
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/885A3B4C198C11EEA06C1429C4F9AE02.roa
File: 885A3B4C198C11EEA06C1429C4F9AE02.roa (raw, json)
Hash identifier: vakBkNtUUuGs7h4zM7eGY5+Ut3h93Lyy2S4tZhrD+pQ=
Subject key identifier: 9E:C2:4D:F3:7E:11:46:62:C2:16:37:73:31:4E:BB:9C:EC:2C:27:E0
Certificate issuer: /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial: 094E
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/885A3B4C198C11EEA06C1429C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:41:30 +0000
ROA not before: Wed 18 Jun 2025 21:07:51 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 135391
IP address blocks: 169.136.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2382 (0x94e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Validity
Not Before: Jun 18 21:07:51 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a47a49-4ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:64:a4:32:13:f5:74:ce:d7:93:8c:8f:9e:7d:
4e:9e:84:1e:e4:2b:ca:51:05:f1:4e:64:50:eb:bd:
a2:37:f9:14:2a:72:89:26:05:aa:fd:d1:70:bf:f2:
94:78:6d:81:8f:4f:a8:20:e9:1b:66:b8:dc:68:46:
1a:44:1b:63:35:cb:ed:10:c9:23:c7:c4:37:b7:b1:
4f:60:42:73:61:62:53:eb:80:50:47:b6:42:b0:b5:
4a:aa:4c:33:5d:12:1a:dd:a1:15:0a:62:01:67:67:
16:cd:95:49:16:48:24:70:2c:16:08:6f:a9:d1:62:
f9:52:e8:4b:c0:c3:4b:e0:40:c4:c3:57:97:8f:99:
35:10:70:cf:68:07:e8:54:93:90:92:e8:b0:96:48:
d8:e3:27:b6:9f:cd:39:ec:b5:af:e8:77:66:a5:5e:
71:44:e8:7d:d1:4c:32:ea:ed:22:42:22:60:01:e7:
ae:28:bc:ee:6f:e4:aa:75:46:70:d0:06:47:26:46:
41:36:be:84:06:ca:f2:ea:25:15:3a:42:ed:05:99:
b0:fd:0f:1e:1b:0e:05:71:92:3f:e3:18:a0:e8:32:
d4:2b:71:1d:30:21:1c:f5:39:15:a7:9e:69:85:46:
39:5f:9d:0a:ca:a1:29:54:8d:3e:83:a5:49:d3:23:
f9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C2:4D:F3:7E:11:46:62:C2:16:37:73:31:4E:BB:9C:EC:2C:27:E0
X509v3 Authority Key Identifier:
keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/885A3B4C198C11EEA06C1429C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
169.136.88.0/24
Signature Algorithm: sha256WithRSAEncryption
52:36:66:29:68:c9:6c:7c:1a:a8:19:52:de:38:6d:2b:f2:a9:
66:cb:24:f9:f6:f5:a3:fd:90:63:e0:02:14:e8:da:4f:13:75:
52:d6:7e:6a:c8:75:ea:e9:e5:ae:d2:f3:d5:81:82:b3:3a:8f:
10:0c:a2:d1:ff:e2:f0:f0:c9:92:d1:7c:49:60:53:95:db:1a:
7c:f8:2f:de:5d:62:8e:fb:22:35:7e:f2:1f:5c:81:85:74:ad:
9f:16:60:eb:22:8a:a5:54:a4:a8:29:c2:65:ef:18:61:f5:46:
d5:2f:5b:8b:b4:60:51:4a:49:01:c4:23:0d:95:7e:f6:1e:97:
fa:8c:93:d2:04:95:4d:2b:a2:63:12:d0:ac:57:79:13:8a:11:
73:4c:be:da:69:6f:81:22:02:c5:22:04:cc:2d:db:74:dd:b3:
2d:2e:5e:c5:63:72:d6:e5:42:94:03:36:a3:ae:4c:68:ff:ad:
57:cb:6e:86:89:86:65:21:55:e0:0e:68:bc:b6:b9:ea:4d:95:
3e:19:70:8d:a3:6b:30:c9:5c:67:2d:8f:84:0e:99:5d:4c:fc:
c9:7c:97:c9:20:7c:f2:d5:f1:7c:8b:b3:04:45:ca:4b:8e:4b:
63:13:d7:8e:f8:67:af:58:87:cd:ea:69:33:57:e4:ca:77:40:
76:8c:6b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:21:16 2026 by rpki-client