
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1076FF5EC69011EF9334B50FC4F9AE02.roa
File: 1076FF5EC69011EF9334B50FC4F9AE02.roa (raw, json)
Hash identifier: hZbOLkgo752UBjYId3HOkrJjNIgkKlERcS46kGGB1fw=
Subject key identifier: 76:DC:E3:8E:B4:5C:4B:76:10:B5:BC:C6:1D:29:0D:77:4F:30:D2:2F
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4DC2
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1076FF5EC69011EF9334B50FC4F9AE02.roa
Signing time: Thu 28 Aug 2025 14:56:04 +0000
ROA not before: Thu 28 Aug 2025 14:56:04 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 152969
IP address blocks: 2001:df4:24c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Oct 2025 14:35:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19906 (0x4dc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:56:04 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=68b06e04-081d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:e2:83:ae:ef:6e:66:0b:56:f6:f9:55:18:
56:05:88:91:6f:1d:ce:0b:a7:ec:69:16:e7:b3:6c:
e4:00:62:9b:33:62:25:c6:ae:28:ee:94:d2:50:7a:
28:d0:8c:40:59:ad:83:ca:75:9c:73:af:93:d3:85:
a3:61:55:56:9e:bb:bc:34:d8:91:7c:ef:77:76:68:
7f:3f:4b:34:74:bb:49:44:b6:d9:4f:58:9f:97:3a:
54:e1:bf:c1:ed:6e:a9:93:23:90:66:7e:fd:4e:07:
3b:86:59:a4:73:75:18:08:3a:96:b4:7c:8e:ea:ad:
9c:ca:aa:a8:02:1c:69:ea:de:a2:9e:be:03:8b:79:
58:a0:cf:d4:5a:85:2d:33:a4:82:85:bc:0c:8a:57:
c6:d0:06:9e:6f:a1:92:d6:0e:83:49:38:ce:2b:e3:
77:8c:c7:07:56:88:f2:4d:f4:b1:e3:2a:56:23:89:
8f:02:f2:16:99:df:fe:ee:46:bd:1d:98:6a:b0:fa:
92:8b:d7:e1:5d:57:1e:c6:bb:07:01:67:96:ed:c7:
c5:ec:a4:57:41:be:5c:20:6f:8e:80:98:aa:56:30:
f6:97:5d:2f:da:65:a6:1b:bd:6b:32:65:50:45:8a:
a2:94:68:d2:01:76:a6:e3:a3:29:51:82:c0:f0:c6:
69:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DC:E3:8E:B4:5C:4B:76:10:B5:BC:C6:1D:29:0D:77:4F:30:D2:2F
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1076FF5EC69011EF9334B50FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:24c0::/48
Signature Algorithm: sha256WithRSAEncryption
9e:c8:7b:7a:ac:23:8a:52:3b:dc:94:e1:c8:43:75:c8:cc:50:
6b:e3:af:65:80:55:f8:84:4c:8c:d3:23:82:d9:1d:aa:77:94:
b5:d3:a3:c5:6f:ee:40:41:ef:63:ef:7c:b1:8b:7d:a1:3f:c2:
f7:42:ee:51:f4:47:af:cf:3b:3c:7f:bf:30:8f:e8:bc:a2:65:
90:83:96:c1:3a:f1:60:5f:41:c1:3e:1d:e3:93:94:9a:64:f6:
5d:c2:ad:cd:2c:86:d3:cd:08:d4:ff:9d:90:12:56:bb:b8:73:
4c:21:0a:5f:e2:5b:57:a0:09:50:2d:94:f6:83:90:ae:8a:d2:
e1:ec:da:8c:cd:ff:f3:e6:8c:38:2f:f3:81:33:6d:7e:59:b1:
6e:01:2f:3e:7c:51:3c:d0:4c:a2:7d:49:c8:d0:fc:a8:46:bd:
27:96:bc:7e:13:e8:52:66:5b:76:fb:81:79:e6:da:fd:69:ae:
bc:97:84:cf:c6:84:58:e7:e0:0f:97:00:fe:8d:ab:c1:ce:cc:
24:9d:dc:32:e8:d5:66:ee:60:d3:18:53:57:90:3d:1a:6a:e4:
2c:07:5b:e4:97:b6:84:45:5e:fd:be:21:bb:1b:e3:c9:97:20:
aa:bf:84:52:c6:24:40:ad:b9:e1:06:bf:ef:fa:5f:35:34:1e:
64:61:19:0c
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICTcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwODI4MTQ1NjA0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGIwNmUwNC0wODFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt6fig67vbmYLVvb5VRhWBYiRbx3OC6fsaRbns2zkAGKbM2Ilxq4o7pTSUHoo
0IxAWa2DynWcc6+T04WjYVVWnru8NNiRfO93dmh/P0s0dLtJRLbZT1iflzpU4b/B
7W6pkyOQZn79Tgc7hlmkc3UYCDqWtHyO6q2cyqqoAhxp6t6inr4Di3lYoM/UWoUt
M6SChbwMilfG0Aaeb6GS1g6DSTjOK+N3jMcHVojyTfSx4ypWI4mPAvIWmd/+7ka9
HZhqsPqSi9fhXVcexrsHAWeW7cfF7KRXQb5cIG+OgJiqVjD2l10v2mWmG71rMmVQ
RYqilGjSAXam46MpUYLA8MZpVwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFHbc4460
XEt2ELW8xh0pDXdPMNIvMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMTA3NkZGNUVD
NjkwMTFFRjkzMzRCNTBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAgAQ30JMAwDQYJKoZIhvcNAQELBQADggEBAJ7Ie3qsI4pS
O9yU4chDdcjMUGvjr2WAVfiETIzTI4LZHap3lLXTo8Vv7kBB72PvfLGLfaE/wvdC
7lH0R6/POzx/vzCP6LyiZZCDlsE68WBfQcE+HeOTlJpk9l3Crc0shtPNCNT/nZAS
Vru4c0whCl/iW1egCVAtlPaDkK6K0uHs2ozN//PmjDgv84EzbX5ZsW4BLz58UTzQ
TKJ9ScjQ/KhGvSeWvH4T6FJmW3b7gXnm2v1prryXhM/GhFjn4A+XAP6Nq8HOzCSd
3DLo1WbuYNMYU1eQPRpq5CwHW+SXtoRFXv2+Ibsb48mXIKq/hFLGJECtueEGv+/6
XzU0HmRhGQw=
-----END CERTIFICATE-----
Generated at Wed Oct 22 21:05:22 2025 by rpki-client