
$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/AF2D50BE562B11F0A2095579C4F9AE02.roa
File: AF2D50BE562B11F0A2095579C4F9AE02.roa (raw, json)
Hash identifier: X+ionRnl4NOsyOEaMY5HP4N1Hw33cXFC4QNX+HEEnQg=
Subject key identifier: 4E:86:5B:8B:0B:49:2D:92:3D:59:45:A1:3B:AD:6A:CD:F2:5C:98:EC
Certificate issuer: /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Certificate serial: 02C4
Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/AF2D50BE562B11F0A2095579C4F9AE02.roa
Signing time: Fri 31 Jul 2026 03:51:41 +0000
ROA not before: Fri 31 Jul 2026 03:51:41 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 151420
IP address blocks: 2401:3fa0:1::/48 maxlen: 48
2401:3fa0:fc00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl
rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 22 Aug 2026 02:27:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 708 (0x2c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91187FD, serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Validity
Not Before: Jul 31 03:51:41 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a6c1bcd-99c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5b:4d:ab:cc:ea:eb:74:bc:ce:26:e0:d1:44:
4f:25:3c:f6:c5:b7:b3:14:dd:e5:ea:16:f9:d1:6e:
1b:93:55:48:c0:79:0e:4d:f0:bd:30:2f:c8:b6:74:
ea:f5:4a:b6:80:e4:68:c2:ee:48:79:76:7e:9e:bc:
ef:0e:c2:68:7e:ca:66:e8:80:f5:69:43:07:cb:d2:
a9:23:0f:5b:35:f4:e9:1f:43:c2:d1:b7:62:fc:42:
36:95:65:fb:eb:44:2e:d6:43:54:6a:6d:4b:ea:6e:
fc:bb:b7:07:39:e3:b6:bb:52:68:43:3e:00:83:75:
b4:be:70:c5:5c:b3:2d:0d:3c:d4:ec:6e:7c:8f:84:
8a:d8:cc:72:ba:ba:4c:9c:38:04:b7:e9:9d:81:d6:
22:eb:9b:3a:78:e2:79:45:94:4f:db:c3:ca:5b:60:
5d:33:bc:dd:09:25:76:e5:8c:1d:99:e0:47:d7:7f:
93:38:e1:83:c6:16:af:32:2e:f3:6c:25:32:4c:dc:
88:82:b9:39:88:62:24:de:27:6b:25:28:80:ba:c5:
d4:65:7c:67:08:08:85:dd:aa:69:b7:74:c9:d6:84:
d2:32:7c:73:13:e8:63:d8:6f:36:4a:9d:53:06:37:
4c:1c:c5:e4:0b:03:5a:c5:d8:b5:f8:b7:11:e7:43:
93:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:86:5B:8B:0B:49:2D:92:3D:59:45:A1:3B:AD:6A:CD:F2:5C:98:EC
X509v3 Authority Key Identifier:
keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/AF2D50BE562B11F0A2095579C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:3fa0:1::/48
2401:3fa0:fc00::/40
Signature Algorithm: sha256WithRSAEncryption
2d:f2:76:d8:51:f0:cd:66:38:b7:73:08:f9:cd:76:43:d1:21:
52:c2:6c:53:0c:4a:ab:77:8e:14:a7:59:5f:8e:55:e3:72:07:
75:62:3d:02:ea:b9:8d:ad:8b:de:8e:85:2f:76:cc:da:2d:bb:
3c:dd:15:9b:09:e6:dd:3c:dd:06:b0:57:2f:a5:60:e9:be:6a:
04:e5:d0:7c:92:01:87:a7:e0:b2:84:a7:4d:d9:fa:20:6b:b3:
db:01:ca:0a:68:c5:6c:03:73:ff:a9:67:dd:bd:a0:2d:a8:27:
d5:88:c8:fb:a2:51:52:0f:aa:13:2c:63:5a:a0:33:84:00:d2:
be:12:04:66:cb:53:2f:1b:0a:3c:ab:32:8d:42:09:51:7a:b4:
07:a1:45:80:33:9f:53:61:d9:40:bb:b5:6b:81:fb:a3:14:a6:
e4:5a:32:09:47:be:4a:fc:90:2a:9e:08:72:ef:f5:dc:32:2b:
c8:b1:15:e6:25:6f:2a:88:aa:6d:d8:fa:92:d5:12:ce:2c:5b:
58:2a:6a:bd:6a:97:7a:7c:fa:33:5c:9f:27:95:1c:88:8c:02:
1c:21:67:85:5e:1d:f2:a3:87:06:2a:77:19:fd:b5:7e:31:a4:
34:d9:d7:e2:31:e7:63:ac:59:48:64:10:ae:92:ab:a9:b1:55:
6d:60:2b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 22:26:31 2026 by rpki-client