
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/C6B686020E7811EF85000B7BC4F9AE02.roa
File: C6B686020E7811EF85000B7BC4F9AE02.roa (raw, json)
Hash identifier: qz8JxNgXuDID5Fu8pAdCqUZ2ItHDzr2G2xNt310Kyxo=
Subject key identifier: DA:05:95:5F:14:A1:CD:DF:AC:CF:71:10:69:7B:FA:7F:1C:7B:AA:96
Certificate issuer: /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial: 070C
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/C6B686020E7811EF85000B7BC4F9AE02.roa
Signing time: Wed 02 Sep 2026 23:43:47 +0000
ROA not before: Wed 02 Sep 2026 23:43:47 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 132217
IP address blocks: 220.101.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 22:36:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1804 (0x70c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Validity
Not Before: Sep 2 23:43:47 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a98b4b3-550b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:10:62:64:0c:90:6f:93:f9:b8:38:41:24:3b:
06:62:f2:b8:6b:40:0d:10:16:5e:60:26:e0:9d:11:
4e:1e:0f:85:57:dc:a4:ad:31:20:b5:be:be:e4:f9:
24:a3:b0:6f:fd:7c:a5:a6:d8:70:c4:7c:a1:cb:49:
f2:89:e3:68:45:81:7b:7d:92:91:3d:d6:56:0e:35:
23:93:39:fb:ac:d6:c1:10:38:9e:04:15:33:d5:b6:
20:bc:76:07:65:7a:78:bd:15:36:dd:84:46:61:c0:
53:31:fa:ab:d0:ec:e7:dd:f4:03:90:33:9d:c6:7c:
22:48:41:5a:2d:9f:2a:25:df:d6:cc:af:bf:18:6b:
24:4c:1f:83:fa:ef:44:69:c8:11:43:dc:96:ba:ad:
bb:da:03:05:88:ac:f3:2e:0a:d5:f7:8b:e8:c3:22:
c4:98:a7:13:2c:69:b5:f5:d3:f5:93:93:d7:7d:2b:
33:70:82:d6:eb:ac:f5:78:04:3f:04:0a:53:dc:f2:
b8:47:5a:4e:78:11:fd:ce:31:11:ca:05:5e:d3:eb:
03:8d:1c:0f:78:7d:2f:52:98:bc:6f:d6:bd:22:9e:
2a:1b:70:18:68:41:43:d5:09:7f:ad:bd:1d:7e:07:
f9:7e:c2:1d:8a:ba:8d:1a:5a:86:5d:a3:be:e8:bb:
02:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:05:95:5F:14:A1:CD:DF:AC:CF:71:10:69:7B:FA:7F:1C:7B:AA:96
X509v3 Authority Key Identifier:
keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/C6B686020E7811EF85000B7BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
220.101.96.0/24
Signature Algorithm: sha256WithRSAEncryption
31:fc:8f:02:f8:c0:04:b5:cd:b9:12:78:e8:5b:2e:52:1f:03:
db:03:c3:ef:58:d8:9e:bc:7a:1a:21:61:98:53:2a:fb:21:0b:
95:fb:b5:b8:61:7b:71:3d:c3:6d:63:4c:c8:55:cc:f8:59:d0:
b9:9d:50:9f:5b:96:c6:00:78:44:e6:7d:cb:89:33:de:ec:aa:
97:88:d3:5c:72:9a:f3:e0:0f:83:cf:72:80:bb:f3:35:19:7a:
4d:70:27:6f:cf:0b:cd:25:c3:83:1b:67:3b:69:83:06:fa:bd:
0c:5e:ff:a9:e0:24:5f:85:b9:67:64:58:9d:53:30:01:a7:49:
12:93:14:35:54:02:dd:39:b1:ea:3a:99:70:46:7f:86:75:73:
64:cb:75:2a:51:e1:25:df:aa:bc:53:a6:b9:47:e3:d0:6f:94:
55:81:96:22:51:e4:ed:69:73:00:99:b1:c4:57:79:29:6c:f8:
cf:52:99:2f:96:61:db:ca:48:b7:83:5a:ff:b4:7b:e1:35:ec:
e8:5b:f3:6b:cf:58:44:9d:c3:e1:e8:67:bd:95:70:f3:65:2c:
ed:d2:e3:f2:06:50:ae:d1:3c:3d:97:2c:7d:c2:fc:8e:32:b8:
1c:d7:70:51:f4:27:4c:79:3d:2d:11:85:1d:ef:e0:7b:8f:ff:
4f:9d:04:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 08:52:54 2026 by rpki-client