
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/64E2CC00BFB211F094613139C4F9AE02.roa
File: 64E2CC00BFB211F094613139C4F9AE02.roa (raw, json)
Hash identifier: uqxvGfkkEwxN1ipcoAFjDSEy+9ravgG1gJhps3cD1jY=
Subject key identifier: 66:E5:20:7E:A2:2D:F2:A1:96:E5:E1:10:C8:83:B7:8B:7B:10:69:85
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 2D24
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/64E2CC00BFB211F094613139C4F9AE02.roa
Signing time: Sun 01 Mar 2026 21:27:13 +0000
ROA not before: Wed 12 Nov 2025 10:28:56 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 43.254.12.0/22 maxlen: 24
115.167.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11556 (0x2d24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Nov 12 10:28:56 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a4af31-d3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:73:c6:ee:fb:65:fc:43:8c:32:81:e1:d9:
85:ef:49:13:0f:81:5d:dc:90:c4:27:04:e2:2d:ad:
c5:a4:17:d0:a5:64:2a:9a:cd:ca:49:ab:d5:da:72:
12:ca:f9:0d:a9:ba:af:fb:81:a0:97:cc:a8:2c:73:
d4:a3:1f:22:28:2a:32:e4:8a:df:85:d4:ad:c9:be:
37:22:fa:22:09:6a:05:d9:d5:38:55:dd:e8:04:b0:
ab:d2:c5:c3:a9:06:f7:2e:03:cd:95:91:64:63:d9:
ca:04:4f:35:a1:30:cd:15:c9:f2:5b:eb:67:fc:5a:
41:0c:38:c8:dc:f2:8d:dc:71:79:0a:2d:dd:16:25:
c4:5b:3e:0a:82:19:fa:92:68:08:9f:28:45:51:dc:
1d:a0:c3:11:42:fb:8a:ec:dc:d2:b6:40:9b:18:af:
f1:7b:6c:da:08:70:a6:b5:2c:f3:04:f1:f2:2f:d3:
92:c0:66:20:85:8f:ed:b9:eb:06:19:2e:29:f6:9f:
93:4e:8d:23:df:cc:db:9f:94:3f:f7:8c:57:3a:50:
33:cd:3a:80:32:b6:99:37:d7:5a:57:ac:df:83:73:
a1:c8:18:03:aa:a2:03:b8:3a:a8:df:c6:2e:40:2f:
10:1c:60:41:f0:7f:b8:52:96:de:de:18:fc:e5:f9:
09:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E5:20:7E:A2:2D:F2:A1:96:E5:E1:10:C8:83:B7:8B:7B:10:69:85
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/64E2CC00BFB211F094613139C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.254.12.0/22
115.167.108.0/22
Signature Algorithm: sha256WithRSAEncryption
32:c0:ea:87:20:7c:db:91:0f:65:38:77:cd:82:83:40:6a:6d:
3b:e3:89:16:d3:1d:77:db:1b:87:60:7a:c0:7b:0c:27:a8:65:
9b:e5:9f:80:00:21:9f:41:e3:5e:8b:6f:3c:f2:f0:2d:1a:62:
38:d5:d0:0e:6f:12:d2:79:34:13:e8:17:72:7c:67:9b:2c:f3:
59:96:ee:ca:92:ca:ab:42:a5:29:77:b5:12:81:70:2d:ea:3a:
5e:81:77:b1:b4:11:48:94:3c:9b:a5:6d:09:4c:b9:36:86:07:
7c:40:b0:43:bf:0e:74:41:1d:bd:1a:17:b4:be:48:4e:16:e4:
ac:4b:cf:4a:91:ec:44:a7:83:00:de:e2:1f:10:4a:60:08:e3:
97:63:68:f1:b0:94:2b:c4:9a:2d:ef:1b:62:1c:6d:ef:ca:01:
9f:06:47:1e:f4:38:02:32:c4:f5:ee:ac:3e:96:1f:df:bc:77:
ac:99:a3:2e:f1:de:8a:17:45:4c:c0:f4:c6:2e:b4:80:5e:88:
53:52:f6:a2:71:34:0f:35:c5:eb:59:cb:ad:1e:df:a0:74:a0:
8d:cb:6d:b1:08:c7:c9:65:bb:89:21:a1:a6:03:e6:14:ff:d3:
78:f7:63:5a:9a:23:d9:90:42:d4:6a:04:57:04:2a:ea:e1:aa:
21:e6:b6:6d
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICLSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjUxMTEyMTAyODU2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YWYzMS1kM2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuDNzxu77ZfxDjDKB4dmF70kTD4Fd3JDEJwTiLa3FpBfQpWQqms3KSavV2nIS
yvkNqbqv+4Ggl8yoLHPUox8iKCoy5IrfhdStyb43IvoiCWoF2dU4Vd3oBLCr0sXD
qQb3LgPNlZFkY9nKBE81oTDNFcnyW+tn/FpBDDjI3PKN3HF5Ci3dFiXEWz4Kghn6
kmgInyhFUdwdoMMRQvuK7NzStkCbGK/xe2zaCHCmtSzzBPHyL9OSwGYghY/tuesG
GS4p9p+TTo0j38zbn5Q/94xXOlAzzTqAMraZN9daV6zfg3OhyBgDqqIDuDqo38Yu
QC8QHGBB8H+4Upbe3hj85fkJsQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFGblIH6i
LfKhluXhEMiDt4t7EGmFMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNjRFMkNDMDBC
RkIyMTFGMDk0NjEzMTM5QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCK/4MAwQCc6dsMA0GCSqGSIb3DQEBCwUAA4IBAQAywOqHIHzbkQ9l
OHfNgoNAam0744kW0x132xuHYHrAewwnqGWb5Z+AACGfQeNei2888vAtGmI41dAO
bxLSeTQT6BdyfGebLPNZlu7KksqrQqUpd7USgXAt6jpegXextBFIlDybpW0JTLk2
hgd8QLBDvw50QR29Ghe0vkhOFuSsS89KkexEp4MA3uIfEEpgCOOXY2jxsJQrxJot
7xtiHG3vygGfBkce9DgCMsT17qw+lh/fvHesmaMu8d6KF0VMwPTGLrSAXohTUvai
cTQPNcXrWcutHt+gdKCNy22xCMfJZbuJIaGmA+YU/9N492NamiPZkELUagRXBCrq
4aoh5rZt
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:12:26 2026 by rpki-client