
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/065E09BC732F11F09E8D4450C4F9AE02.roa
File: 065E09BC732F11F09E8D4450C4F9AE02.roa (raw, json)
Hash identifier: lPETiWe8GHpbSTMrlHOlT/Ey7B1kvBXtUjo0VwOql0I=
Subject key identifier: 75:D1:E0:7D:54:D6:6A:14:EA:1A:88:76:74:5A:B1:5D:70:06:71:FA
Certificate issuer: /CN=A91DA736/serialNumber=A5AFA90890BF929181C031F0B8EDB194E3E169E3
Certificate serial: 6B
Authority key identifier: A5:AF:A9:08:90:BF:92:91:81:C0:31:F0:B8:ED:B1:94:E3:E1:69:E3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/065E09BC732F11F09E8D4450C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:13:23 +0000
ROA not before: Thu 07 Aug 2025 01:37:06 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 154121
IP address blocks: 192.190.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.crl
rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:16:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA736, serialNumber=A5AFA90890BF929181C031F0B8EDB194E3E169E3
Validity
Not Before: Aug 7 01:37:06 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a3e713-29ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:57:a5:2d:89:66:aa:e6:51:7c:66:45:c3:4d:
79:3f:b0:8a:ea:fc:e1:6d:71:31:79:28:48:ed:40:
a5:ba:0c:ef:cd:9a:51:9b:1b:ac:e6:9e:86:c3:8e:
89:04:c4:d8:6c:ed:7f:9e:26:17:88:7f:2a:4f:07:
bb:98:71:a6:d0:65:b7:b8:89:1a:79:14:bd:1e:d9:
ec:cf:77:8e:e5:57:90:1a:6f:05:7b:1a:20:e6:45:
c3:66:66:34:d9:7d:70:93:12:0d:71:39:ff:1f:38:
83:31:69:e8:bd:b7:b1:55:39:e4:2e:ae:52:0a:b1:
90:c4:13:d0:6b:cf:f3:a1:e3:74:ed:1c:ad:64:39:
3f:64:c1:4d:08:4d:57:06:96:d6:53:8b:ea:88:40:
39:ac:a7:c2:fa:5e:bc:52:3a:b6:43:fb:d1:b4:e7:
a7:3b:16:93:65:3c:86:cd:f8:cd:8e:eb:2b:4c:f7:
45:66:17:e6:87:aa:7c:aa:22:44:fd:c6:83:bd:a1:
f9:38:3e:2a:da:79:87:34:2e:3c:64:38:c2:a2:76:
ac:e1:79:06:fc:e6:87:0a:28:e9:ff:ae:a4:9a:71:
76:e1:38:95:71:99:26:d8:32:6a:96:18:d3:17:b0:
b3:bf:05:f9:3a:0b:d6:5a:2f:69:9b:af:d8:b4:98:
b7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D1:E0:7D:54:D6:6A:14:EA:1A:88:76:74:5A:B1:5D:70:06:71:FA
X509v3 Authority Key Identifier:
keyid:A5:AF:A9:08:90:BF:92:91:81:C0:31:F0:B8:ED:B1:94:E3:E1:69:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/065E09BC732F11F09E8D4450C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
192.190.181.0/24
Signature Algorithm: sha256WithRSAEncryption
33:54:b3:b5:0c:14:5f:d3:1e:29:84:8b:8a:a8:aa:3b:be:a3:
e5:d2:0d:b9:97:4e:f7:99:ea:78:50:4b:d4:63:cc:ff:57:3d:
11:9d:55:98:7f:e8:cc:0d:aa:20:ba:1b:03:61:43:37:df:40:
92:62:3e:cd:fa:84:08:6f:1f:12:94:2b:49:4b:0a:a6:a8:eb:
7f:cd:e8:d7:7a:a6:1d:d4:8b:36:47:a3:dd:15:02:51:e7:1d:
ea:f3:ee:be:1f:7d:2d:9d:c2:e1:63:93:46:a8:17:c8:c7:4a:
2f:f2:8b:ef:db:19:8c:f2:87:47:3e:f7:e9:f7:7f:5b:a6:64:
97:67:4a:5b:db:e2:4f:9e:c8:90:9b:51:fd:48:e8:e7:b8:8e:
fe:6b:65:0d:14:f5:3b:2c:03:1c:d3:68:1a:1f:ce:bb:ed:dc:
a9:48:bd:9b:fd:58:84:9c:4e:d4:ab:f0:31:54:25:44:99:d1:
ed:29:90:be:ae:b4:5b:cf:2c:dd:65:fd:07:f9:55:dd:16:ef:
d3:6c:98:80:e9:b3:32:e5:bc:b9:02:50:cf:ed:6c:51:d3:18:
50:f6:32:1f:84:c2:98:73:a6:f5:86:a4:7e:80:f7:e7:80:a0:
77:a0:7a:49:44:1b:ff:ed:97:01:9e:df:25:52:7a:67:a4:2d:
0a:95:a1:6b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:45 2026 by rpki-client