
$ rpki-client -vvf rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/49FB21A25C8011F0ABC6993DC4F9AE02.roa
File: 49FB21A25C8011F0ABC6993DC4F9AE02.roa (raw, json)
Hash identifier: TcqgQuTUKwk/8My9FRNGi7Q5iljemvXvrhjSAEqGUSM=
Subject key identifier: 5C:E6:C9:F6:04:0E:81:F8:78:86:E9:16:7A:15:C7:B3:73:4B:2E:3E
Certificate issuer: /CN=A91877A6/serialNumber=E54C7E1653D013424222C3B9368A213BA5115CE3
Certificate serial: C0
Authority key identifier: E5:4C:7E:16:53:D0:13:42:42:22:C3:B9:36:8A:21:3B:A5:11:5C:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ux-FlPQE0JCIsO5NoohO6URXOM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/49FB21A25C8011F0ABC6993DC4F9AE02.roa
Signing time: Thu 09 Jul 2026 09:35:21 +0000
ROA not before: Thu 09 Jul 2026 09:35:21 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 153995
IP address blocks: 2402:1260::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.crl
rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ux-FlPQE0JCIsO5NoohO6URXOM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:07:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91877A6, serialNumber=E54C7E1653D013424222C3B9368A213BA5115CE3
Validity
Not Before: Jul 9 09:35:21 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4f6b58-4dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0e:9a:b2:1c:de:b0:43:1a:0a:e4:2f:ee:39:
81:a9:b9:c2:cb:4d:ec:21:d4:8c:05:88:3d:48:5f:
c4:b3:a8:d4:a4:13:61:f3:17:5f:75:cf:e3:d0:e9:
da:34:cc:fb:bb:04:c9:f1:6e:e2:5a:8f:17:7b:46:
2b:ce:76:11:70:3f:e0:35:28:46:07:6d:5b:5c:11:
9a:3a:6c:44:5a:04:9e:2d:6a:b3:f8:ee:ff:02:cb:
ed:1c:e9:b5:60:b2:c8:da:5a:db:11:a5:6f:e1:d9:
f6:a1:9e:88:03:a9:92:38:b2:70:86:a9:dd:31:3c:
c0:26:12:5b:2a:47:26:8b:ed:e4:e1:ee:15:ac:30:
19:1e:68:63:e9:3d:5f:f4:e9:28:46:22:e1:20:24:
96:d9:c6:31:7e:1c:91:3a:9a:54:ef:2d:0e:23:dc:
94:52:eb:bc:d4:29:c1:26:c8:6a:74:53:97:8b:e9:
d8:b7:31:83:c3:43:e3:59:3f:19:a1:8d:42:9b:62:
d2:fe:0c:ed:b2:1d:fc:47:81:a3:9f:19:77:67:74:
4e:41:e1:6e:31:05:79:07:32:46:b7:05:fb:fc:ee:
0b:66:12:50:56:59:6c:8b:47:b9:df:9a:bb:77:6a:
71:74:a6:23:68:5e:eb:24:41:0b:2c:72:43:3b:29:
4b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E6:C9:F6:04:0E:81:F8:78:86:E9:16:7A:15:C7:B3:73:4B:2E:3E
X509v3 Authority Key Identifier:
keyid:E5:4C:7E:16:53:D0:13:42:42:22:C3:B9:36:8A:21:3B:A5:11:5C:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ux-FlPQE0JCIsO5NoohO6URXOM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/49FB21A25C8011F0ABC6993DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:1260::/32
Signature Algorithm: sha256WithRSAEncryption
19:fb:4c:54:87:8d:f0:6d:79:2b:2d:bf:a3:0e:a7:de:97:18:
c9:b0:18:18:18:2d:75:84:65:dd:1f:86:41:47:6f:5f:83:4e:
90:27:38:76:61:93:9d:2f:c5:f0:02:d5:f4:92:56:9e:4a:85:
96:b2:a9:b9:2c:8e:5a:df:2c:b3:14:0b:19:c6:d5:bf:62:e0:
49:4d:f1:57:c7:bc:1e:2a:ee:bf:8a:63:9f:44:40:6b:6f:69:
3a:f6:60:91:e7:82:b8:24:cc:32:8c:5e:7e:3e:a5:aa:29:1d:
10:0b:33:48:0c:55:50:f3:6e:02:8c:ac:17:13:57:e5:c7:86:
29:24:25:bc:51:08:ba:57:40:e8:28:ce:ea:e4:d6:8d:f1:95:
01:a6:ce:fb:ea:b8:b9:6b:d5:1e:4e:7e:e6:b9:94:50:31:44:
9d:ce:54:74:89:1a:6c:47:0c:31:46:40:e8:09:7f:4e:98:f5:
20:06:58:14:9f:9b:dc:d3:40:03:e9:22:0f:fc:c4:4e:99:cf:
ae:33:fa:f2:2a:18:c7:a9:f5:b3:e9:70:d1:56:d9:72:0a:8f:
99:2e:ed:0e:f5:7d:89:2d:6e:a6:53:b8:df:9a:b2:b9:0f:e7:
4c:2f:6b:7b:78:03:19:f9:12:ff:d5:ce:55:67:ac:5b:f3:ee:
a1:b1:ee:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:11:33 2026 by rpki-client