
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/27A1A5A2174911EC896AD61BC4F9AE02.roa
File: 27A1A5A2174911EC896AD61BC4F9AE02.roa (raw, json)
Hash identifier: lHkuWmke07Q2mFWhxNC8gJVF88cEoSJsFIhxbtoDZqI=
Subject key identifier: A3:66:14:9D:6F:05:E5:AC:B5:39:D9:7B:C8:7D:77:B3:02:AA:73:9B
Certificate issuer: /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial: 0714
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/27A1A5A2174911EC896AD61BC4F9AE02.roa
Signing time: Wed 02 Sep 2026 23:44:02 +0000
ROA not before: Wed 02 Sep 2026 23:44:02 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 17719
IP address blocks: 2405:9000:80::/48 maxlen: 48
2405:9000:90::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 22:36:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1812 (0x714)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Validity
Not Before: Sep 2 23:44:02 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a98b4c2-38bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:cb:7d:87:08:08:8e:fb:23:ea:dd:54:af:
0a:27:76:68:9e:9a:38:50:85:4b:28:d2:25:e4:aa:
0a:28:6a:c8:f8:ef:cb:e6:bc:ef:d9:e3:9e:01:6b:
3f:94:40:ab:06:a4:6e:f4:25:fd:84:08:bd:e2:ea:
d2:54:5c:50:6c:3f:05:b9:01:a8:68:db:ac:82:09:
3b:b5:e3:66:29:92:ec:7a:56:f4:f5:6a:1e:13:5a:
5c:db:05:55:04:36:f6:68:06:88:25:9b:32:f5:a5:
4f:5c:a4:bf:41:b4:8d:c8:72:44:3d:bd:0a:83:3a:
d1:3c:29:a1:7e:f5:e1:fa:bb:06:3c:53:d4:db:53:
49:09:07:02:4c:5d:25:f3:7c:c6:a7:dd:26:bf:3d:
73:9e:46:d6:b5:a5:82:b4:b4:4b:92:31:a6:c8:14:
70:bb:5e:ab:4c:5b:4c:17:85:08:17:62:34:c1:03:
bc:f8:18:8c:bc:b6:e8:e5:77:a9:4f:8e:3d:30:a2:
d8:ee:8c:c4:33:7d:b6:33:3e:26:47:42:22:d3:99:
05:81:c2:73:62:46:2d:69:4b:cc:ea:fe:5d:73:34:
4e:0f:62:41:4e:2e:c3:43:a3:5a:89:af:a7:98:db:
c1:f8:f3:6e:31:89:af:f2:7b:50:95:b2:9b:96:d3:
b6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:66:14:9D:6F:05:E5:AC:B5:39:D9:7B:C8:7D:77:B3:02:AA:73:9B
X509v3 Authority Key Identifier:
keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/27A1A5A2174911EC896AD61BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:9000:80::/48
2405:9000:90::/48
Signature Algorithm: sha256WithRSAEncryption
ad:94:67:56:e9:7c:84:da:90:ba:7d:01:dc:42:70:2b:ef:ec:
8d:9f:d0:12:81:7c:f6:ec:b1:44:a2:a3:7a:45:0b:c2:56:11:
85:03:dd:81:b5:bd:13:91:72:74:0b:01:4e:70:fc:21:de:63:
71:e4:21:64:2f:25:52:86:e8:56:5e:c6:a6:68:45:07:df:ed:
24:9d:65:37:f3:5f:1c:d3:f6:b5:e7:be:e2:ca:4c:d3:c8:a9:
04:7f:8f:37:65:75:97:f0:3a:2f:e0:60:4d:f7:ac:90:66:3e:
eb:9e:29:a9:b7:52:9f:53:8b:66:d3:8e:ad:bd:4f:7a:e3:01:
73:cf:46:84:22:1c:4e:44:2c:1f:46:be:d8:89:fc:30:20:07:
db:e4:e7:d7:17:74:c7:45:a2:48:36:4d:03:33:f1:3c:5d:ac:
b4:05:bf:6b:cc:71:9a:f3:bc:8a:fc:44:df:83:d5:3e:0f:b1:
c5:b1:ea:56:09:b9:ae:c1:2c:71:cb:b9:57:05:d3:0e:83:a1:
54:58:0a:9d:f1:48:b4:04:50:68:97:a6:5b:e9:f9:b0:97:91:
98:7f:97:83:70:87:92:91:2d:e7:1e:8f:e6:1c:71:09:fc:9c:
e3:43:b7:18:bd:bb:6d:de:c1:31:22:e2:8e:41:5e:88:04:34:
3e:1d:88:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 08:52:41 2026 by rpki-client