
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91731A3/9FA1B302979211F1B42547EC4F11F970/FF8ED6FA979211F1B1FF570F5011F970.roa
File: FF8ED6FA979211F1B1FF570F5011F970.roa (raw, json)
Hash identifier: Lh2K/wF9t2esCreJupluX3wR+8TGZ0wv94ej3vVe05c=
Subject key identifier: E5:C7:EA:A6:FA:1D:92:6E:56:26:5A:B3:9D:87:D7:FE:2A:D4:05:E9
Certificate issuer: /CN=A91731A3/serialNumber=CDFA5BC20E312919AC6B1ECAD92B71E734A600B0
Certificate serial: 02
Authority key identifier: CD:FA:5B:C2:0E:31:29:19:AC:6B:1E:CA:D9:2B:71:E7:34:A6:00:B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfpbwg4xKRmsax7K2Stx5zSmALA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91731A3/9FA1B302979211F1B42547EC4F11F970/FF8ED6FA979211F1B1FF570F5011F970.roa
Signing time: Fri 14 Aug 2026 03:48:23 +0000
ROA not before: Fri 14 Aug 2026 03:48:23 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 153891
IP address blocks: 2402:ae0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91731A3/9FA1B302979211F1B42547EC4F11F970/zfpbwg4xKRmsax7K2Stx5zSmALA.crl
rsync://rpki.apnic.net/member_repository/A91731A3/9FA1B302979211F1B42547EC4F11F970/zfpbwg4xKRmsax7K2Stx5zSmALA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfpbwg4xKRmsax7K2Stx5zSmALA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 01 Sep 2026 09:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91731A3, serialNumber=CDFA5BC20E312919AC6B1ECAD92B71E734A600B0
Validity
Not Before: Aug 14 03:48:23 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a7e9007-db28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:53:f9:fb:cb:38:86:80:00:65:f8:7b:2e:24:
f5:3f:3f:e6:10:87:06:f5:81:41:31:97:b5:73:da:
3a:56:d7:2d:8d:11:06:53:d1:a6:32:17:37:67:f1:
60:9c:6c:63:d7:e9:b5:20:6c:2e:14:2c:f1:2a:27:
d6:8c:04:cc:a2:86:83:21:77:7d:1f:ad:6e:0a:52:
05:b1:5d:d4:d8:1d:bc:01:8b:ba:dc:a6:eb:22:ad:
42:26:24:b1:c4:49:90:c6:d8:c3:a5:4f:34:89:ee:
c5:2f:90:75:84:1d:c8:1a:54:9a:6d:f3:9e:34:09:
0c:93:d1:dc:91:d5:54:fb:5f:90:1c:9e:2f:ae:72:
cf:d5:8c:82:83:72:b2:3b:ae:b4:ed:d0:b4:48:45:
d6:f3:eb:c6:da:1c:84:bf:56:8f:a4:8d:19:04:4e:
a3:1a:bc:1f:3c:9d:58:bb:00:33:e1:0d:2e:98:7d:
33:09:a8:11:8c:88:dc:a9:fb:f0:e4:cb:6a:87:18:
8f:f8:ce:f8:e8:52:27:a5:cf:40:0f:0a:92:f8:23:
76:89:f3:8f:d7:4e:80:e3:59:0f:13:8e:89:94:b7:
0e:94:57:28:c7:21:d4:d6:26:63:33:e5:80:cc:a7:
b1:82:8a:a4:a6:10:f0:eb:8b:e5:a7:87:e4:e6:bb:
75:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C7:EA:A6:FA:1D:92:6E:56:26:5A:B3:9D:87:D7:FE:2A:D4:05:E9
X509v3 Authority Key Identifier:
keyid:CD:FA:5B:C2:0E:31:29:19:AC:6B:1E:CA:D9:2B:71:E7:34:A6:00:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91731A3/9FA1B302979211F1B42547EC4F11F970/zfpbwg4xKRmsax7K2Stx5zSmALA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfpbwg4xKRmsax7K2Stx5zSmALA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731A3/9FA1B302979211F1B42547EC4F11F970/FF8ED6FA979211F1B1FF570F5011F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:ae0::/32
Signature Algorithm: sha256WithRSAEncryption
06:83:61:ce:69:2a:7d:54:33:19:9e:c4:69:7a:66:22:65:2c:
94:30:f3:6f:a1:88:85:1f:c7:5c:0b:8d:85:90:53:77:18:5c:
dc:a1:e7:5c:91:c9:65:4c:af:d8:cc:d4:f0:9f:0c:c0:5f:97:
05:73:a4:b5:ed:a8:76:b8:af:31:1e:ed:6f:3c:42:0e:20:f4:
c9:57:7f:4b:98:f6:61:17:a0:dc:1a:31:02:c0:08:e6:28:24:
92:53:f4:ca:d6:4c:f5:ac:2c:aa:05:b3:b7:3b:ab:ba:04:5a:
4b:49:50:04:3f:69:e4:82:b6:39:9d:24:ff:a1:c7:9d:49:42:
bc:90:bb:a0:6c:4e:d0:35:ae:d1:85:b1:13:8b:63:e0:1e:cf:
1d:56:da:b7:04:7a:2b:f4:cd:f1:95:f9:68:46:d6:b6:53:20:
a0:a9:12:8d:93:7a:72:b5:0c:20:a3:85:05:9e:c5:71:f9:9c:
32:e0:c4:6e:3a:0e:55:13:d9:44:a8:64:34:13:29:d0:00:63:
a0:0d:95:29:bb:a7:86:92:c2:5b:e7:d3:ad:0f:26:f1:e2:26:
3b:c3:b8:62:6b:fa:a2:d5:bb:0e:dd:a2:dc:bc:29:e6:a2:44:
a3:50:1d:89:02:77:2b:7a:c5:f0:19:80:01:8c:e4:50:f4:05:
b3:88:44:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:56:36 2026 by rpki-client