
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/18AD0FC8EED211EFBE1C2E6FC4F9AE02.roa
File: 18AD0FC8EED211EFBE1C2E6FC4F9AE02.roa (raw, json)
Hash identifier: CKrKO5A8lrli/r25h+gA/S2rB8zhLijPlDlqTl83J9Q=
Subject key identifier: AC:D0:27:17:F5:0E:0D:76:08:CE:22:08:87:F3:B8:C2:D2:3B:43:38
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6EBB
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/18AD0FC8EED211EFBE1C2E6FC4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:32:57 +0000
ROA not before: Fri 02 Oct 2026 15:32:57 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 153423
IP address blocks: 2001:df4:a240::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 10:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28347 (0x6ebb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:32:57 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcea9-80f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6e:32:fa:3d:bc:6a:b0:6f:80:1f:73:d0:50:
49:ce:8f:ea:52:c8:48:05:31:80:27:06:c0:92:a0:
36:aa:f9:5e:6b:66:e6:69:3c:49:db:cf:4e:39:7e:
21:4f:63:75:f8:17:39:f7:18:98:7c:4d:70:4f:97:
8a:69:28:95:72:a3:20:a5:63:04:b8:28:5f:d4:8d:
5a:93:9c:1b:f9:5b:3a:97:3a:6b:c2:43:ed:42:ff:
dd:10:91:76:86:c3:62:d3:61:c0:91:f4:15:81:82:
3a:42:94:52:1b:35:58:a9:c9:e5:71:c2:48:8c:78:
71:aa:fd:e0:4c:d8:3c:52:b4:b7:38:d6:af:52:8e:
57:2f:1c:48:dc:b6:d0:22:91:89:7f:fd:b8:69:95:
bd:c9:18:54:9d:1f:8b:29:dc:7d:52:0d:d7:af:47:
bb:d7:f9:fc:e9:e3:dc:ab:43:90:1d:8c:ab:36:71:
69:97:49:a4:01:b0:66:8d:f2:3f:f0:ed:b3:d6:cf:
a3:0f:33:7e:6d:5e:08:3b:29:2a:30:15:30:bd:99:
39:71:7a:16:cb:4b:fd:03:00:20:42:c4:8e:11:35:
35:39:c8:17:98:ea:c7:0f:1c:97:7b:4e:ce:64:c3:
55:b3:80:66:f1:5d:99:62:98:db:aa:7f:ad:f4:bb:
a3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D0:27:17:F5:0E:0D:76:08:CE:22:08:87:F3:B8:C2:D2:3B:43:38
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/18AD0FC8EED211EFBE1C2E6FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:a240::/48
Signature Algorithm: sha256WithRSAEncryption
5a:70:62:6e:b9:c7:8a:92:a9:fb:d7:a1:b6:a1:41:86:9c:ad:
61:19:a2:80:6f:57:24:30:fd:e2:0b:eb:48:ff:cd:86:be:26:
2f:15:a8:cc:44:63:cd:d9:04:79:83:c9:f3:92:33:ef:59:03:
88:3d:65:e8:d6:8c:b7:7f:9d:06:48:a0:00:53:f8:fd:c3:73:
bb:07:01:dd:8b:1a:32:77:1d:e9:90:de:5f:70:a3:74:39:fb:
d8:5c:c9:8a:35:01:76:a4:03:41:6c:ea:b9:51:16:35:28:52:
04:6a:0b:ef:fc:48:76:63:60:b6:7e:4e:cf:5d:12:f8:40:c4:
a5:02:d8:89:76:01:10:f8:ef:01:67:8b:8f:e4:11:95:4d:31:
b0:e8:20:99:1b:e7:72:16:5d:2d:2e:ec:7f:28:e0:1b:8d:70:
55:d8:1f:07:8b:49:91:0d:4b:2b:5f:fe:f0:ea:0e:28:c5:28:
11:69:d2:dc:e3:3d:6d:e6:ff:0d:5f:59:f9:20:b2:ff:49:89:
27:4c:1b:0c:56:be:4f:a5:6b:08:cc:31:ff:ec:13:cf:5a:e7:
bd:30:c8:75:37:0f:8c:ba:e7:92:5f:87:15:48:90:ba:cb:47:
50:15:fd:07:5b:c0:b4:2f:8c:b1:4e:6c:04:c5:3f:4e:3a:db:
8b:12:9a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:19:47 2026 by rpki-client