
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/378C18A43D3D11EAA59A8012C4F9AE02.roa
File: 378C18A43D3D11EAA59A8012C4F9AE02.roa (raw, json)
Hash identifier: rOBLE6A0EIALDzqcM8ydFc2oovMN2wtUd1p0AWxIOoE=
Subject key identifier: E8:2B:D0:16:9B:C1:A0:5A:A1:80:17:E1:E5:2D:0A:42:84:10:CB:FA
Certificate issuer: /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
Certificate serial: 0F93
Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/378C18A43D3D11EAA59A8012C4F9AE02.roa
Signing time: Wed 02 Sep 2026 18:35:30 +0000
ROA not before: Wed 02 Sep 2026 18:35:30 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 138990
IP address blocks: 2405:84c0:faaa::/48 maxlen: 48
2405:84c0:faab::/48 maxlen: 48
2405:84c0:fade::/48 maxlen: 48
2405:84c0:fbbb::/48 maxlen: 48
2405:84c0:ff90::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl
rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 17:45:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3987 (0xf93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4C60, serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
Validity
Not Before: Sep 2 18:35:30 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a986c72-39c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5b:23:b2:f1:a6:cc:3f:34:ba:0a:d2:3f:ee:
bc:eb:d0:95:60:17:4a:1f:d9:25:f5:16:2e:43:76:
20:72:43:6b:51:bd:75:59:fc:94:68:6b:67:24:e3:
7b:2a:7e:0e:d9:ee:45:f3:c0:e7:59:7c:16:da:ca:
95:8c:d7:96:53:bb:5a:9a:d5:86:f4:fc:2a:a7:1e:
2c:8c:01:34:c4:65:9a:03:30:42:9d:6a:54:01:14:
e5:9e:66:97:f7:57:36:a4:91:7a:43:38:6e:7e:d8:
6d:c4:de:7b:e8:53:7e:db:af:89:f4:40:1c:95:d3:
12:e8:f0:f8:bf:16:ca:a9:b7:5b:d4:82:50:c1:60:
be:c9:0a:e7:87:f8:9c:37:dd:57:43:53:ca:4c:2e:
1d:3d:d8:0b:2a:c3:58:e3:11:7e:b7:ce:28:d0:fe:
67:72:7c:1b:63:d2:ff:26:87:68:04:45:fa:9b:3f:
6a:da:2f:cb:a6:a3:f6:6b:e5:31:66:32:31:9b:1d:
12:70:9f:75:63:9c:8a:c4:ad:7e:f9:46:db:39:1e:
bd:b3:4a:54:97:cb:a2:3e:7a:f9:8c:65:42:5f:62:
c0:34:da:83:0d:00:46:28:2b:8d:f9:7a:fd:08:91:
1b:71:4a:64:1b:50:08:f7:b9:fb:2f:b0:e6:ee:9a:
fe:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2B:D0:16:9B:C1:A0:5A:A1:80:17:E1:E5:2D:0A:42:84:10:CB:FA
X509v3 Authority Key Identifier:
keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/378C18A43D3D11EAA59A8012C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:84c0:faaa::/47
2405:84c0:fade::/48
2405:84c0:fbbb::/48
2405:84c0:ff90::/44
Signature Algorithm: sha256WithRSAEncryption
65:ae:ff:34:ba:7f:f1:3c:76:56:6b:a3:7b:0c:29:99:c9:80:
56:ed:e0:43:02:46:bc:c2:21:cd:7e:d0:ce:78:44:08:94:3c:
eb:5f:c7:0d:bf:3f:4e:92:c7:d4:02:58:75:94:aa:e5:97:ac:
23:a4:98:ad:d7:e0:c1:22:81:68:b4:6b:69:a4:7c:d2:2f:8b:
04:ce:16:b0:5a:3f:7c:fe:1b:86:c7:d6:03:76:e1:be:25:c2:
c4:d0:d5:19:54:34:0c:fb:1b:27:b3:8d:42:fb:c8:ed:16:05:
d5:39:12:b3:8f:83:14:e7:48:9c:0b:72:2e:70:0c:05:a4:8c:
1e:a7:f1:c6:3a:e6:f3:63:02:76:cc:f1:39:43:98:73:94:61:
bd:0b:9c:ea:35:9d:70:ac:a5:8b:31:d9:78:17:62:ba:5c:54:
0a:4c:42:76:1e:d1:f1:1a:1f:d0:61:24:47:c6:1c:49:7b:09:
7b:01:3e:5a:26:af:88:a9:5f:e5:c8:13:d6:86:43:d0:ad:94:
e6:eb:cf:4d:25:5a:16:b0:76:0e:3f:1e:1a:56:16:c0:ee:fa:
35:15:8d:42:d2:4f:af:4c:da:b8:fc:19:e0:d4:45:04:02:5a:
cd:40:8b:d3:b1:18:1f:cd:7f:f6:08:cb:34:41:1b:3e:42:fe:
32:56:b7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:57:33 2026 by rpki-client