
$ rpki-client -vvf rpki.apnic.net/member_repository/A91923E8/B6C497A654F411F1BD1F2CEDA1833773/7C8C2A6254F511F196BFD0ACA2833773.roa
File: 7C8C2A6254F511F196BFD0ACA2833773.roa (raw, json)
Hash identifier: ODlYFMC35RnPVy0+0b0Dj0grE3qwQGSfvttzNWvXPLU=
Subject key identifier: 62:E8:C0:F7:28:C7:9D:B4:44:2B:5E:A7:3A:E1:83:D6:E5:16:27:21
Certificate issuer: /CN=A91923E8/serialNumber=79563F9840F294761420847EF5E1382ED56362F7
Certificate serial: 02
Authority key identifier: 79:56:3F:98:40:F2:94:76:14:20:84:7E:F5:E1:38:2E:D5:63:62:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVY_mEDylHYUIIR-9eE4LtVjYvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91923E8/B6C497A654F411F1BD1F2CEDA1833773/7C8C2A6254F511F196BFD0ACA2833773.roa
Signing time: Thu 21 May 2026 09:14:36 +0000
ROA not before: Thu 21 May 2026 09:14:36 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 154280
IP address blocks: 2001:df6:2dc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91923E8/B6C497A654F411F1BD1F2CEDA1833773/eVY_mEDylHYUIIR-9eE4LtVjYvc.crl
rsync://rpki.apnic.net/member_repository/A91923E8/B6C497A654F411F1BD1F2CEDA1833773/eVY_mEDylHYUIIR-9eE4LtVjYvc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVY_mEDylHYUIIR-9eE4LtVjYvc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 09:58:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91923E8, serialNumber=79563F9840F294761420847EF5E1382ED56362F7
Validity
Not Before: May 21 09:14:36 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6a0eccfc-be0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:65:cc:1d:97:08:98:5a:4a:12:2b:9d:86:6d:
ca:08:ea:e6:f4:af:83:ba:bb:07:9b:6f:eb:18:c6:
0c:f9:8e:4e:3c:82:3a:8a:95:bb:2c:8b:72:e1:63:
b8:90:c9:84:57:db:a4:12:25:b4:30:e1:f6:0c:58:
4a:dd:d4:28:dc:d9:49:d4:15:e1:2e:05:e0:f4:b7:
7d:20:52:e0:5b:c1:0f:98:65:f3:cb:47:21:67:1d:
00:44:bc:0b:75:ae:f2:e8:5e:e2:08:c9:f5:e5:b0:
96:ae:82:83:5c:45:56:9c:ec:bd:21:b0:16:b4:bd:
62:e0:57:51:93:02:23:52:8c:48:00:c6:de:44:55:
e8:24:f0:92:fd:88:ce:cc:97:fd:f1:35:39:6e:8e:
18:74:a5:72:bd:f7:a3:41:39:46:65:22:60:2e:8b:
96:83:1d:79:ee:ea:12:32:7d:72:9d:80:0c:ec:fa:
a9:a0:0b:a5:47:d6:e2:42:60:1a:6d:bf:36:56:a7:
ed:72:f5:ac:d4:58:25:96:e1:2b:75:1a:76:2e:d3:
07:ae:01:1a:f0:23:82:c1:5c:47:b7:a9:d3:4e:9f:
8e:d9:33:ee:53:14:bf:a5:34:2e:bf:28:71:ae:e6:
c1:eb:5a:b5:fc:dc:07:96:c0:6f:b1:3a:fc:b7:55:
49:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E8:C0:F7:28:C7:9D:B4:44:2B:5E:A7:3A:E1:83:D6:E5:16:27:21
X509v3 Authority Key Identifier:
keyid:79:56:3F:98:40:F2:94:76:14:20:84:7E:F5:E1:38:2E:D5:63:62:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91923E8/B6C497A654F411F1BD1F2CEDA1833773/eVY_mEDylHYUIIR-9eE4LtVjYvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVY_mEDylHYUIIR-9eE4LtVjYvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923E8/B6C497A654F411F1BD1F2CEDA1833773/7C8C2A6254F511F196BFD0ACA2833773.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:2dc0::/48
Signature Algorithm: sha256WithRSAEncryption
c5:68:56:cf:37:45:43:bb:52:3f:20:a0:75:51:86:20:e8:64:
49:a9:80:8b:93:10:ba:85:d4:d0:df:d9:38:a8:32:bb:7e:b9:
04:96:4d:73:57:8e:e1:b2:56:8e:5b:fd:77:2f:00:b6:eb:e4:
6f:20:d1:2d:f4:41:d9:ed:b3:35:7d:c6:de:3e:25:92:29:e7:
f1:49:f7:d7:ff:34:8c:dd:c8:ac:e9:92:86:2f:94:0e:7a:ee:
0a:b8:19:15:00:a4:b0:fd:ba:0f:b3:d1:8e:1e:9f:d2:ad:46:
2b:a4:36:cb:f8:60:c6:bd:23:3d:4c:7e:aa:74:09:31:0c:ab:
f9:80:5e:f5:cc:35:5f:65:ea:c3:56:31:17:c2:ef:8a:69:29:
74:13:a6:37:12:cb:d6:63:64:8c:ca:bb:f9:8f:00:d2:66:52:
dc:5a:10:ed:72:c3:f9:ed:f4:b0:d0:b3:65:de:35:59:bd:63:
f4:14:c0:90:f5:3e:3d:ef:60:69:a6:93:36:df:56:84:1b:d0:
d9:78:51:f0:02:7a:58:05:ce:ca:f6:cf:d1:c8:a5:ec:64:dd:
1b:f9:39:af:82:b4:9d:d1:df:64:98:11:f7:c9:f2:00:5e:1c:
89:fd:a8:3b:7c:56:5e:c1:8a:c6:ab:66:da:14:dd:5a:87:86:
63:03:07:99
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MjNFODExMC8GA1UEBRMoNzk1NjNGOTg0MEYyOTQ3NjE0MjA4NDdFRjVFMTM4MkVE
NTYzNjJGNzAeFw0yNjA1MjEwOTE0MzZaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhMGVjY2ZjLWJlMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCpZcwdlwiYWkoSK52GbcoI6ub0r4O6uwebb+sYxgz5jk48gjqKlbssi3LhY7iQ
yYRX26QSJbQw4fYMWErd1Cjc2UnUFeEuBeD0t30gUuBbwQ+YZfPLRyFnHQBEvAt1
rvLoXuIIyfXlsJaugoNcRVac7L0hsBa0vWLgV1GTAiNSjEgAxt5EVegk8JL9iM7M
l/3xNTlujhh0pXK996NBOUZlImAui5aDHXnu6hIyfXKdgAzs+qmgC6VH1uJCYBpt
vzZWp+1y9azUWCWW4St1GnYu0weuARrwI4LBXEe3qdNOn47ZM+5TFL+lNC6/KHGu
5sHrWrX83AeWwG+xOvy3VUkpAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUYujA9yjH
nbREK16nOuGD1uUWJyEwHwYDVR0jBBgwFoAUeVY/mEDylHYUIIR+9eE4LtVjYvcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyM0U4L0I2QzQ5N0E2NTRG
NDExRjFCRDFGMkNFREExODMzNzczL2VWWV9tRUR5bEhZVUlJUi05ZUU0THRWall2
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZVZZX21FRHlsSFlVSUlSLTllRTRMdFZqWXZjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MjNFOC9CNkM0OTdBNjU0RjQxMUYxQkQxRjJDRURBMTgzMzc3My83QzhDMkE2MjU0
RjUxMUYxOTZCRkQwQUNBMjgzMzc3My5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAgAQ32LcAwDQYJKoZIhvcNAQELBQADggEBAMVoVs83RUO7Uj8goHVR
hiDoZEmpgIuTELqF1NDf2TioMrt+uQSWTXNXjuGyVo5b/XcvALbr5G8g0S30Qdnt
szV9xt4+JZIp5/FJ99f/NIzdyKzpkoYvlA567gq4GRUApLD9ug+z0Y4en9KtRiuk
Nsv4YMa9Iz1Mfqp0CTEMq/mAXvXMNV9l6sNWMRfC74ppKXQTpjcSy9ZjZIzKu/mP
ANJmUtxaEO1yw/nt9LDQs2XeNVm9Y/QUwJD1Pj3vYGmmkzbfVoQb0Nl4UfACelgF
zsr2z9HIpexk3Rv5Oa+CtJ3R32SYEffJ8gBeHIn9qDt8Vl7BisarZtoU3VqHhmMD
B5k=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:57:10 2026 by rpki-client