
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/8BAE1FFA6D1A11F0A4E9404DC4F9AE02.roa
File: 8BAE1FFA6D1A11F0A4E9404DC4F9AE02.roa (raw, json)
Hash identifier: 9kr7YRweIjs9sYz5LEa5FyxtFuVknS+hpV3R4t44fNs=
Subject key identifier: 62:9F:BB:1E:EF:0A:16:C5:A5:22:13:F9:89:A4:F8:CD:CC:60:32:DF
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 11ED
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/8BAE1FFA6D1A11F0A4E9404DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:47:22 +0000
ROA not before: Wed 30 Jul 2025 07:55:23 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 20115
IP address blocks: 139.190.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4589 (0x11ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: Jul 30 07:55:23 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a489ba-8605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1f:4c:23:1e:3a:43:72:17:31:b3:03:ae:7f:
c0:36:64:99:30:04:75:05:6c:1f:28:16:7b:c9:b7:
49:e1:40:50:9d:5f:3d:32:21:63:76:0a:c6:3b:6b:
35:6c:92:22:63:ca:ee:3b:e0:7a:1c:ce:64:2e:f1:
c1:39:0e:31:b2:bd:c0:4a:21:8c:7e:0a:86:19:e5:
fe:1b:66:21:f5:16:4f:42:af:0e:50:d0:cf:c3:4a:
6c:27:fc:26:f4:8b:f6:e2:40:1e:7b:a6:5a:12:dd:
d6:27:e6:27:df:82:ad:c7:e5:83:00:12:e0:ba:dd:
d0:67:a5:da:7d:5f:d8:93:71:a8:29:31:92:45:bc:
7c:58:bd:f8:a9:6a:45:4a:e8:c8:76:ac:0d:75:3f:
fd:8d:9e:52:4a:60:69:47:69:2e:9b:4e:b2:41:2a:
76:93:23:28:a6:a8:84:fb:ed:c7:b3:35:69:4a:69:
8d:c4:05:11:05:ce:0d:6c:f2:42:17:99:c6:20:0d:
36:1c:2f:10:94:39:91:40:ff:e7:7f:71:90:2f:55:
37:2d:65:3a:dc:f1:1d:9f:68:4c:a4:9f:92:54:9c:
3c:12:0e:bf:f6:a9:9c:a6:07:9c:7c:3c:f9:e7:dd:
fc:b2:19:c9:2a:14:c4:1e:24:f3:11:22:08:a9:55:
ec:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9F:BB:1E:EF:0A:16:C5:A5:22:13:F9:89:A4:F8:CD:CC:60:32:DF
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/8BAE1FFA6D1A11F0A4E9404DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
139.190.192.0/19
Signature Algorithm: sha256WithRSAEncryption
43:d5:b1:9c:ee:c4:6d:e4:cb:97:d6:0e:0e:49:b4:2f:79:18:
18:bd:e6:37:a4:c6:e9:db:bf:b8:5f:e6:94:90:13:9e:aa:96:
7e:e1:d9:bd:77:df:56:38:43:1f:8a:f1:eb:4b:a1:95:59:6b:
19:f5:ec:1d:2b:b1:2c:de:e7:a6:7a:28:96:b3:1a:6e:e9:7a:
ea:02:39:1a:f3:e1:7a:a7:01:44:e6:b7:39:0e:97:43:60:32:
ee:a3:ae:ab:bf:0f:fa:e0:80:4d:d5:c7:dd:67:5d:c4:e9:22:
47:4b:ec:04:9f:6c:d5:0a:75:6e:48:bc:9e:53:73:05:b2:72:
d5:ed:4a:d4:c7:59:68:93:83:20:26:39:08:4e:5c:61:3b:ff:
42:7d:10:47:8b:a8:38:f4:66:b6:e9:35:28:c5:98:04:73:b6:
a7:64:6d:e2:d6:ac:5d:71:eb:2b:bc:95:2d:11:7e:a6:e9:3a:
35:39:ac:2a:5b:07:8a:f5:45:31:1e:30:bb:4e:4a:75:c5:1e:
3e:98:32:f5:22:7a:13:9d:41:92:2d:55:40:e4:91:fb:84:27:
f1:60:24:00:77:12:28:53:57:9c:a3:85:78:0f:3c:a8:50:4f:
cd:59:bb:d0:ba:6c:53:b6:8f:b0:21:0c:99:3c:a4:a7:a5:e4:
92:7e:f5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:32:10 2026 by rpki-client