
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/8DB4437A5B0C11F1A290872FAE833773.roa
File: 8DB4437A5B0C11F1A290872FAE833773.roa (raw, json)
Hash identifier: kddMFJP6M2YdDuXTiIMj4eShU+ZBD/05socoOXhdsL4=
Subject key identifier: E4:99:A0:69:93:A2:C7:30:F4:F0:9A:14:9E:C7:A9:D5:43:A6:29:7C
Certificate issuer: /CN=A91A26B4/serialNumber=94443098B8801FDAB3F50AA1AD67DF9D4AD8FAE4
Certificate serial: 36
Authority key identifier: 94:44:30:98:B8:80:1F:DA:B3:F5:0A:A1:AD:67:DF:9D:4A:D8:FA:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEQwmLiAH9qz9QqhrWffnUrY-uQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/8DB4437A5B0C11F1A290872FAE833773.roa
Signing time: Thu 27 Aug 2026 07:28:33 +0000
ROA not before: Thu 27 Aug 2026 07:28:33 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 154690
IP address blocks: 2402:5fa0::/32 maxlen: 32
2402:5fa0:1::/48 maxlen: 48
2402:5fa0:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/lEQwmLiAH9qz9QqhrWffnUrY-uQ.crl
rsync://rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/lEQwmLiAH9qz9QqhrWffnUrY-uQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEQwmLiAH9qz9QqhrWffnUrY-uQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 08:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A26B4, serialNumber=94443098B8801FDAB3F50AA1AD67DF9D4AD8FAE4
Validity
Not Before: Aug 27 07:28:33 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a8fe721-bb89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:31:77:fb:6e:be:c4:09:54:a2:9b:1c:53:cc:
2f:4a:31:aa:5a:d8:b1:97:a9:35:37:e2:be:9f:30:
0b:54:8a:a3:35:f8:1b:e0:b3:85:a4:37:5d:7a:49:
04:f1:95:6b:03:73:65:4f:06:55:7b:5e:f7:3d:f6:
bd:81:63:d6:99:33:ea:88:65:99:8d:97:09:4b:d7:
ab:e7:3d:61:6e:52:9e:a1:e7:b5:7b:23:72:fb:cc:
a8:15:4c:44:60:1f:84:b4:c0:a4:d7:7a:30:88:53:
13:d0:9f:49:bd:04:e9:47:85:7c:9a:26:d1:23:3b:
7e:85:8f:e3:f8:a4:8e:37:fc:84:08:1d:27:98:84:
d4:4b:f7:fc:ff:2c:61:8a:3e:08:93:04:88:e1:a7:
76:4b:c3:e4:0b:5b:f1:16:0c:0a:97:76:69:62:45:
1d:66:b4:08:bb:34:dd:97:83:c8:18:0b:33:dc:7d:
63:2a:d8:b4:e8:14:54:94:e5:8a:13:1b:09:cf:6a:
1a:6f:f0:0b:af:91:a3:3f:3d:e4:ad:e3:6f:23:ff:
86:66:25:f5:6f:59:a2:69:00:c8:a0:62:4d:97:9e:
f9:8b:62:cd:4d:96:6a:ad:e1:30:7c:49:12:98:a8:
7d:50:9d:09:87:c2:30:7f:5e:e3:4f:fc:6e:f9:87:
93:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:99:A0:69:93:A2:C7:30:F4:F0:9A:14:9E:C7:A9:D5:43:A6:29:7C
X509v3 Authority Key Identifier:
keyid:94:44:30:98:B8:80:1F:DA:B3:F5:0A:A1:AD:67:DF:9D:4A:D8:FA:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/lEQwmLiAH9qz9QqhrWffnUrY-uQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEQwmLiAH9qz9QqhrWffnUrY-uQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/8DB4437A5B0C11F1A290872FAE833773.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:5fa0::/32
Signature Algorithm: sha256WithRSAEncryption
4f:b9:4f:44:d7:40:f9:58:31:35:e4:0d:69:1e:7e:1c:a9:ac:
89:a6:dc:c0:e9:a7:cd:df:ff:e0:de:94:4c:6c:e5:bb:14:aa:
51:d4:7b:06:0f:d6:11:9d:49:19:dc:08:b3:aa:03:6b:aa:6c:
1a:ad:de:25:09:1a:6f:cd:72:3f:aa:f5:a8:9b:5c:31:85:04:
8b:1b:03:f7:23:11:00:ae:80:cb:7d:e0:02:f4:09:37:57:dd:
f0:55:d5:35:d4:de:e9:10:ee:bc:d7:3d:58:6d:19:8a:fc:20:
02:92:2c:77:f9:67:f0:d8:2b:d0:86:aa:5c:b4:0e:f2:8c:3c:
b2:94:fc:34:f4:c0:55:27:49:29:bc:36:af:7f:38:7a:7a:54:
9c:0f:8b:cb:ec:0d:07:96:81:af:ec:0b:68:c8:22:c8:ee:9e:
1d:cf:73:21:d3:c6:1e:82:ea:cc:db:f1:8c:08:44:4c:b5:12:
06:5d:36:b3:b5:c9:9c:21:7b:7d:25:57:37:f4:92:99:6a:9b:
50:8c:ad:7b:0e:f3:b1:a6:70:e6:f1:73:63:d4:3c:74:e1:2a:
49:b8:fa:8f:29:e7:3b:99:ad:65:f0:5c:36:78:f0:e0:86:83:
4d:01:5c:91:82:28:2b:1f:9a:92:25:01:80:e4:31:8f:87:16:
ad:36:6d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:46:33 2026 by rpki-client