
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/19B0BAAE1CE611EBB543881CC4F9AE02.roa
File: 19B0BAAE1CE611EBB543881CC4F9AE02.roa (raw, json)
Hash identifier: x1jD2hg6E8urDPutIfNWsExPrrmq8yEETqPUKu1cNM8=
Subject key identifier: DC:4B:20:EB:41:13:8A:2C:5B:4C:C2:7C:3B:76:88:FD:EC:1E:63:76
Certificate issuer: /CN=A91F59A6/serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64
Certificate serial: 091A
Authority key identifier: E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/19B0BAAE1CE611EBB543881CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:43:25 +0000
ROA not before: Thu 22 Jan 2026 18:15:01 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 14630
IP address blocks: 206.209.76.0/24 maxlen: 24
206.209.77.0/24 maxlen: 24
206.209.78.0/24 maxlen: 24
206.209.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl
rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2330 (0x91a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F59A6, serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64
Validity
Not Before: Jan 22 18:15:01 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a46cad-2bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a5:89:7c:f7:c9:55:1d:41:46:8f:b6:33:fe:
76:77:cd:9d:ea:b0:e4:4b:81:a4:ce:39:08:90:a8:
8a:b4:88:f7:da:d8:bc:79:99:1b:46:5c:ec:c5:31:
b0:6f:2a:17:3b:3b:af:3d:b6:1e:f3:20:9e:4c:32:
56:10:a9:64:06:8f:eb:cb:ce:18:30:09:48:1c:b8:
d9:1b:b5:7d:fc:dd:7e:3d:9d:a1:a8:9a:d7:7d:ed:
b5:c6:60:ef:60:21:fe:91:4f:05:f5:54:86:a1:7c:
0b:e2:8f:87:ed:e9:e0:e0:83:06:5f:4b:b5:dc:94:
7b:6a:67:97:5a:1c:80:d1:d6:48:43:29:48:be:4d:
24:26:a9:4d:b9:78:a9:19:0f:c1:df:7e:7b:9d:28:
f0:97:81:70:94:20:05:87:ec:20:41:36:60:16:33:
19:c7:ee:69:f5:58:68:6a:37:79:5b:83:63:49:e7:
a0:03:fe:68:da:7b:1c:d8:28:a3:5c:52:f5:fb:75:
c1:42:95:c2:60:2a:53:9b:f9:b8:e0:d6:dd:c6:c1:
11:a1:e6:d1:76:a9:30:6d:a1:ba:22:e9:fb:84:2e:
61:3c:de:fa:6c:f7:d6:3f:fb:55:88:3d:7c:a1:66:
c4:83:6f:09:fb:d9:1c:6b:4c:44:51:c7:d9:b2:bc:
b2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4B:20:EB:41:13:8A:2C:5B:4C:C2:7C:3B:76:88:FD:EC:1E:63:76
X509v3 Authority Key Identifier:
keyid:E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/19B0BAAE1CE611EBB543881CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
206.209.76.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:b2:a6:2f:81:dd:21:9f:5e:ee:8e:52:81:e2:4e:3f:01:b8:
8d:f0:f8:d0:2b:fa:c4:6e:2b:6a:a5:c7:a7:3d:98:da:cb:8e:
b0:41:13:7b:79:8c:b0:e2:b5:3b:c6:0f:a7:a1:a2:e8:c8:a6:
7b:3f:da:84:07:6c:24:0b:bf:cf:8b:7e:6a:fa:7a:16:40:ed:
a9:1f:a4:97:a9:7e:d0:cf:5b:3c:14:4a:d9:60:7d:9d:1a:98:
a7:c5:e0:12:f0:92:f9:ab:d1:8d:02:d6:6a:32:81:ee:8d:3b:
4d:8c:99:c5:78:b5:0c:13:20:c3:6a:b8:e6:f5:68:48:14:6c:
d3:f0:07:c4:02:b0:5e:0e:b2:bd:63:de:84:d2:3c:11:79:f1:
c6:d6:11:43:27:96:3f:9e:64:76:7f:09:a4:36:58:e2:c0:95:
6f:37:10:95:e2:8e:0d:c0:70:d7:75:a3:6e:21:37:de:57:0f:
db:89:d1:10:84:34:8c:24:d2:f4:59:e7:bd:4d:d7:61:04:c8:
10:de:27:5e:ee:f4:c9:99:2c:fa:af:6a:ed:78:d6:84:01:30:
28:c4:40:42:fb:5f:17:5e:f8:51:46:ab:37:3b:f4:d1:c1:4c:
ec:61:de:10:d1:d8:7d:d3:97:45:3a:af:85:3b:a6:ec:f7:51:
94:f3:bf:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:29:24 2026 by rpki-client