
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/B92859F46EF611F0BEAA5130C4F9AE02.roa
File: B92859F46EF611F0BEAA5130C4F9AE02.roa (raw, json)
Hash identifier: KxrlmGdN300w3GzZo2NWvwcNeTUF77b4vkK7jJtow4Y=
Subject key identifier: 65:EE:1E:12:66:ED:89:64:A7:39:02:44:84:9A:CE:FE:84:2B:2A:A3
Certificate issuer: /CN=A91FAB3C/serialNumber=826B4474BC6F4F3BE40B5E7511F105CAE7FE8C0C
Certificate serial: 0C
Authority key identifier: 82:6B:44:74:BC:6F:4F:3B:E4:0B:5E:75:11:F1:05:CA:E7:FE:8C:0C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/B92859F46EF611F0BEAA5130C4F9AE02.roa
Signing time: Fri 01 Aug 2025 16:43:59 +0000
ROA not before: Fri 01 Aug 2025 16:43:59 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 134489
IP address blocks: 192.188.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.crl
rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 07:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAB3C, serialNumber=826B4474BC6F4F3BE40B5E7511F105CAE7FE8C0C
Validity
Not Before: Aug 1 16:43:59 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=688ceecf-f125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:45:45:3f:b9:cb:b2:72:e3:0b:80:68:eb:9a:
01:33:23:44:67:1f:f2:48:3e:e1:24:c9:9a:37:ba:
9c:69:42:19:53:a0:f6:e8:d9:91:cc:8c:0c:2b:af:
05:97:80:2c:83:8f:42:39:60:f5:64:33:26:48:69:
e4:b7:8e:1d:64:92:4f:c0:8f:8a:d3:80:c8:0b:77:
b4:02:c6:db:b3:f8:bc:a7:c2:0f:80:d3:0f:55:a3:
df:c9:f3:04:a6:f5:03:d4:72:7c:2c:4c:74:fc:98:
c7:be:89:ab:6f:3b:aa:2c:04:26:45:1c:c2:85:84:
ac:14:24:7b:0a:01:b6:98:04:3b:72:64:d5:b6:a7:
46:23:e6:8b:62:cb:09:81:52:6e:5b:fe:b4:82:3d:
d1:ba:29:de:95:7f:f0:19:92:8e:4d:4b:44:2c:43:
3a:59:70:ae:76:14:e0:86:38:77:ee:32:71:07:f7:
28:18:99:63:47:5e:11:13:57:66:fa:f1:2b:86:64:
63:23:ea:57:80:9e:19:a1:c2:41:62:d5:eb:b1:44:
75:4b:9e:4e:98:86:38:4a:91:1e:97:65:b6:bc:c5:
7b:42:d2:fd:9f:06:db:74:e4:8a:15:0a:ac:dd:b6:
9c:9d:4c:d7:15:d4:40:3f:b0:21:8c:36:b8:1a:11:
fe:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EE:1E:12:66:ED:89:64:A7:39:02:44:84:9A:CE:FE:84:2B:2A:A3
X509v3 Authority Key Identifier:
keyid:82:6B:44:74:BC:6F:4F:3B:E4:0B:5E:75:11:F1:05:CA:E7:FE:8C:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/B92859F46EF611F0BEAA5130C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.188.87.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:52:09:22:38:d3:11:2a:45:bf:59:36:a4:b7:7d:35:7f:ce:
d7:4d:36:94:21:3c:0c:fb:04:98:1b:c7:4e:b7:04:77:35:ac:
8b:0f:ca:cc:d2:91:30:84:a3:73:78:6a:bc:1b:02:7e:99:a6:
2b:ed:da:53:d8:48:e1:e6:22:22:05:a0:d7:55:fe:1a:12:b8:
1d:2e:1f:cf:f5:43:3d:c5:8e:a9:9d:f7:62:16:d1:b5:a4:1b:
a7:78:b5:4f:79:99:94:5d:74:43:eb:42:f2:ec:88:88:5e:43:
b4:8b:30:c6:56:30:d5:25:32:c9:bd:53:67:75:b4:b7:fe:28:
c2:68:e6:3e:04:b6:56:86:48:53:7e:69:8c:ef:6f:ab:72:98:
d8:0d:f8:bf:5c:d0:ce:1a:fa:8c:82:20:32:41:25:ce:d8:6d:
a1:b2:d5:83:c3:76:1b:32:c7:cd:2f:93:12:5e:ea:79:51:c5:
76:0c:38:5b:13:fc:f4:b6:4a:3c:59:d1:2a:d5:0d:0c:83:d4:
56:28:bd:1a:d9:3d:71:ad:41:7e:1f:d1:98:a7:33:c8:b5:3d:
22:83:b0:83:ec:dc:7a:0c:a3:fe:a5:69:77:3d:dd:45:cb:95:
7a:a1:8c:45:bb:06:be:41:6f:36:f5:cd:53:b7:91:dd:f6:57:
7f:1e:c5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:56:28 2025 by rpki-client