
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/505CFB7465D211EFB4348E63C4F9AE02.roa
File: 505CFB7465D211EFB4348E63C4F9AE02.roa (raw, json)
Hash identifier: AAXHRkLrHoJyCDkbsgHI2KwqLCN7VUz7VH0M3ar0Syw=
Subject key identifier: 98:C5:F1:43:86:4E:93:1E:21:55:4D:28:29:9D:7B:81:3D:F8:33:52
Certificate issuer: /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial: 08CF
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/505CFB7465D211EFB4348E63C4F9AE02.roa
Signing time: Tue 28 Jul 2026 22:43:55 +0000
ROA not before: Tue 28 Jul 2026 22:43:55 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 4229
IP address blocks: 162.128.0.0/23 maxlen: 23
162.128.2.0/23 maxlen: 24
162.128.41.0/24 maxlen: 24
162.128.42.0/24 maxlen: 24
162.128.226.0/24 maxlen: 24
162.128.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 22:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2255 (0x8cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Validity
Not Before: Jul 28 22:43:55 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a6930ab-e833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:81:e6:e3:73:36:12:a4:7e:9c:cf:3e:81:
cf:a6:9b:d8:69:53:30:a5:2c:ca:45:99:7f:38:86:
58:7d:e2:ed:e7:67:56:51:1e:e6:82:d8:b0:8e:c7:
48:df:1b:e3:4f:b7:2d:ac:e7:74:f0:2c:8c:02:d2:
8e:d1:60:0d:89:24:6f:5a:95:55:dc:a8:45:4f:a6:
a8:74:f3:8d:06:0d:c3:d3:37:99:f4:af:82:20:ef:
e0:ac:a8:c6:8f:2d:3e:5c:88:09:0c:40:98:a8:af:
c2:fb:14:1d:61:ed:1e:6c:52:0c:f3:c9:6d:e0:28:
40:be:59:d8:1b:cc:2e:77:df:3f:57:b4:5f:96:f5:
2d:bf:8e:c4:c8:cd:4d:e2:fb:d7:61:73:bd:77:3a:
50:4e:d7:31:7e:d2:ba:fa:b0:81:ca:50:23:10:3c:
8c:3c:3a:55:68:08:a4:8c:58:af:1c:be:30:10:21:
ac:d5:24:a7:86:08:42:ec:e6:d5:5f:11:b9:8e:74:
88:b1:0d:17:4a:2e:bd:b5:2a:13:2d:e0:b7:8c:78:
e7:d3:7d:36:43:64:38:09:3c:45:bf:0c:17:97:6c:
ba:a7:a8:9a:3f:54:a6:fb:7d:9e:6c:12:f0:03:02:
6c:03:29:73:38:e6:10:ce:ae:bc:fa:09:c9:d8:38:
58:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C5:F1:43:86:4E:93:1E:21:55:4D:28:29:9D:7B:81:3D:F8:33:52
X509v3 Authority Key Identifier:
keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/505CFB7465D211EFB4348E63C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
162.128.0.0/22
162.128.41.0-162.128.42.255
162.128.226.0/23
Signature Algorithm: sha256WithRSAEncryption
24:0a:b5:42:de:bb:5d:d7:a7:ee:ae:1a:df:81:23:f7:1a:9e:
25:02:60:0c:4e:b2:6d:8f:e3:9e:e7:cc:6c:8f:3b:a3:2c:08:
49:bc:0c:03:8c:7c:c4:66:a8:b8:8c:fe:94:0d:20:17:8e:dc:
2a:e4:4a:26:9a:a5:a3:f6:de:02:28:02:70:8f:53:96:91:7e:
9b:2d:63:db:21:72:cd:0a:5c:a5:2e:8c:b9:c7:b4:a3:de:39:
2b:63:47:aa:30:2b:14:aa:9e:e9:7a:5b:7c:bf:87:9c:34:3d:
73:27:01:d6:56:2f:eb:48:5a:58:7e:98:83:da:e5:2c:8c:ce:
67:fa:bc:16:02:47:ff:0c:22:d0:c5:21:b4:54:2f:24:04:94:
8e:0b:a3:5d:88:d2:c0:07:76:c8:2a:4d:ea:c7:dd:e2:7c:62:
38:50:07:5c:8f:de:9c:c5:a5:0e:ec:14:01:4e:63:a8:b7:40:
97:71:1d:ef:ab:73:53:3c:0d:93:0b:47:e5:e5:f8:be:9b:c8:
0f:5d:58:a3:c0:a8:3a:d7:37:ea:dc:2d:57:c9:ea:71:a4:17:
0d:60:af:93:12:e1:5e:7b:03:88:6e:b1:70:50:99:8f:ce:57:
3c:ac:45:0d:89:df:18:d2:00:ff:1a:24:b8:d8:49:9d:25:fa:
09:36:9a:30
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgICCM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RURCMzcxMTAvBgNVBAUTKDk1RkVCRTkzQTMzQTMzOTRCRDFGNjBEQ0JCRERCOUZE
RTA3MkI3RjMwHhcNMjYwNzI4MjI0MzU1WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTY5MzBhYi1lODMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtISB5uNzNhKkfpzPPoHPppvYaVMwpSzKRZl/OIZYfeLt52dWUR7mgtiwjsdI
3xvjT7ctrOd08CyMAtKO0WANiSRvWpVV3KhFT6aodPONBg3D0zeZ9K+CIO/grKjG
jy0+XIgJDECYqK/C+xQdYe0ebFIM88lt4ChAvlnYG8wud98/V7RflvUtv47EyM1N
4vvXYXO9dzpQTtcxftK6+rCBylAjEDyMPDpVaAikjFivHL4wECGs1SSnhghC7ObV
XxG5jnSIsQ0XSi69tSoTLeC3jHjn0302Q2Q4CTxFvwwXl2y6p6iaP1Sm+32ebBLw
AwJsAylzOOYQzq68+gnJ2DhYawIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFJjF8UOG
TpMeIVVNKCmde4E9+DNSMB8GA1UdIwQYMBaAFJX+vpOjOjOUvR9g3Lvduf3gcrfz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREIzNy80REU2MzVFMDc4
QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi9sZjYtazZNNk01UzlIMkRjdTkyNV9lQnl0
X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2xmNi1rNk02TTVTOUgyRGN1OTI1X2VCeXRfTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RURCMzcvNERFNjM1RTA3OEEwMTFFQjk1MEQzMTc1QzRGOUFFMDIvNTA1Q0ZCNzQ2
NUQyMTFFRkI0MzQ4RTYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg
BAIAATAaAwQCooAAMAwDBACigCkDBACigCoDBAGigOIwDQYJKoZIhvcNAQELBQAD
ggEBACQKtULeu13Xp+6uGt+BI/caniUCYAxOsm2P457nzGyPO6MsCEm8DAOMfMRm
qLiM/pQNIBeO3CrkSiaapaP23gIoAnCPU5aRfpstY9shcs0KXKUujLnHtKPeOStj
R6owKxSqnul6W3y/h5w0PXMnAdZWL+tIWlh+mIPa5SyMzmf6vBYCR/8MItDFIbRU
LyQElI4Lo12I0sAHdsgqTerH3eJ8YjhQB1yP3pzFpQ7sFAFOY6i3QJdxHe+rc1M8
DZMLR+Xl+L6byA9dWKPAqDrXN+rcLVfJ6nGkFw1gr5MS4V57A4husXBQmY/OVzys
RQ2J3xjSAP8aJLjYSZ0l+gk2mjA=
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:13:22 2026 by rpki-client