
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/05054224D8E411E9BEB7986DC4F9AE02.roa
File: 05054224D8E411E9BEB7986DC4F9AE02.roa (raw, json)
Hash identifier: ob3kyKb+k6DfPg+34w85RGonL9slb2GFkKFVzFEICJQ=
Subject key identifier: 6F:58:2A:CA:F8:25:F6:E1:62:13:60:A4:AB:AE:30:8A:01:96:FA:C2
Certificate issuer: /CN=A91E7BC4/serialNumber=A2F6F661312C95BF05A0B5230B1371D4622FD627
Certificate serial: 0DD4
Authority key identifier: A2:F6:F6:61:31:2C:95:BF:05:A0:B5:23:0B:13:71:D4:62:2F:D6:27
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/05054224D8E411E9BEB7986DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:39:17 +0000
ROA not before: Tue 24 Feb 2026 18:15:22 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 9930
IP address blocks: 161.142.0.0/16 maxlen: 19
192.228.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.crl
rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:18:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3540 (0xdd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7BC4, serialNumber=A2F6F661312C95BF05A0B5230B1371D4622FD627
Validity
Not Before: Feb 24 18:15:22 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a44f95-0035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b6:84:45:e6:f7:f9:40:77:84:20:45:26:b2:
c0:32:46:0d:82:d2:d3:04:6e:60:b2:01:92:ed:61:
94:49:87:a6:c0:85:30:27:42:b2:7a:2e:ed:7f:95:
53:e5:ce:6d:70:58:ed:fc:5a:7a:43:6f:61:f5:37:
56:d2:fa:66:70:6e:ff:16:dd:95:e6:bb:46:88:61:
3f:9a:2c:9a:1b:13:b3:91:2b:04:7e:bd:7d:de:61:
83:85:99:5e:82:62:fc:51:38:a6:b5:d5:32:ff:04:
c6:ee:00:16:b7:a9:66:df:f7:61:58:5c:dc:ad:4b:
82:4b:e0:0f:9b:49:c9:cb:57:a5:da:be:f1:e2:74:
6a:3d:9d:de:4c:15:d1:f8:fc:21:4c:76:18:fb:5a:
3d:33:a0:24:85:a1:7d:cc:1d:d6:3c:0c:93:3b:c1:
e6:d1:85:3f:b4:8a:6b:d0:b1:4f:81:b4:b2:b9:fc:
d0:6b:40:44:61:89:87:c4:38:3f:64:31:72:ed:3e:
7e:40:19:c5:8f:46:b5:a6:63:f4:aa:c3:17:3a:9f:
b6:89:41:0b:2f:bd:22:1c:14:33:fd:46:16:7b:e0:
7a:99:14:8f:09:47:6a:54:05:b8:cd:da:25:be:fe:
88:f0:7f:f4:2d:b0:a2:6d:ec:73:d9:81:40:bc:cf:
fc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:58:2A:CA:F8:25:F6:E1:62:13:60:A4:AB:AE:30:8A:01:96:FA:C2
X509v3 Authority Key Identifier:
keyid:A2:F6:F6:61:31:2C:95:BF:05:A0:B5:23:0B:13:71:D4:62:2F:D6:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/05054224D8E411E9BEB7986DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
161.142.0.0/16
192.228.128.0/17
Signature Algorithm: sha256WithRSAEncryption
21:77:2b:84:a9:b7:b4:e8:0b:82:27:63:ac:0a:81:c6:4e:df:
9d:80:00:22:81:13:bd:19:53:a2:6c:97:97:a5:d3:c7:c5:42:
50:3b:a0:de:25:af:a5:09:61:cd:7f:7f:7c:b1:b9:c7:2e:5c:
56:c4:87:31:8c:9b:f6:d6:ac:52:f4:12:5e:59:30:9a:2b:dd:
27:40:52:cf:d3:4e:96:5f:48:ef:21:cf:4f:76:ef:4e:24:8f:
56:53:3e:02:e6:99:3e:b3:00:f0:7e:8c:c8:7c:92:cd:8d:e7:
10:59:b1:6c:d8:ba:87:74:92:3f:75:7c:47:49:6f:14:9b:13:
4e:ae:25:9a:b5:2a:4b:e2:b5:e2:dd:72:5c:56:d8:71:df:87:
ee:f2:63:e2:1c:dd:b7:00:c6:73:e5:87:b6:69:65:ee:d9:f6:
1a:58:d5:61:d7:31:03:5b:7d:bf:59:81:de:3b:80:b0:f1:ca:
c4:af:fa:12:3a:7e:5e:1d:ad:01:a4:29:56:2b:24:2a:8c:08:
51:94:a8:27:bd:e4:f3:23:b1:eb:3c:a1:6d:3b:3b:05:70:35:
30:48:1a:3b:99:cb:a7:95:b9:2c:ef:20:cd:3d:5c:b1:a3:05:
8a:a8:7b:76:41:24:2d:63:60:62:f5:8c:12:d0:6e:2c:59:ba:
3c:6a:87:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:39:53 2026 by rpki-client