
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/885A3B4C198C11EEA06C1429C4F9AE02.roa
File: 885A3B4C198C11EEA06C1429C4F9AE02.roa (raw, json)
Hash identifier: pb+67QUwu5Hw/Dgr2vwKugBBsOlkl0MS1lsM8PjI48o=
Subject key identifier: 08:45:59:B9:15:68:00:7B:B3:F7:BD:59:AE:0A:2C:46:6A:26:6B:68
Certificate issuer: /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial: 0996
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/885A3B4C198C11EEA06C1429C4F9AE02.roa
Signing time: Wed 10 Jun 2026 21:24:21 +0000
ROA not before: Wed 10 Jun 2026 21:24:21 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 135391
IP address blocks: 169.136.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:30:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2454 (0x996)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Validity
Not Before: Jun 10 21:24:21 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a29d604-99df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d2:b2:17:96:51:7f:64:65:67:33:f3:63:f2:
1b:64:99:22:f9:7d:a0:fd:3b:0f:8b:65:5c:9b:32:
a3:12:4b:1f:64:d5:02:bb:c7:f8:73:36:bb:5b:02:
2a:14:c9:0d:01:84:62:5a:4f:d1:39:3b:35:d5:52:
1e:58:b3:76:c6:b7:16:43:10:a1:84:29:f6:21:f1:
5b:c2:e0:3b:67:39:17:47:00:7a:20:83:04:2e:16:
72:51:0f:24:5e:56:33:bf:4d:0a:84:b1:4f:53:0e:
a8:0c:e1:87:f1:79:0e:1c:01:38:da:3d:9b:9e:9e:
b5:e2:55:af:83:d1:1b:18:65:4b:d7:f4:d7:bf:59:
13:e3:26:65:a5:3e:80:c9:14:ea:16:88:41:6e:dc:
ce:74:39:58:50:17:2b:af:d1:db:e8:2f:5f:66:4a:
63:c3:5e:31:28:9b:93:c8:4b:10:5a:96:88:23:73:
d9:15:83:d4:b2:72:71:b0:03:87:0f:4a:b4:67:47:
4f:ac:25:54:bc:9f:13:1a:d5:99:f7:39:37:27:98:
33:71:00:0c:38:3a:46:f3:e5:cc:91:10:72:b6:9e:
b9:92:1b:98:96:cf:6b:e7:5a:60:40:0a:2d:07:6d:
a2:ab:28:a5:f3:c8:d5:94:97:9a:65:2f:82:8a:cb:
c6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:45:59:B9:15:68:00:7B:B3:F7:BD:59:AE:0A:2C:46:6A:26:6B:68
X509v3 Authority Key Identifier:
keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/885A3B4C198C11EEA06C1429C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
169.136.88.0/24
Signature Algorithm: sha256WithRSAEncryption
50:1c:2f:1f:4c:cb:1a:9d:04:13:5f:d5:6b:27:2d:c5:76:82:
3d:5f:33:70:32:58:17:34:aa:5d:58:b8:52:a0:f8:d1:ec:2c:
22:d9:90:ea:61:8b:fe:4e:ff:12:44:4f:60:63:8d:13:59:e1:
f3:9d:7a:7c:96:b0:4c:1b:19:f1:01:bd:9f:d2:c3:fa:64:6f:
59:f0:7d:df:3a:78:76:6a:b2:38:fb:f2:cd:47:37:c5:0b:af:
71:b3:10:1a:53:61:cc:de:bd:42:ab:f0:e4:62:60:75:a1:42:
77:ae:09:5e:27:22:a5:d6:cc:a3:a5:ec:90:1e:08:95:ae:11:
e0:dd:53:ce:91:c0:55:0b:5d:2d:bd:ca:63:e2:20:8b:66:e0:
9e:0c:fe:c0:2f:2c:eb:fb:19:06:45:89:fa:5d:99:14:89:12:
6e:ad:15:a8:44:06:e1:1b:da:bd:75:ed:b5:d2:8a:3d:85:94:
bf:73:7b:e4:7b:95:7f:1e:f5:f5:45:d0:fb:13:63:a8:a5:9e:
4e:c8:fb:82:15:16:b8:ce:49:ef:61:93:33:12:6f:a5:0f:4e:
0c:1b:56:36:ed:7c:7e:eb:20:7a:f3:ae:a0:c6:92:a1:e0:67:
2e:7a:45:63:08:7d:13:15:de:04:10:35:e2:3e:54:a8:55:f2:
2e:28:31:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:43:37 2026 by rpki-client