
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/24B754BA9B7911EFBA9A2A42C4F9AE02.roa
File: 24B754BA9B7911EFBA9A2A42C4F9AE02.roa (raw, json)
Hash identifier: leKyUuCIlZ14TjNCgY53HEbyQblwhhLPh9MB2YSGjFw=
Subject key identifier: 91:08:00:F6:BD:98:1F:33:A6:AA:04:0F:3D:ED:09:41:4C:32:CE:AF
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 1231
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/24B754BA9B7911EFBA9A2A42C4F9AE02.roa
Signing time: Thu 04 Jun 2026 20:25:48 +0000
ROA not before: Thu 04 Jun 2026 20:25:48 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 139.190.192.0/19 maxlen: 19
139.190.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:13:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4657 (0x1231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: Jun 4 20:25:48 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a21df4c-d1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:00:bb:0b:22:f3:03:2d:01:6a:05:1f:d0:f3:
3b:2b:20:e3:b6:13:f2:75:d9:10:66:5b:0d:da:a2:
fb:40:09:03:c4:53:4d:06:7c:f9:cb:cc:03:3b:af:
01:85:b2:06:2b:7d:fb:c5:5b:b0:eb:85:61:0c:fa:
59:b6:a8:93:c6:49:89:9c:83:0c:dd:ab:a1:84:e7:
e8:5b:aa:cc:37:1a:98:be:06:ec:b0:63:42:e9:e6:
c4:8e:b2:ca:a5:1f:32:06:12:bf:5e:41:8a:1d:97:
9c:02:71:7a:4a:3c:ea:fe:f9:8f:b6:e1:98:4a:cc:
7d:42:5f:87:74:94:fd:a9:bb:9e:ed:03:a3:75:1b:
c8:de:36:2a:42:4f:31:82:fd:57:3f:b1:8f:c4:88:
cb:a8:3b:d5:ea:3f:9b:4e:5b:97:af:b3:ca:b8:8b:
42:4b:51:5f:a9:8a:54:5d:7b:aa:7c:bc:33:91:c1:
e8:cc:ce:45:4d:aa:83:09:62:6b:a6:eb:ad:96:b5:
d6:e7:fc:2a:7c:6b:85:1b:91:34:39:09:67:5b:bc:
a6:5b:4f:66:4d:dc:7c:fc:ba:e6:86:4a:e6:d5:c7:
54:42:cf:2e:a5:67:ff:2c:09:8e:6a:ec:98:d3:51:
42:12:81:8d:97:61:27:e2:2c:f1:a9:69:91:7f:fe:
6d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:08:00:F6:BD:98:1F:33:A6:AA:04:0F:3D:ED:09:41:4C:32:CE:AF
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/24B754BA9B7911EFBA9A2A42C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
139.190.192.0/19
139.190.240.0/20
Signature Algorithm: sha256WithRSAEncryption
70:59:0b:39:02:4b:ac:57:28:27:ae:fa:a8:a4:89:b0:ca:bd:
10:9b:42:b9:3c:37:c6:9d:20:41:f2:b0:cc:b5:5d:91:da:a9:
96:65:03:47:ac:f5:fb:a8:63:d0:b6:0e:fe:c1:53:44:67:81:
9e:4b:13:22:d9:93:ca:c5:06:c6:6b:af:b1:b6:a5:c4:a1:d0:
32:9c:08:37:ef:64:5e:72:ff:23:ce:d4:5c:1e:1a:d9:4d:60:
38:cd:76:c5:d0:f7:9f:69:41:85:1c:07:d5:cc:d8:c0:15:c9:
49:51:15:a2:12:3c:2d:ea:49:62:f4:27:b9:25:d6:f7:a8:1e:
c3:4b:7e:29:24:74:d3:af:c5:c6:8a:b3:21:55:84:90:0e:04:
33:18:fe:7c:00:31:58:35:5e:1a:8e:01:16:50:51:64:3e:81:
88:57:0d:12:ba:d5:4c:0a:c9:95:a1:3f:35:8a:be:e8:13:60:
89:ff:8c:e0:14:c9:06:4a:49:da:61:81:61:fc:e0:b4:ed:ed:
66:41:04:99:01:46:bb:98:a0:1d:65:90:39:a8:e6:28:44:ac:
25:a7:da:94:c1:54:32:a1:9a:94:69:7e:20:24:db:60:77:08:
16:57:ed:b4:78:36:ab:72:80:d6:4f:7c:62:d1:19:a5:b8:0a:
0a:83:fb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:48:50 2026 by rpki-client