
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/04EB22A890CF11EDA79E3741C4F9AE02.roa
File: 04EB22A890CF11EDA79E3741C4F9AE02.roa (raw, json)
Hash identifier: BPFzjrjvbIENiZufbAJecJN44zWR8aGWobvBpelAKzo=
Subject key identifier: EF:CB:1B:13:63:95:C2:A4:3C:03:5E:97:EB:DE:3C:DC:FB:04:0D:2E
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6E19
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/04EB22A890CF11EDA79E3741C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:27:13 +0000
ROA not before: Fri 02 Oct 2026 15:27:13 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 149064
IP address blocks: 2001:df0:2040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28185 (0x6e19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:27:13 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcd51-0467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a8:6b:80:38:16:fb:e2:66:9f:e8:20:84:a7:
72:7e:49:2a:69:4e:43:1b:26:81:17:49:06:ac:3d:
e1:11:11:16:03:7f:c7:2a:27:53:7d:b6:b5:e9:31:
2b:8a:f6:7b:11:3f:b6:af:9d:ad:13:bd:60:74:d7:
42:c7:ab:08:3c:e5:ba:4b:7c:b4:17:c7:47:40:64:
bd:9a:3d:7b:0e:f6:29:ba:82:37:9b:de:ad:e8:93:
5d:e7:ca:09:a0:0b:bd:65:48:63:ad:40:0e:19:7c:
27:1f:b5:cc:ea:4b:00:e1:70:34:78:ce:bb:0d:5f:
22:63:01:c9:fc:f5:e3:18:b3:90:b8:9f:14:5e:15:
af:c7:dd:65:f4:5e:55:05:0f:90:27:8e:0b:93:3c:
22:ad:48:fc:a3:39:4b:ba:3a:72:31:95:30:e2:e0:
3e:8e:ad:1e:08:3c:fa:29:8f:87:5d:0c:50:ca:39:
ab:97:d1:9d:04:6f:3b:34:aa:71:f6:ee:72:46:eb:
4e:2d:a3:48:fc:61:b6:29:33:c9:ec:1c:b3:6a:a9:
1f:ed:d1:f4:8e:6a:7b:04:0b:70:0c:9a:51:d1:f9:
6f:5b:bf:bc:b8:4c:b6:d5:6e:5b:ab:9a:38:ea:c1:
1b:19:b6:f5:70:30:ed:21:97:f4:d9:21:57:6d:7f:
c4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CB:1B:13:63:95:C2:A4:3C:03:5E:97:EB:DE:3C:DC:FB:04:0D:2E
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/04EB22A890CF11EDA79E3741C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:2040::/48
Signature Algorithm: sha256WithRSAEncryption
b8:e9:2f:0d:d3:5e:ee:77:1e:ce:cf:49:1e:34:6d:80:56:80:
3a:ee:d1:f4:95:c9:02:41:c8:25:3c:6e:46:3e:0a:02:26:c3:
6b:3e:7d:eb:eb:66:ae:10:b4:9c:29:0b:23:c7:a2:eb:02:9b:
4e:ac:a5:0e:10:84:3f:56:5b:3b:c6:ff:1f:3b:ad:03:6b:c4:
a8:2c:4e:d3:9a:4d:35:ca:5b:d4:36:fe:31:cf:f7:0d:cf:bd:
ba:2e:a8:af:dc:f0:ae:93:a0:fe:f9:f9:58:b6:38:8d:37:0e:
e4:fe:b0:83:70:8b:8d:ed:cf:9b:83:2d:d1:bf:eb:b9:37:f9:
f4:e5:dd:17:37:89:76:78:ab:59:2d:4e:0a:56:e1:e0:57:8f:
0f:c9:a9:59:68:29:29:04:ad:c2:8f:d3:95:a7:77:b0:b9:95:
b7:a1:95:3d:73:21:c8:8d:3f:45:99:86:2f:32:8f:5e:17:83:
1a:e7:31:2b:44:c6:c3:91:37:bb:73:62:9d:f2:7e:3c:f1:bb:
da:dc:41:d8:99:5a:46:2e:48:d6:6e:c0:50:88:30:23:aa:15:
37:9a:70:16:03:ae:5d:23:3b:71:7a:21:c4:5c:73:ee:9c:28:
a7:10:38:93:dd:36:c6:5d:4c:8a:fc:34:96:5b:02:31:2d:bf:
2b:fe:ce:21
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICbhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYxMDAyMTUyNzEzWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2Q1MS0wNDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkKhrgDgW++Jmn+gghKdyfkkqaU5DGyaBF0kGrD3hEREWA3/HKidTfba16TEr
ivZ7ET+2r52tE71gdNdCx6sIPOW6S3y0F8dHQGS9mj17DvYpuoI3m96t6JNd58oJ
oAu9ZUhjrUAOGXwnH7XM6ksA4XA0eM67DV8iYwHJ/PXjGLOQuJ8UXhWvx91l9F5V
BQ+QJ44LkzwirUj8ozlLujpyMZUw4uA+jq0eCDz6KY+HXQxQyjmrl9GdBG87NKpx
9u5yRutOLaNI/GG2KTPJ7Byzaqkf7dH0jmp7BAtwDJpR0flvW7+8uEy21W5bq5o4
6sEbGbb1cDDtIZf02SFXbX/EgwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFO/LGxNj
lcKkPANel+vePNz7BA0uMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMDRFQjIyQTg5
MENGMTFFREE3OUUzNzQxQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN8CBAMA0GCSqGSIb3DQEBCwUAA4IBAQC46S8N017udx7Oz0ke
NG2AVoA67tH0lckCQcglPG5GPgoCJsNrPn3r62auELScKQsjx6LrAptOrKUOEIQ/
Vls7xv8fO60Da8SoLE7Tmk01ylvUNv4xz/cNz726Lqiv3PCuk6D++flYtjiNNw7k
/rCDcIuN7c+bgy3Rv+u5N/n05d0XN4l2eKtZLU4KVuHgV48PyalZaCkpBK3Cj9OV
p3ewuZW3oZU9cyHIjT9FmYYvMo9eF4Ma5zErRMbDkTe7c2Kd8n488bva3EHYmVpG
LkjWbsBQiDAjqhU3mnAWA65dIztxeiHEXHPunCinEDiT3TbGXUyK/DSWWwIxLb8r
/s4h
-----END CERTIFICATE-----
Generated at Mon Oct 26 14:21:55 2026 by rpki-client