
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/AEA7C9C0818911EA81577016C4F9AE02.roa
File: AEA7C9C0818911EA81577016C4F9AE02.roa (raw, json)
Hash identifier: huSx5kpORQn0tkU4TRAPmVkFRxR4g/qvraibL4XJAo8=
Subject key identifier: 57:A2:99:20:C8:EA:F0:AC:DF:3D:BB:C1:89:9B:5A:2D:CF:60:73:BE
Certificate issuer: /CN=A91D1691/serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51
Certificate serial: 1924
Authority key identifier: DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/AEA7C9C0818911EA81577016C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:27:50 +0000
ROA not before: Tue 26 Aug 2025 16:23:20 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 45352
IP address blocks: 212.8.230.0/24 maxlen: 24
212.8.231.0/24 maxlen: 24
212.8.254.0/24 maxlen: 24
212.8.255.0/24 maxlen: 24
212.92.102.0/24 maxlen: 24
212.92.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl
rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:58:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6436 (0x1924)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1691, serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51
Validity
Not Before: Aug 26 16:23:20 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a422b6-6657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:30:29:4d:f6:91:30:b5:aa:b3:00:0e:1d:66:
d0:0e:99:20:e2:ec:76:13:57:7c:44:3e:8b:80:10:
88:0e:8f:ec:ad:2a:34:73:8b:be:4a:10:eb:03:74:
d1:3d:1e:c9:1f:4c:6c:43:10:c1:bd:f7:43:fc:03:
36:bd:03:75:3a:db:90:2f:2c:9c:aa:3e:fc:c0:e3:
08:88:a1:3e:9b:d8:60:e6:ae:9a:47:4b:9e:34:48:
0e:1f:d7:2b:3d:ee:de:c3:20:f0:35:b0:c0:24:3d:
a9:25:97:23:1a:18:71:65:b2:4e:cf:c7:d1:54:85:
99:4d:82:ab:71:4c:ff:8f:83:57:0e:96:50:9c:71:
ed:fe:9d:3e:29:fd:f8:36:e8:bf:34:5b:f4:1f:da:
18:b2:65:69:dd:80:28:80:fa:ec:f3:b4:6f:0f:46:
10:50:71:ce:59:fe:54:a6:5f:0c:b6:e5:ce:91:a4:
9b:62:0e:4b:9f:7b:04:aa:aa:7e:20:b0:83:b3:ed:
82:29:36:87:60:c3:70:e8:13:de:58:cc:7d:57:cd:
07:df:a4:5d:b2:e0:15:ad:10:66:5d:f1:77:f4:5b:
fa:3f:fa:dc:30:39:bf:74:75:23:48:59:c8:f2:fa:
60:c2:a7:6a:c5:26:5a:f0:44:20:49:a5:3c:b4:fc:
6c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A2:99:20:C8:EA:F0:AC:DF:3D:BB:C1:89:9B:5A:2D:CF:60:73:BE
X509v3 Authority Key Identifier:
keyid:DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/AEA7C9C0818911EA81577016C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
212.8.230.0/23
212.8.254.0/23
212.92.102.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:a9:00:7d:e3:3f:79:e5:b6:19:74:91:36:eb:4e:78:c7:10:
fc:d0:e1:a0:43:1a:3f:7e:54:c5:df:c6:9e:ab:23:1e:4b:1b:
33:64:c3:a8:b4:59:95:26:66:b6:db:39:00:32:54:00:9a:96:
ae:14:d8:c9:ae:88:1a:ff:e7:60:21:e8:6d:09:75:17:2f:81:
e1:e5:71:f3:d4:a5:86:73:4f:e3:aa:8e:eb:50:b3:10:1b:97:
45:43:4f:c2:78:33:3b:a1:de:f6:c5:73:ff:82:c1:18:32:2e:
07:54:f5:87:16:72:6f:1b:6c:4a:bf:dd:db:d2:a3:2a:aa:2f:
09:00:22:90:cf:6d:2a:a6:f4:85:45:36:49:1c:41:98:59:84:
aa:a0:4f:a0:77:3b:92:1f:7d:c3:43:e3:23:6d:ab:8f:7f:c2:
63:7b:88:8a:a9:53:1a:66:11:d4:7b:57:9b:b3:35:9a:80:7f:
82:a3:63:e1:43:fa:bb:ee:f8:e6:98:e2:e4:54:a6:0d:b3:1a:
5f:7d:5f:f9:08:04:7a:48:45:d3:62:2b:6e:24:39:e6:39:89:
6a:be:a1:f1:9b:ec:df:ac:a3:3d:34:72:29:29:93:5b:4d:4d:
8a:7e:3d:40:99:1b:cb:e0:01:55:ad:9e:61:ec:8f:8b:3e:49:
2a:85:88:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:42:36 2026 by rpki-client