:13:26:2A:33:99:2A:20:CA:B3:24:5B:02:F0:82:18:D1
Certificate issuer: /CN=A91CFBA9/serialNumber=0459BBF7CB84C17EED51B68CEAD941957D785FAF
Certificate serial: 4E
Authority key identifier: 04:59:BB:F7:CB:84:C1:7E:ED:51:B6:8C:EA:D9:41:95:7D:78:5F:AF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BFm798uEwX7tUbaM6tlBlX14X68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/88B9736AA77811F092FD731BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:14:58 +0000
ROA not before: Sun 12 Oct 2025 14:34:18 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 154287
IP address blocks: 138.252.26.0/24 maxlen: 24
138.252.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.crl
rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BFm798uEwX7tUbaM6tlBlX14X68.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:42:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFBA9, serialNumber=0459BBF7CB84C17EED51B68CEAD941957D785FAF
Validity
Not Before: Oct 12 14:34:18 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a3d962-48b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:53:a5:fe:fc:d8:2a:22:f0:7a:84:35:bc:a4:
fe:46:33:9f:5a:a7:d2:44:6a:65:a4:d5:e4:54:fc:
e9:1a:91:da:e8:66:96:b7:32:e8:5f:27:b6:4d:0c:
50:bc:77:c0:41:90:e5:68:03:ac:51:3a:ca:9c:1e:
17:b2:7f:3a:bd:a5:96:10:4c:5d:99:1d:00:d7:06:
18:5b:f1:3b:c4:05:3c:5f:07:53:3d:48:7b:18:3f:
00:69:7a:9a:b3:ee:78:5a:6f:f9:c3:a1:52:4a:5e:
30:48:f0:3e:84:02:42:bd:a3:34:9b:35:d5:cc:3d:
ff:32:0a:20:b1:6c:56:21:47:42:2f:ce:36:52:f0:
db:8d:bc:36:f9:02:e9:4a:8a:00:10:0c:18:65:8a:
81:62:e0:a1:e9:12:6d:ff:a3:70:c2:3a:ab:90:fb:
3b:7a:24:3f:0c:45:72:e5:b4:fc:6e:c1:b8:bf:35:
2f:58:9e:d0:20:7d:a2:a0:00:1d:01:7a:de:84:72:
ae:76:11:3e:8c:61:d0:d0:1b:4e:e9:c2:1a:c7:83:
2c:9c:63:9b:ff:00:6d:58:0c:01:e5:92:2e:79:90:
cb:82:37:89:f4:f6:82:02:a7:5e:1d:22:72:5d:98:
42:e9:32:8a:94:92:c6:1a:50:c8:bf:ec:e5:6d:cc:
e8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4A:6E:02:13:26:2A:33:99:2A:20:CA:B3:24:5B:02:F0:82:18:D1
X509v3 Authority Key Identifier:
keyid:04:59:BB:F7:CB:84:C1:7E:ED:51:B6:8C:EA:D9:41:95:7D:78:5F:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BFm798uEwX7tUbaM6tlBlX14X68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/88B9736AA77811F092FD731BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
138.252.26.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:64:b3:4a:21:b9:2d:76:e7:f9:7b:73:7c:65:4c:1a:39:62:
7f:82:b2:5a:29:d1:d9:42:a3:2e:fa:ec:93:67:b0:c5:c3:7a:
1e:4c:4f:21:27:53:61:8c:a4:29:f7:10:33:81:d8:a1:5d:89:
c5:df:1c:bf:18:01:48:78:85:c9:e9:23:3c:af:da:eb:23:f4:
25:da:a6:4f:ad:b7:db:c8:0e:92:f4:4c:58:6b:ee:6f:08:35:
2d:f9:35:76:a7:1c:92:89:41:99:d9:b0:6c:8c:af:df:25:8d:
f4:e0:eb:34:3f:70:e8:a9:cf:d1:fd:09:9d:c0:70:52:fb:8f:
52:7f:80:85:f5:e7:c5:cf:1f:b6:5a:70:0b:97:c4:e5:5c:46:
eb:6d:50:b4:15:c5:0d:dc:be:33:b7:91:da:c1:24:8e:8a:81:
81:7f:15:33:24:39:a3:1b:75:28:39:85:39:ab:e4:4d:ff:b5:
2c:cd:ae:a2:d4:42:00:37:46:a6:10:77:c4:6e:ab:66:13:29:
a5:7d:1f:d1:f8:76:97:7c:22:d0:69:69:94:48:7e:7f:17:5d:
82:f7:5a:7a:f0:c3:65:58:4b:0d:23:dd:16:e7:5d:c6:1a:fe:
f8:97:da:f0:0a:76:2c:92:0d:ad:2a:1b:9b:b3:b6:10:5f:b4:
3a:f3:38:49
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:54 2026 by rpki-client