
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/09F2AE3EF36811F0BB995E0C666F56BC.roa
File: 09F2AE3EF36811F0BB995E0C666F56BC.roa (raw, json)
Hash identifier: v8t9bmHpqZn0wuxiofvRlA2MMIdpOLvcB//haxyBf5U=
Subject key identifier: 40:DC:24:C6:65:85:92:35:B8:DF:89:8B:AF:D9:CE:5B:A4:9E:04:3D
Certificate issuer: /CN=A91E782F/serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
Certificate serial: 01AD
Authority key identifier: C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/09F2AE3EF36811F0BB995E0C666F56BC.roa
Signing time: Thu 27 Aug 2026 04:55:41 +0000
ROA not before: Thu 27 Aug 2026 04:55:41 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 4755
IP address blocks: 192.8.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl
rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 04:31:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429 (0x1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E782F, serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
Validity
Not Before: Aug 27 04:55:41 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a8fc34d-7a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f8:66:cb:4f:92:34:6e:a1:6e:f1:5c:24:3f:
29:57:59:75:4f:77:88:29:94:f2:00:ae:53:fe:9e:
69:21:7f:76:f1:f7:c9:30:e0:f5:10:0b:32:61:30:
47:7f:4f:5b:3a:d5:f9:bf:c7:43:27:7f:bc:ec:49:
16:4e:b7:fb:f4:eb:1b:3a:36:91:1a:5c:2f:85:79:
4a:f5:65:54:c0:70:95:4a:33:19:75:54:0c:a3:d5:
c8:fd:7d:8c:56:08:6b:21:3b:cd:03:42:72:d5:70:
28:ed:7c:af:6e:95:6b:a7:18:9e:02:d3:e4:47:3b:
41:e2:b8:43:65:04:c9:9e:a8:af:8b:eb:26:39:32:
50:d3:45:3a:68:4c:5c:3c:70:f4:29:e8:15:60:fd:
57:26:cc:e6:ac:ee:40:de:aa:57:a4:d7:d5:86:96:
d5:0c:ce:d7:be:67:c1:31:ab:48:ba:bd:60:eb:e1:
6c:54:46:35:39:c0:bf:65:a4:89:88:22:e8:cc:f9:
f5:a0:80:88:89:f3:93:d8:70:f5:15:a2:08:5b:aa:
b9:ba:31:79:8b:19:dd:c2:17:32:e3:04:47:5a:b2:
56:38:03:42:e0:20:b0:e3:3c:61:18:e6:1f:88:dd:
98:cc:73:05:62:2f:c5:74:73:32:72:3c:95:0c:d6:
0a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DC:24:C6:65:85:92:35:B8:DF:89:8B:AF:D9:CE:5B:A4:9E:04:3D
X509v3 Authority Key Identifier:
keyid:C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/09F2AE3EF36811F0BB995E0C666F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
192.8.33.0/24
Signature Algorithm: sha256WithRSAEncryption
39:fa:8f:b1:60:50:5b:4b:fc:15:62:4d:5a:fd:c8:f7:dd:6a:
84:e1:ac:cd:1c:8c:97:10:95:91:2b:e1:6b:a5:59:bc:7c:53:
85:0b:1b:0c:69:f4:c2:46:a8:d0:3a:d8:02:a2:6a:ee:fb:79:
1b:ff:58:66:e5:4a:75:9b:31:c4:e3:5b:c9:e9:5a:38:8c:e5:
37:f5:36:57:91:fe:17:2f:23:c9:4e:75:29:04:77:49:09:d1:
e3:95:dc:82:32:9f:24:bf:ff:3b:ef:68:1d:95:ec:c4:ee:93:
64:3e:46:1e:8d:89:56:68:0f:58:ca:d0:fd:87:e6:64:59:81:
2a:cf:93:7e:52:c4:6b:37:0c:bb:92:39:33:4c:d3:0b:a7:53:
25:e7:85:f2:97:d6:22:8f:15:03:17:a2:a1:92:92:2c:f2:0b:
ab:bd:fc:8a:e0:70:cd:2d:3f:5a:b7:b8:2d:7c:8e:17:7f:07:
4d:38:af:12:de:40:2b:1a:32:3e:00:ed:77:30:63:6c:59:8e:
fa:22:3c:97:8b:19:6f:6d:40:3f:c9:85:2d:09:0d:8b:92:5a:
9f:2f:a7:2e:00:40:97:d9:2e:56:67:d1:c7:f9:be:80:a4:7f:
85:7e:73:5d:b9:24:69:ad:de:e5:83:a4:b7:45:f8:93:0a:4c:
70:1c:66:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:57:30 2026 by rpki-client