
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5D9E700AE08411F09A71B4293D6F56BC.roa
File: 5D9E700AE08411F09A71B4293D6F56BC.roa (raw, json)
Hash identifier: gMRrBhvYszSEhM94jMU5HUzGigo9e07Zc5tOuis8/fE=
Subject key identifier: 2D:E9:7A:54:83:E0:BF:8D:9B:D6:F0:3C:E5:A6:64:FA:E8:14:BF:58
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6EF2
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5D9E700AE08411F09A71B4293D6F56BC.roa
Signing time: Fri 02 Oct 2026 15:34:48 +0000
ROA not before: Fri 02 Oct 2026 15:34:48 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 24035
IP address blocks: 2001:df0:19::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28402 (0x6ef2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:34:48 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcf18-75b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e4:6c:38:04:28:43:c7:ff:80:41:35:8d:b1:
2d:cc:0b:27:4c:84:20:49:ac:7b:bc:88:5f:33:87:
ca:ab:40:77:58:9a:1f:a7:b7:ba:28:c6:f3:03:69:
a7:4a:82:18:45:a7:38:ff:81:1d:dc:39:de:f7:37:
d6:b8:19:82:e9:15:32:38:52:8a:97:f6:d8:66:3e:
43:73:16:f8:af:87:d5:1e:c9:96:ae:22:f9:93:a2:
f0:c4:76:3b:6b:8a:59:21:a2:28:b5:c8:89:eb:11:
20:73:0b:b4:2d:df:0b:74:61:79:7e:1f:db:c5:88:
af:82:f9:e4:84:43:f7:53:9e:70:9d:98:7c:8b:18:
f6:90:29:e1:dc:7e:39:1e:bb:89:2e:d1:23:14:d5:
ca:74:7a:d8:f4:5a:ab:d2:d3:1d:f5:e0:93:73:17:
d7:21:e8:41:3c:19:50:fc:f8:ac:db:62:ed:07:3f:
d0:e9:95:af:4d:c4:50:be:e7:08:4a:56:b5:4e:fc:
d8:56:db:f1:e9:05:a4:20:03:dd:19:d9:9d:46:d8:
ca:5d:f9:1d:f2:0e:a0:85:a1:05:2e:8d:9c:81:34:
07:38:9a:f6:76:c6:1a:44:e7:0d:9e:eb:4f:ce:c2:
7b:68:c7:c3:01:ef:42:5b:f0:98:95:f1:fa:08:4e:
97:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E9:7A:54:83:E0:BF:8D:9B:D6:F0:3C:E5:A6:64:FA:E8:14:BF:58
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5D9E700AE08411F09A71B4293D6F56BC.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:19::/48
Signature Algorithm: sha256WithRSAEncryption
5a:84:26:c5:bd:e3:b2:09:38:81:9a:b8:89:86:88:e6:12:c0:
b7:cf:b6:e4:bf:7c:5a:82:eb:a7:d7:d4:e4:43:1c:ff:e0:9d:
e3:ba:a7:15:6a:82:9e:7a:ba:a6:7b:0b:3b:da:df:af:12:0c:
47:c5:d4:45:03:61:8e:44:89:d9:e9:2d:a8:d4:2d:43:ec:c9:
be:4f:37:79:af:9a:c1:31:80:55:2f:b0:bd:26:62:8b:35:f0:
ff:2f:6a:83:61:34:97:82:f0:9c:29:42:ba:d7:99:87:ae:ab:
3d:11:6b:71:d7:33:0e:86:c2:04:d4:10:8d:f1:34:a0:c4:2b:
83:89:28:5c:cd:be:63:0e:d7:9c:f1:df:af:b3:0a:8a:cc:65:
62:46:83:a2:5c:63:82:f8:fd:2a:0a:64:fe:20:66:3b:ff:c6:
7f:8d:ff:80:6d:2c:bf:59:10:32:15:14:d2:39:1a:e7:78:20:
a3:53:d9:58:2a:64:d6:88:54:ed:cc:74:3c:47:a0:ac:cd:f6:
fe:9e:b1:40:43:6e:e9:41:78:5c:48:59:45:6b:61:ff:39:6e:
ba:1f:73:f3:b4:7e:55:78:9b:a2:ba:cc:ac:86:43:f5:8b:8e:
28:b7:e6:6a:58:e2:0e:5a:44:4c:c5:30:0f:c6:86:26:51:67:
cf:96:f8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 21:55:22 2026 by rpki-client