
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E4B2CBC84DCF11F1A09241CBB4833773.roa
File: E4B2CBC84DCF11F1A09241CBB4833773.roa (raw, json)
Hash identifier: nRrOpl9AkaVuVms4pPhn7lCd1jJSdN/lrhOYjM4aaSA=
Subject key identifier: 74:61:E4:8E:66:8D:93:18:52:D6:44:A7:8D:F0:BA:1E:C7:72:E4:0D
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 2E26
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E4B2CBC84DCF11F1A09241CBB4833773.roa
Signing time: Thu 04 Jun 2026 20:26:31 +0000
ROA not before: Thu 04 Jun 2026 20:26:31 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 43.254.12.0/22 maxlen: 24
115.167.68.0/22 maxlen: 22
115.167.108.0/22 maxlen: 24
115.167.126.0/24 maxlen: 24
115.167.127.0/24 maxlen: 24
175.110.68.0/22 maxlen: 24
175.110.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:13:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11814 (0x2e26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jun 4 20:26:31 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a21df77-c57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c9:50:ca:cb:54:35:62:50:cb:4f:2f:17:08:
9a:7b:98:d8:36:e3:a7:04:fb:b1:d2:96:0f:c4:fc:
3d:ab:6d:37:22:ae:88:26:cc:d5:00:76:a6:31:4a:
48:3d:68:37:98:8a:e5:70:00:1f:9c:d4:63:8c:3f:
c0:9d:5a:7c:25:ea:ac:6b:65:5b:1e:fd:dc:ba:b7:
86:6a:2e:af:29:f2:61:85:2c:c1:49:15:34:5e:56:
34:cf:2f:fa:e5:40:b2:84:ee:50:75:c9:f6:7d:68:
2c:3d:2b:73:c8:3c:d3:92:1e:94:ab:6d:ca:18:bd:
c6:cd:55:f5:10:31:72:2b:7b:0f:92:5c:f6:19:e8:
3d:bc:9a:2f:b3:90:e0:30:30:f3:8f:4f:6d:36:b3:
0a:b3:bf:28:d8:f6:40:b2:5b:a6:f7:80:35:66:3b:
46:50:d2:9b:5b:47:e9:17:a7:c4:ce:a7:cd:00:0d:
53:38:73:26:61:47:71:ef:81:95:03:c1:80:37:09:
44:90:e7:a4:47:5b:0f:0d:40:9d:db:1d:86:e4:04:
2c:5b:39:fc:4b:ae:25:16:db:c2:dd:ad:cb:ea:cf:
f5:96:12:13:fe:5c:40:69:3c:31:a4:90:18:20:d4:
29:4c:75:bd:29:b3:14:9f:30:02:82:7d:24:8d:60:
e4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:61:E4:8E:66:8D:93:18:52:D6:44:A7:8D:F0:BA:1E:C7:72:E4:0D
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E4B2CBC84DCF11F1A09241CBB4833773.roa
sbgp-ipAddrBlock: critical
IPv4:
43.254.12.0/22
115.167.68.0/22
115.167.108.0/22
115.167.126.0/23
175.110.68.0/22
175.110.92.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:43:21:11:d9:72:e3:db:3e:19:24:19:f3:14:df:4f:49:88:
c1:a8:75:1d:d4:79:cb:2e:27:31:5a:e0:e8:09:9a:40:47:9d:
0c:85:56:9f:6e:b8:89:18:bf:10:ae:cc:e4:72:2c:5c:89:54:
a0:74:85:73:9e:38:15:55:f1:a9:d1:ea:7f:9e:67:06:52:bc:
ae:3b:d6:4a:61:cb:51:38:f7:4a:e7:8f:78:6d:13:63:12:cf:
0b:c1:df:a5:65:c8:ce:de:b6:bd:04:89:d7:38:78:b5:c9:02:
75:be:5c:a7:e1:ce:d0:37:2e:1f:14:53:0a:d0:63:01:aa:36:
8a:70:27:6a:0f:22:f1:05:a8:19:83:61:c8:f6:1a:b4:33:d1:
f9:ad:db:2f:7d:f2:d2:61:fb:bb:ff:e6:5f:b9:a2:3a:4d:7d:
b9:c6:01:f9:57:15:e7:e1:71:c5:e4:75:39:f7:b8:74:01:8b:
b0:e8:5d:21:fa:97:af:38:94:41:02:77:28:4e:cb:55:46:35:
58:0e:4a:d2:c1:d2:58:b3:f6:9a:30:4f:a9:6b:fb:c3:8c:15:
ef:78:f2:c0:55:5d:df:bc:1c:c0:27:10:f6:3d:68:cc:78:8f:
04:4a:ef:b6:49:49:3a:36:22:43:be:4d:e5:64:c1:99:2b:55:
e1:22:62:95
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgICLiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjYwNjA0MjAyNjMxWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTIxZGY3Ny1jNTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvclQystUNWJQy08vFwiae5jYNuOnBPux0pYPxPw9q203Iq6IJszVAHamMUpI
PWg3mIrlcAAfnNRjjD/AnVp8Jeqsa2VbHv3cureGai6vKfJhhSzBSRU0XlY0zy/6
5UCyhO5Qdcn2fWgsPStzyDzTkh6Uq23KGL3GzVX1EDFyK3sPklz2Geg9vJovs5Dg
MDDzj09tNrMKs78o2PZAslum94A1ZjtGUNKbW0fpF6fEzqfNAA1TOHMmYUdx74GV
A8GANwlEkOekR1sPDUCd2x2G5AQsWzn8S64lFtvC3a3L6s/1lhIT/lxAaTwxpJAY
INQpTHW9KbMUnzACgn0kjWDkCwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFHRh5I5m
jZMYUtZEp43wuh7HcuQNMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvRTRCMkNCQzg0
RENGMTFGMUEwOTI0MUNCQjQ4MzM3NzMucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAq
BAIAATAkAwQCK/4MAwQCc6dEAwQCc6dsAwQBc6d+AwQCr25EAwQCr25cMA0GCSqG
SIb3DQEBCwUAA4IBAQCNQyER2XLj2z4ZJBnzFN9PSYjBqHUd1HnLLicxWuDoCZpA
R50MhVafbriJGL8QrszkcixciVSgdIVznjgVVfGp0ep/nmcGUryuO9ZKYctROPdK
5494bRNjEs8Lwd+lZcjO3ra9BInXOHi1yQJ1vlyn4c7QNy4fFFMK0GMBqjaKcCdq
DyLxBagZg2HI9hq0M9H5rdsvffLSYfu7/+ZfuaI6TX25xgH5VxXn4XHF5HU597h0
AYuw6F0h+pevOJRBAncoTstVRjVYDkrSwdJYs/aaME+pa/vDjBXvePLAVV3fvBzA
JxD2PWjMeI8ESu+2SUk6NiJDvk3lZMGZK1XhImKV
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:39:49 2026 by rpki-client