
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91597B7/12C215ACADE611F1BBA8793F4111F970/6AC1F2CCADE611F1A742C8804111F970.roa
File: 6AC1F2CCADE611F1A742C8804111F970.roa (raw, json)
Hash identifier: pOX2bB7h73TmS7wQA5JOgBkRmL6STMduq4kjixO0aqA=
Subject key identifier: E3:86:5B:50:05:61:38:FC:BC:EC:0D:5D:0B:7D:A6:6F:96:27:73:FC
Certificate issuer: /CN=A91597B7/serialNumber=DF45A6016506DF9B104B74C82D36D5FFD2D56CAD
Certificate serial: 06
Authority key identifier: DF:45:A6:01:65:06:DF:9B:10:4B:74:C8:2D:36:D5:FF:D2:D5:6C:AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30WmAWUG35sQS3TILTbV_9LVbK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91597B7/12C215ACADE611F1BBA8793F4111F970/6AC1F2CCADE611F1A742C8804111F970.roa
Signing time: Fri 11 Sep 2026 13:42:12 +0000
ROA not before: Fri 11 Sep 2026 13:42:12 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 218741
IP address blocks: 163.52.128.0/23 maxlen: 23
163.52.128.0/24 maxlen: 24
163.52.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91597B7/12C215ACADE611F1BBA8793F4111F970/30WmAWUG35sQS3TILTbV_9LVbK0.crl
rsync://rpki.apnic.net/member_repository/A91597B7/12C215ACADE611F1BBA8793F4111F970/30WmAWUG35sQS3TILTbV_9LVbK0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30WmAWUG35sQS3TILTbV_9LVbK0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 13:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91597B7, serialNumber=DF45A6016506DF9B104B74C82D36D5FFD2D56CAD
Validity
Not Before: Sep 11 13:42:12 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6aa40534-204a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:2f:78:a6:fe:1d:2a:26:21:8e:3d:4b:da:
c0:3e:0c:31:b5:65:ae:98:c6:e3:07:7d:47:e6:8f:
9b:e4:26:b5:77:ee:e6:b6:7a:02:a6:e8:c5:da:b0:
79:9b:4d:ff:0b:b7:aa:37:64:2b:ed:19:40:21:28:
8d:53:de:63:06:62:92:01:66:be:de:82:7b:29:8f:
fb:e4:2e:f4:d7:6a:de:a4:5b:be:f8:be:77:5a:13:
e2:e3:f5:d3:f0:0d:e4:f3:89:d0:5a:19:b1:20:20:
10:8e:f8:91:10:fb:2a:d9:96:90:63:f2:c9:a2:15:
3c:a7:72:bf:68:de:5e:4f:0d:c9:38:e6:50:1d:3f:
8c:4d:6f:f4:e0:ee:41:58:ac:10:31:7d:24:c1:04:
ba:12:d8:ca:63:36:70:d7:fc:5d:15:88:d0:aa:7f:
16:d0:5e:bd:55:b0:d6:7c:5e:f9:17:c2:35:a2:39:
92:b9:78:8a:d0:5c:20:d9:7f:d1:6f:9e:50:10:13:
d1:b9:3d:89:18:95:38:38:52:30:09:0e:08:ff:24:
5d:1e:22:16:4c:22:fb:eb:09:b0:21:af:f5:fe:c6:
e0:8e:56:78:c7:5d:92:3a:88:e7:42:86:22:aa:bc:
cd:43:7e:33:df:fc:e9:29:82:d0:1f:d9:62:5f:37:
37:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:86:5B:50:05:61:38:FC:BC:EC:0D:5D:0B:7D:A6:6F:96:27:73:FC
X509v3 Authority Key Identifier:
keyid:DF:45:A6:01:65:06:DF:9B:10:4B:74:C8:2D:36:D5:FF:D2:D5:6C:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91597B7/12C215ACADE611F1BBA8793F4111F970/30WmAWUG35sQS3TILTbV_9LVbK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30WmAWUG35sQS3TILTbV_9LVbK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597B7/12C215ACADE611F1BBA8793F4111F970/6AC1F2CCADE611F1A742C8804111F970.roa
sbgp-ipAddrBlock: critical
IPv4:
163.52.128.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:26:f9:49:08:35:7a:83:32:a0:1a:24:db:20:a4:c0:40:49:
24:61:73:3e:e2:b6:22:3b:89:65:e8:fd:78:7b:f1:1a:27:9d:
86:95:68:fa:e3:cd:2d:3c:d5:b7:81:7c:9a:d1:42:8b:ad:ad:
4a:41:2a:e1:7f:b8:5b:6b:42:84:72:8f:0c:d7:03:5d:f0:0d:
6b:98:f9:e4:c5:65:a5:79:e1:57:0d:54:62:ce:1f:cc:8c:02:
0c:f1:09:83:8c:83:22:0e:b8:77:46:d9:8f:94:5e:c6:2b:05:
cb:f7:72:c1:06:7c:ff:bf:51:f0:43:ce:ad:7d:e8:95:d8:4d:
b0:86:77:a6:8b:c6:0b:d7:05:d1:43:79:0f:28:9b:64:fe:17:
5f:65:8e:ea:b2:7b:83:4d:3c:85:ab:93:0b:e8:53:05:5b:a3:
9c:e3:91:3a:23:9c:03:fe:bf:45:94:34:6a:c6:a1:33:48:cf:
02:05:58:73:f0:66:e0:41:4b:86:4c:7c:99:ce:e2:dc:d5:51:
cb:0e:03:3e:77:ab:6e:26:ba:a8:a7:2f:f2:8f:dc:ac:81:94:
da:df:a7:43:9b:90:9f:94:4c:82:c5:2b:a9:ca:cd:d8:ba:2e:
f4:e3:38:0c:ad:9f:55:f5:54:b0:76:87:a8:d7:fc:c7:50:cb:
0f:78:19:2c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 13 08:48:23 2026 by rpki-client