
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/2D933FE8EF6711F0AD461381586F56BC.roa
File: 2D933FE8EF6711F0AD461381586F56BC.roa (raw, json)
Hash identifier: WqJt9JtnWtmIMdrj3ZxaQ9KA33C7zxy15e8t9pWBnaM=
Subject key identifier: 3C:D5:0D:14:F7:FC:C5:B5:D1:47:99:59:19:E8:2F:16:D0:5B:33:0C
Certificate issuer: /CN=A91E855B/serialNumber=F232408485CC1A4038BDB31BFAF3261540310950
Certificate serial: 1D
Authority key identifier: F2:32:40:84:85:CC:1A:40:38:BD:B3:1B:FA:F3:26:15:40:31:09:50
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8jJAhIXMGkA4vbMb-vMmFUAxCVA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/2D933FE8EF6711F0AD461381586F56BC.roa
Signing time: Sun 01 Mar 2026 05:44:49 +0000
ROA not before: Mon 12 Jan 2026 03:31:27 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 142192
IP address blocks: 192.232.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.crl
rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8jJAhIXMGkA4vbMb-vMmFUAxCVA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E855B, serialNumber=F232408485CC1A4038BDB31BFAF3261540310950
Validity
Not Before: Jan 12 03:31:27 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a3d251-74f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:83:d3:89:9b:61:98:0d:fc:cd:1c:fd:59:20:
64:46:a4:f0:e3:b0:3c:8f:cf:d5:91:1a:44:a3:be:
92:6e:0c:4d:04:16:f1:2f:26:dc:0e:1e:ce:c3:f7:
77:ab:02:8d:fa:61:b5:1d:95:2f:09:f4:f0:76:ec:
28:33:f7:e8:0c:d9:d1:46:37:a6:2b:49:a5:4a:36:
38:bb:3b:59:b7:01:89:68:62:d5:f0:6c:06:c7:a4:
68:7b:fd:6c:26:63:b9:d8:bc:69:e5:b4:19:d8:ff:
59:9e:33:a2:a2:16:c3:43:c8:3c:fa:11:4b:7d:af:
2f:50:b3:43:29:ce:89:aa:c0:cb:c5:93:35:2c:10:
30:cf:9f:36:82:b7:69:fb:d1:d8:84:7d:10:cc:7e:
45:04:8c:06:5a:b2:67:39:09:cc:07:45:11:a9:bd:
02:5f:8e:dc:41:47:3b:a1:28:81:dc:65:21:c8:b1:
5e:2a:47:b4:2d:fd:b6:41:22:a0:92:b4:1b:21:57:
0b:d6:5b:08:51:3c:e2:48:b6:d5:55:ad:6a:68:4c:
54:5e:c9:1a:e7:4a:fb:51:e2:07:f9:83:58:6f:18:
d4:0f:20:c3:e8:11:a3:66:81:27:1b:c8:ec:46:4a:
d0:a7:56:d9:42:23:3e:3d:d7:02:6a:6f:60:53:74:
fe:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D5:0D:14:F7:FC:C5:B5:D1:47:99:59:19:E8:2F:16:D0:5B:33:0C
X509v3 Authority Key Identifier:
keyid:F2:32:40:84:85:CC:1A:40:38:BD:B3:1B:FA:F3:26:15:40:31:09:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8jJAhIXMGkA4vbMb-vMmFUAxCVA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/2D933FE8EF6711F0AD461381586F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
192.232.62.0/23
Signature Algorithm: sha256WithRSAEncryption
d8:0b:ba:56:fd:88:42:e8:ba:d6:a1:5b:ec:9c:6e:0d:c1:b3:
ab:a1:02:c0:bc:be:a0:9b:77:f5:cc:11:d4:e3:68:c5:ba:9b:
3f:1a:38:01:ac:c1:42:06:3a:79:b2:6a:ed:b3:4b:23:46:e7:
cc:8c:4c:77:ab:7f:b8:13:bc:33:e8:c7:1c:1b:2a:dd:d4:ad:
72:11:66:1c:76:a4:e4:97:eb:3f:1f:55:bb:b8:4e:db:4e:74:
ba:86:56:c0:5f:2b:06:94:6d:51:38:11:97:83:a1:07:ce:66:
32:08:72:c2:33:f8:7c:2b:e6:3d:c7:f2:af:18:d7:88:b8:ad:
f1:75:0a:e4:fb:82:73:27:e2:b3:17:b0:72:10:6e:e8:7f:1b:
59:50:5c:db:12:69:93:00:45:f9:1c:34:5c:70:da:86:0c:8b:
5a:15:65:95:4f:fe:b3:ea:90:ad:23:12:0d:9b:8b:15:fb:ae:
7f:bd:49:a6:a2:9b:76:28:7d:f3:63:c9:9d:3c:1b:b1:90:15:
94:02:42:22:75:b0:27:a0:d2:e4:23:b6:54:e9:a3:28:60:c9:
94:f9:50:38:1c:dd:2b:06:11:9a:76:49:a2:f7:a4:15:38:64:
12:c0:68:cd:32:e4:3f:53:5c:aa:58:1f:96:b2:b6:c7:99:fb:
dd:b5:06:96
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
ODU1QjExMC8GA1UEBRMoRjIzMjQwODQ4NUNDMUE0MDM4QkRCMzFCRkFGMzI2MTU0
MDMxMDk1MDAeFw0yNjAxMTIwMzMxMjdaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNkMjUxLTc0ZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCsg9OJm2GYDfzNHP1ZIGRGpPDjsDyPz9WRGkSjvpJuDE0EFvEvJtwOHs7D93er
Ao36YbUdlS8J9PB27Cgz9+gM2dFGN6YrSaVKNji7O1m3AYloYtXwbAbHpGh7/Wwm
Y7nYvGnltBnY/1meM6KiFsNDyDz6EUt9ry9Qs0MpzomqwMvFkzUsEDDPnzaCt2n7
0diEfRDMfkUEjAZasmc5CcwHRRGpvQJfjtxBRzuhKIHcZSHIsV4qR7Qt/bZBIqCS
tBshVwvWWwhRPOJIttVVrWpoTFReyRrnSvtR4gf5g1hvGNQPIMPoEaNmgScbyOxG
StCnVtlCIz491wJqb2BTdP4ZAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUPNUNFPf8
xbXRR5lZGegvFtBbMwwwHwYDVR0jBBgwFoAU8jJAhIXMGkA4vbMb+vMmFUAxCVAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4NTVCLzY4MDVDMTI0RUY2
NjExRjA4MzNEN0IyNjU4NkY1NkJDLzhqSkFoSVhNR2tBNHZiTWItdk1tRlVBeENW
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvOGpKQWhJWE1Ha0E0dmJNYi12TW1GVUF4Q1ZBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
ODU1Qi82ODA1QzEyNEVGNjYxMUYwODMzRDdCMjY1ODZGNTZCQy8yRDkzM0ZFOEVG
NjcxMUYwQUQ0NjEzODE1ODZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAHA6D4wDQYJKoZIhvcNAQELBQADggEBANgLulb9iELoutahW+ycbg3B
s6uhAsC8vqCbd/XMEdTjaMW6mz8aOAGswUIGOnmyau2zSyNG58yMTHerf7gTvDPo
xxwbKt3UrXIRZhx2pOSX6z8fVbu4TttOdLqGVsBfKwaUbVE4EZeDoQfOZjIIcsIz
+Hwr5j3H8q8Y14i4rfF1CuT7gnMn4rMXsHIQbuh/G1lQXNsSaZMARfkcNFxw2oYM
i1oVZZVP/rPqkK0jEg2bixX7rn+9Saaim3YoffNjyZ08G7GQFZQCQiJ1sCeg0uQj
tlTpoyhgyZT5UDgc3SsGEZp2SaL3pBU4ZBLAaM0y5D9TXKpYH5aytseZ+921BpY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:40:50 2026 by rpki-client