
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/CF1EEA5232E311EFA2DDE95DC4F9AE02.roa
File: CF1EEA5232E311EFA2DDE95DC4F9AE02.roa (raw, json)
Hash identifier: OwUMYgWNJ8BOlty9UrXCcnSZ+OGtrUw4nN7Y+U72J0A=
Subject key identifier: 98:20:27:60:B4:83:65:2F:D4:F6:B3:B8:D3:23:2C:93:02:E4:1E:C0
Certificate issuer: /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial: 0B52
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/CF1EEA5232E311EFA2DDE95DC4F9AE02.roa
Signing time: Thu 03 Sep 2026 00:50:57 +0000
ROA not before: Thu 03 Sep 2026 00:50:57 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 55927
IP address blocks: 27.254.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2898 (0xb52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Validity
Not Before: Sep 3 00:50:57 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a98c471-030d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:30:65:34:a3:42:d9:3d:6d:86:54:3e:f1:d8:
16:90:c1:95:22:11:34:63:13:9f:7e:45:d2:95:31:
f3:81:3a:d8:7d:31:16:0c:a2:ba:0c:8a:87:22:9d:
de:11:a3:0e:cc:e6:ad:50:49:26:ba:29:74:a8:5c:
1d:0b:0b:ba:81:7a:84:b1:a2:32:c9:44:b5:69:36:
f9:cd:52:ce:c0:5e:f5:d1:44:9e:51:e4:84:0b:da:
4c:5b:7b:fc:fc:e7:17:f5:d2:f5:8b:fe:ec:c0:49:
dd:5c:ea:24:56:9f:57:d9:e5:0b:e5:0c:f7:bb:d9:
6a:3d:26:44:f0:94:f7:24:c1:4b:a8:bf:57:cb:66:
6c:1e:23:b9:26:b1:2c:7e:59:05:93:1e:3b:6e:cf:
7f:78:51:26:6d:ce:67:d5:58:9f:ac:7f:44:a2:90:
e9:2e:06:51:69:6d:18:90:36:52:a7:11:5e:c5:e2:
21:74:70:16:b3:f5:7c:89:89:53:a4:30:34:24:b8:
28:b3:5e:f4:0f:41:eb:06:9e:34:ef:79:3c:fb:d6:
da:81:6c:7e:16:01:64:12:f9:fa:a0:00:ac:47:4a:
fb:be:5e:e3:ac:a2:20:45:07:2a:4e:fb:a1:50:f0:
a2:55:ad:68:93:85:c0:02:1f:d8:80:45:5e:6c:4a:
b3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:20:27:60:B4:83:65:2F:D4:F6:B3:B8:D3:23:2C:93:02:E4:1E:C0
X509v3 Authority Key Identifier:
keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/CF1EEA5232E311EFA2DDE95DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.254.221.0/24
Signature Algorithm: sha256WithRSAEncryption
30:64:ad:51:6e:de:e5:d0:fa:c8:c8:dc:d1:15:24:ec:90:7b:
4c:9b:b5:a7:5e:58:c3:e5:e1:38:a7:dd:97:2a:cf:15:05:f3:
35:c0:7b:5e:d1:5b:8c:bd:9e:a8:5f:c7:fc:23:2f:62:ba:02:
79:5f:ac:70:95:5d:55:d8:3e:73:fe:43:4f:36:61:51:ef:6f:
ba:e4:59:76:55:4a:36:4a:b3:f4:b9:48:3c:b6:11:86:0f:bd:
ac:a2:01:47:07:b0:e4:83:1d:4a:e2:b9:df:00:12:e0:af:bb:
a6:92:b5:85:fd:de:42:eb:51:9f:f4:c6:5d:2d:15:e9:bd:74:
b2:1d:6b:6b:eb:0c:f7:c3:5a:d2:83:f4:61:6f:7a:88:5f:43:
dc:fd:69:0b:ca:44:66:77:3e:26:86:24:d2:78:87:e3:ad:4a:
ad:6f:0e:ed:21:21:44:95:4e:de:c0:ec:bf:0c:17:8e:fa:ac:
e1:6b:44:ef:c5:ba:61:08:5f:b5:d6:7d:d7:e8:f2:a0:9e:fc:
73:50:8d:c8:07:b6:00:a2:78:21:b9:4d:10:65:2e:6a:fc:4b:
09:e9:7e:6e:17:48:b2:6f:f0:c0:44:be:65:f8:40:57:a5:ce:
23:10:db:6b:0f:65:45:ce:8d:11:8f:6d:e5:05:22:1a:6b:a8:
ff:a7:aa:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:33:40 2026 by rpki-client