
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89DB/BA118106639711F198FA81586E47A888/0BD94EE2639811F1AA3C489A6F47A888.roa
File: 0BD94EE2639811F1AA3C489A6F47A888.roa (raw, json)
Hash identifier: 356lmc2RqB5Sk367m6XImMAHTq0pPLU7qu0hjEZtvwQ=
Subject key identifier: 61:09:5D:11:CF:FD:A9:AF:A9:B2:C9:6A:40:86:36:0A:A2:64:19:28
Certificate issuer: /CN=A91F89DB/serialNumber=6327AFE1D08B372FF4FDFA0DC500C5AAF7399933
Certificate serial: 02
Authority key identifier: 63:27:AF:E1:D0:8B:37:2F:F4:FD:FA:0D:C5:00:C5:AA:F7:39:99:33
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yyev4dCLNy_0_foNxQDFqvc5mTM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F89DB/BA118106639711F198FA81586E47A888/0BD94EE2639811F1AA3C489A6F47A888.roa
Signing time: Tue 09 Jun 2026 00:13:31 +0000
ROA not before: Tue 09 Jun 2026 00:13:31 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 154703
IP address blocks: 162.4.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F89DB/BA118106639711F198FA81586E47A888/Yyev4dCLNy_0_foNxQDFqvc5mTM.crl
rsync://rpki.apnic.net/member_repository/A91F89DB/BA118106639711F198FA81586E47A888/Yyev4dCLNy_0_foNxQDFqvc5mTM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yyev4dCLNy_0_foNxQDFqvc5mTM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F89DB, serialNumber=6327AFE1D08B372FF4FDFA0DC500C5AAF7399933
Validity
Not Before: Jun 9 00:13:31 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a275aab-2f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a2:6c:ef:3c:af:3e:e1:c1:37:72:91:b1:88:
6e:cd:f6:43:fe:4e:6b:26:9b:03:9f:73:7c:91:4b:
85:e3:d9:ad:a6:b8:3b:2b:d9:33:83:2d:7d:96:ea:
a0:56:ad:11:81:6a:47:49:81:f6:49:50:46:16:28:
7d:78:a8:1e:19:05:49:e1:54:cf:e6:8d:fa:6d:f6:
23:46:30:b1:da:1c:7a:ff:76:9b:a6:9a:b0:99:4f:
8a:58:4b:98:d9:9d:4a:2d:12:0d:2e:a4:7a:68:4e:
a1:53:bc:5a:76:65:41:15:8d:f9:3c:6d:38:a5:dd:
17:e4:8a:12:5e:f2:4e:ee:90:82:4e:32:56:69:54:
39:13:98:2f:ec:d0:92:59:aa:12:21:5e:b4:2b:a1:
6d:a7:fc:b9:01:3a:fb:ae:e2:8b:b8:d2:d4:f1:9d:
5e:75:38:36:88:eb:d7:88:c1:fa:c4:90:ac:e3:cd:
73:5b:91:d8:24:cb:23:88:aa:ab:0b:07:27:96:80:
3f:e3:dd:26:21:8d:09:68:98:a0:e0:e0:18:68:4c:
cf:48:34:bd:46:4b:74:84:2e:30:a2:7b:bb:56:18:
0d:b2:be:8b:07:92:3f:6f:97:24:ee:78:3f:57:e8:
3d:df:4b:81:5b:fc:ea:34:6d:76:4b:93:da:eb:b3:
ee:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:09:5D:11:CF:FD:A9:AF:A9:B2:C9:6A:40:86:36:0A:A2:64:19:28
X509v3 Authority Key Identifier:
keyid:63:27:AF:E1:D0:8B:37:2F:F4:FD:FA:0D:C5:00:C5:AA:F7:39:99:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F89DB/BA118106639711F198FA81586E47A888/Yyev4dCLNy_0_foNxQDFqvc5mTM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yyev4dCLNy_0_foNxQDFqvc5mTM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89DB/BA118106639711F198FA81586E47A888/0BD94EE2639811F1AA3C489A6F47A888.roa
sbgp-ipAddrBlock: critical
IPv4:
162.4.220.0/24
Signature Algorithm: sha256WithRSAEncryption
19:02:d2:b5:4e:77:fe:cc:53:ac:03:b4:9b:be:d9:97:40:29:
eb:22:47:cf:43:cc:ce:37:f5:92:26:9a:4f:6d:97:ed:3d:09:
5e:96:0c:60:64:2c:3c:f1:f2:e7:22:da:91:dd:e4:1d:3d:ea:
8d:72:1e:c7:fd:6b:3b:e8:dc:b5:c4:1a:00:f8:e7:9d:f9:99:
27:72:08:aa:9b:08:74:ae:59:0a:09:fe:ca:ac:0c:2d:1e:ef:
05:d1:7e:cd:09:66:22:0b:55:18:29:7b:3a:b6:e2:ba:78:79:
ab:4c:64:f2:67:d9:b6:8a:35:43:77:e9:92:96:41:26:44:91:
0d:88:76:b2:c9:c8:2c:9c:7d:4e:0f:db:6f:53:2e:14:a5:08:
ab:78:11:07:2a:ff:94:b9:e3:4b:f0:4b:d6:fe:e9:d0:56:33:
84:3b:ce:25:91:02:8a:eb:04:b0:68:ff:f5:77:3f:c3:bd:23:
a2:6c:1b:a0:37:61:b3:4b:f5:46:4a:98:08:71:28:a7:da:49:
e1:e2:62:23:9c:7b:af:45:67:32:b4:62:ca:30:1e:ab:62:bf:
9b:a4:70:0b:84:27:51:c3:e6:89:e6:3f:98:d7:af:9c:af:00:
a7:8c:96:7c:1d:e4:88:5b:d7:a3:70:b8:19:c3:b9:12:45:97:
44:82:cf:9a
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
ODlEQjExMC8GA1UEBRMoNjMyN0FGRTFEMDhCMzcyRkY0RkRGQTBEQzUwMEM1QUFG
NzM5OTkzMzAeFw0yNjA2MDkwMDEzMzFaFw0yNzA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhMjc1YWFiLTJmNWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDHomzvPK8+4cE3cpGxiG7N9kP+TmsmmwOfc3yRS4Xj2a2muDsr2TODLX2W6qBW
rRGBakdJgfZJUEYWKH14qB4ZBUnhVM/mjfpt9iNGMLHaHHr/dpummrCZT4pYS5jZ
nUotEg0upHpoTqFTvFp2ZUEVjfk8bTil3RfkihJe8k7ukIJOMlZpVDkTmC/s0JJZ
qhIhXrQroW2n/LkBOvuu4ou40tTxnV51ODaI69eIwfrEkKzjzXNbkdgkyyOIqqsL
ByeWgD/j3SYhjQlomKDg4BhoTM9INL1GS3SELjCie7tWGA2yvosHkj9vlyTueD9X
6D3fS4Fb/Oo0bXZLk9rrs+6TAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUYQldEc/9
qa+psslqQIY2CqJkGSgwHwYDVR0jBBgwFoAUYyev4dCLNy/0/foNxQDFqvc5mTMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4OURCL0JBMTE4MTA2NjM5
NzExRjE5OEZBODE1ODZFNDdBODg4L1l5ZXY0ZENMTnlfMF9mb054UURGcXZjNW1U
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvWXlldjRkQ0xOeV8wX2ZvTnhRREZxdmM1bVRNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODlEQi9CQTExODEwNjYzOTcxMUYxOThGQTgxNTg2RTQ3QTg4OC8wQkQ5NEVFMjYz
OTgxMUYxQUEzQzQ4OUE2RjQ3QTg4OC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACiBNwwDQYJKoZIhvcNAQELBQADggEBABkC0rVOd/7MU6wDtJu+2ZdA
KesiR89DzM439ZImmk9tl+09CV6WDGBkLDzx8uci2pHd5B096o1yHsf9azvo3LXE
GgD45535mSdyCKqbCHSuWQoJ/sqsDC0e7wXRfs0JZiILVRgpezq24rp4eatMZPJn
2baKNUN36ZKWQSZEkQ2IdrLJyCycfU4P229TLhSlCKt4EQcq/5S540vwS9b+6dBW
M4Q7ziWRAorrBLBo//V3P8O9I6JsG6A3YbNL9UZKmAhxKKfaSeHiYiOce69FZzK0
YsowHqtiv5ukcAuEJ1HD5onmP5jXr5yvAKeMlnwd5Ihb16NwuBnDuRJFl0SCz5o=
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:52:07 2026 by rpki-client