
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CFAAC37890AC11F1B5E6B4713511F970.roa
File: CFAAC37890AC11F1B5E6B4713511F970.roa (raw, json)
Hash identifier: ZKepBoX/Oj0Z7su3g4/3AEsjy9OkdeCU7+5epADE2ug=
Subject key identifier: 2F:28:37:58:12:E7:82:B2:85:F1:1A:A5:19:BE:9A:6A:84:33:24:4E
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6D11
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CFAAC37890AC11F1B5E6B4713511F970.roa
Signing time: Wed 05 Aug 2026 09:05:32 +0000
ROA not before: Wed 05 Aug 2026 09:05:32 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 154781
IP address blocks: 2001:df7:47c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:33:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27921 (0x6d11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 5 09:05:32 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a72fcdc-94e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ed:74:fb:ff:3b:d1:ab:41:05:c4:33:b0:a1:
2e:68:c8:e6:0c:fe:e2:5f:35:b4:95:59:50:41:f9:
0f:5d:11:1b:fd:60:3b:6c:e2:e0:2e:14:9b:17:b6:
55:89:ea:7c:41:76:4e:1b:e5:8a:49:5e:22:af:03:
a7:05:54:51:4d:5c:6c:09:cc:c2:96:6b:d7:5d:99:
2f:5c:8a:e9:34:ba:e4:9d:5f:e5:9d:9b:c7:df:d4:
96:99:02:4a:5a:27:6b:b8:16:c6:74:a0:38:f0:19:
ca:89:60:7b:1e:e6:3b:71:e8:a6:58:46:df:8d:2b:
ed:3c:d5:f0:c0:2f:99:81:1d:bb:79:84:ff:51:b6:
a1:f7:93:03:bd:df:ab:be:05:f9:5f:b2:a0:df:bf:
70:6c:cc:f8:b2:c0:34:f0:51:91:25:8a:aa:d3:37:
89:4a:b6:c0:4a:ae:82:6e:ba:63:a4:79:ba:29:85:
61:f6:54:2a:9d:f4:53:33:15:ec:0c:61:53:1a:9b:
75:28:29:86:31:ee:e1:67:95:ba:d2:a5:35:47:70:
bf:4f:46:c9:d9:10:76:ba:da:3e:a8:48:57:f6:58:
8a:ae:34:bb:0e:74:5d:a2:71:bb:c4:fc:cd:b7:73:
e0:6a:5e:b9:04:69:aa:ec:13:0d:c1:a7:d3:57:a1:
c4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:28:37:58:12:E7:82:B2:85:F1:1A:A5:19:BE:9A:6A:84:33:24:4E
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CFAAC37890AC11F1B5E6B4713511F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:47c0::/48
Signature Algorithm: sha256WithRSAEncryption
63:14:5b:78:cd:e3:46:00:07:01:19:77:0c:3d:04:c7:44:e0:
c0:81:c1:35:da:b6:8c:f5:40:19:92:19:4e:5b:c4:94:95:f5:
37:86:de:d8:23:a4:f5:67:8c:e4:ad:c3:25:49:db:50:db:f0:
a6:5a:91:0d:16:2e:30:1e:4f:0a:4b:51:c7:41:57:ed:41:bf:
71:b3:80:cd:9d:40:61:58:28:89:6d:fc:96:40:d4:bc:f0:2d:
db:64:5c:69:3e:44:28:2f:82:0e:64:42:9d:d0:d0:f3:89:aa:
ed:0d:af:af:9c:3c:da:c0:c0:fe:3b:64:9e:19:7b:3f:7b:c0:
d9:43:64:2a:27:90:40:26:4a:7b:86:d3:31:27:b6:7a:67:9b:
07:3c:23:25:67:09:1f:0d:8f:58:f4:3b:64:b2:27:1c:86:ac:
f8:e6:97:f0:73:aa:8c:01:2d:bd:f5:eb:7a:e2:46:00:dc:98:
25:73:aa:0a:d8:4d:01:91:4a:8f:76:43:85:ce:f8:5e:92:4d:
fe:f0:3d:2f:62:77:79:01:6b:e7:79:ca:ff:cb:85:3c:a8:d7:
38:57:15:8b:1c:5d:95:3f:4e:b6:be:ad:46:9f:fe:37:d1:0a:
09:a1:53:44:a4:0d:f7:d0:c3:6c:d3:20:45:e1:5a:8a:8a:bf:
c1:96:e6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:08:15 2026 by rpki-client