
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/E3BDC64224D411F191B1E656AB833773.roa
File: E3BDC64224D411F191B1E656AB833773.roa (raw, json)
Hash identifier: sIg+Xdz5Qyeb7OrBu/I41LeMBOQVEGrHUaZBzwqV+U4=
Subject key identifier: C5:47:49:B6:7D:48:02:5D:46:3B:47:7A:64:64:9D:8E:97:33:76:4F
Certificate issuer: /CN=A91FCA47/serialNumber=9C6290A8A12E8886413743D7F10577F439169C7D
Certificate serial: 5B
Authority key identifier: 9C:62:90:A8:A1:2E:88:86:41:37:43:D7:F1:05:77:F4:39:16:9C:7D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nGKQqKEuiIZBN0PX8QV39DkWnH0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/E3BDC64224D411F191B1E656AB833773.roa
Signing time: Mon 07 Sep 2026 08:58:58 +0000
ROA not before: Mon 07 Sep 2026 08:58:58 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 133139
IP address blocks: 45.126.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.crl
rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nGKQqKEuiIZBN0PX8QV39DkWnH0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCA47, serialNumber=9C6290A8A12E8886413743D7F10577F439169C7D
Validity
Not Before: Sep 7 08:58:58 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a9e7cd2-6c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:34:f1:c5:df:d4:4f:08:08:f5:67:c1:10:9d:
f5:2c:66:c7:b4:30:3b:e3:70:e8:52:00:61:be:c0:
85:50:de:38:73:d2:de:4b:85:cc:80:16:3c:33:cf:
c6:29:aa:6c:8b:1f:b9:0c:a7:6b:0c:4e:74:b5:25:
e5:92:8a:da:e2:00:f3:2f:c2:85:23:28:98:71:cd:
a2:68:84:81:d3:24:e1:0c:de:11:68:cd:bb:11:f0:
f6:79:96:52:25:d0:bb:f1:36:e7:3f:88:84:31:c0:
ea:00:9e:f2:1e:03:57:af:b8:27:58:53:68:bd:b5:
a8:6e:22:91:60:85:22:81:30:69:42:4e:9b:79:58:
77:80:cc:44:e0:05:10:b2:22:a5:c2:4c:6a:c4:b6:
7c:9c:5d:ee:60:16:84:c5:ef:f2:08:b7:ad:93:7d:
ac:f8:d0:1b:7a:91:36:f2:11:13:fe:96:73:34:ef:
8d:7e:f0:80:6c:6e:e7:23:b0:d5:c6:05:c1:8c:33:
4b:69:ab:56:7d:56:fd:55:48:32:4a:22:e1:14:fa:
cb:9b:bf:78:1d:fa:56:d8:6f:02:ad:05:be:36:c0:
21:27:6a:ce:3d:cc:3e:bf:44:05:e8:dd:52:8a:47:
51:f6:1e:d6:69:60:a7:9e:28:36:f2:bd:59:4a:0c:
05:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:47:49:B6:7D:48:02:5D:46:3B:47:7A:64:64:9D:8E:97:33:76:4F
X509v3 Authority Key Identifier:
keyid:9C:62:90:A8:A1:2E:88:86:41:37:43:D7:F1:05:77:F4:39:16:9C:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nGKQqKEuiIZBN0PX8QV39DkWnH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/E3BDC64224D411F191B1E656AB833773.roa
sbgp-ipAddrBlock: critical
IPv4:
45.126.137.0/24
Signature Algorithm: sha256WithRSAEncryption
83:ee:49:8c:27:4c:22:de:ed:42:78:8d:04:3b:df:73:58:68:
90:0d:a8:a4:6e:00:01:3b:be:cd:2d:27:0f:6a:63:73:a4:86:
1b:59:35:53:42:52:fc:fc:90:87:06:3c:98:ff:a2:68:3e:73:
66:eb:f4:da:13:ad:09:7b:c2:fb:e0:de:9c:ab:0a:6d:8a:dc:
08:0e:f3:d2:34:c6:7a:03:39:81:df:58:9c:39:05:3f:40:21:
a7:8a:f9:9c:7a:1b:c0:28:23:1c:ae:04:c2:35:9d:0f:dd:31:
a2:f8:96:fe:b4:9b:d3:b0:c3:84:c7:ab:46:f7:27:0e:1d:0e:
37:6d:dd:21:d5:a2:8b:90:92:37:b0:11:fe:fb:be:66:44:7c:
61:cb:db:6f:bd:b9:76:fa:16:a4:0f:60:00:b5:11:8e:16:d5:
a9:d1:e4:48:97:3b:30:b6:06:6c:1d:b4:5b:38:ad:61:2b:8f:
47:95:84:e9:ec:9f:cb:5f:86:7a:24:a8:71:48:c2:f9:cd:94:
43:87:d9:5e:f1:2e:46:f5:b3:d5:81:2e:2e:f5:ad:e6:ce:79:
e1:31:bc:10:b8:28:42:ed:d4:fe:c2:3e:e4:6e:71:0e:13:f9:
94:4b:42:55:71:63:ce:7e:f7:b2:48:27:fe:77:91:71:64:90:
78:3a:f9:d1
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
Q0E0NzExMC8GA1UEBRMoOUM2MjkwQThBMTJFODg4NjQxMzc0M0Q3RjEwNTc3RjQz
OTE2OUM3RDAeFw0yNjA5MDcwODU4NThaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhOWU3Y2QyLTZjMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCsNPHF39RPCAj1Z8EQnfUsZse0MDvjcOhSAGG+wIVQ3jhz0t5LhcyAFjwzz8Yp
qmyLH7kMp2sMTnS1JeWSitriAPMvwoUjKJhxzaJohIHTJOEM3hFozbsR8PZ5llIl
0LvxNuc/iIQxwOoAnvIeA1evuCdYU2i9tahuIpFghSKBMGlCTpt5WHeAzETgBRCy
IqXCTGrEtnycXe5gFoTF7/IIt62Tfaz40Bt6kTbyERP+lnM0741+8IBsbucjsNXG
BcGMM0tpq1Z9Vv1VSDJKIuEU+subv3gd+lbYbwKtBb42wCEnas49zD6/RAXo3VKK
R1H2HtZpYKeeKDbyvVlKDAV7AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUxUdJtn1I
Al1GO0d6ZGSdjpczdk8wHwYDVR0jBBgwFoAUnGKQqKEuiIZBN0PX8QV39DkWnH0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDQTQ3Lzk1RTc2RDYwMjRE
NDExRjE4QUFBMDk0MkFCODMzNzczL25HS1FxS0V1aUlaQk4wUFg4UVYzOURrV25I
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbkdLUXFLRXVpSVpCTjBQWDhRVjM5RGtXbkgwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Q0E0Ny85NUU3NkQ2MDI0RDQxMUYxOEFBQTA5NDJBQjgzMzc3My9FM0JEQzY0MjI0
RDQxMUYxOTFCMUU2NTZBQjgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAAtfokwDQYJKoZIhvcNAQELBQADggEBAIPuSYwnTCLe7UJ4jQQ733NY
aJANqKRuAAE7vs0tJw9qY3OkhhtZNVNCUvz8kIcGPJj/omg+c2br9NoTrQl7wvvg
3pyrCm2K3AgO89I0xnoDOYHfWJw5BT9AIaeK+Zx6G8AoIxyuBMI1nQ/dMaL4lv60
m9Oww4THq0b3Jw4dDjdt3SHVoouQkjewEf77vmZEfGHL22+9uXb6FqQPYAC1EY4W
1anR5EiXOzC2BmwdtFs4rWErj0eVhOnsn8tfhnokqHFIwvnNlEOH2V7xLkb1s9WB
Li71rebOeeExvBC4KELt1P7CPuRucQ4T+ZRLQlVxY85+97JIJ/53kXFkkHg6+dE=
-----END CERTIFICATE-----
Generated at Tue Sep 22 12:40:08 2026 by rpki-client