
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5DB4FB7CE3AA11EFA9ED913FC4F9AE02.roa
File: 5DB4FB7CE3AA11EFA9ED913FC4F9AE02.roa (raw, json)
Hash identifier: 7eevGAv8F2MPhDe5x4Ayzd5tTyQI7hc5D19aVPwVI+w=
Subject key identifier: 14:19:76:91:3E:A6:5B:E7:08:16:2D:95:9A:28:F0:7B:58:88:1E:DE
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6EC8
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5DB4FB7CE3AA11EFA9ED913FC4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:33:24 +0000
ROA not before: Fri 02 Oct 2026 15:33:24 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 153543
IP address blocks: 2001:df4:ef40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28360 (0x6ec8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:33:24 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcec4-aff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:23:49:9d:30:10:d4:45:1e:fc:06:6b:78:01:
bc:b0:90:83:33:dd:56:3c:f9:a9:8f:3c:4b:71:f1:
43:f3:67:5f:01:26:86:57:db:9c:3d:6a:3c:95:11:
d3:59:a7:f0:e3:a8:83:45:ad:ba:a1:7e:41:26:9a:
0f:f0:19:4f:e3:58:dc:b1:ef:3c:d7:21:a4:4c:ca:
35:db:28:76:84:e4:4e:8d:b7:7d:df:47:10:0b:23:
73:ce:e7:1f:ad:dc:14:ef:fa:28:a0:c6:06:45:c7:
9f:9c:73:f6:e9:e2:8d:1f:01:ea:44:62:2c:95:af:
40:ed:af:79:54:36:18:74:16:01:82:f8:20:6d:fb:
ab:f4:10:3b:58:94:ac:29:91:2f:1a:5a:bf:6e:17:
27:80:9d:6c:c3:79:a5:a8:0d:ce:de:8d:65:03:c5:
8d:cf:6b:d2:e9:e4:4d:ca:09:64:4e:7d:cb:04:21:
17:e7:e6:c2:20:0d:dc:11:d9:ef:82:7a:e3:62:4b:
1d:9c:b4:97:15:05:98:32:30:e9:1e:3f:1d:f8:fe:
6a:7c:cf:23:f1:a2:54:96:8a:7f:64:c4:91:74:7f:
a6:e6:11:56:a4:74:5b:1c:2f:95:c8:4f:81:3b:4e:
5c:61:0f:21:60:d1:40:58:35:b7:b0:02:f2:5a:cd:
ec:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:19:76:91:3E:A6:5B:E7:08:16:2D:95:9A:28:F0:7B:58:88:1E:DE
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5DB4FB7CE3AA11EFA9ED913FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:ef40::/48
Signature Algorithm: sha256WithRSAEncryption
9d:68:b4:6b:d4:89:7e:09:18:ec:32:7b:2e:9b:97:b5:ac:1b:
ee:5c:f8:50:cc:77:b4:96:b1:98:1b:9e:cf:5c:81:54:21:ae:
51:9a:c4:eb:61:af:ea:7c:0c:a1:c2:c0:b3:9d:d6:ba:6b:99:
f0:b6:51:01:c7:a4:6c:e4:6e:cb:67:e0:11:5c:1b:db:77:03:
74:17:64:bc:d8:43:7d:cd:4c:6f:b6:62:93:bb:3f:69:ba:02:
8d:e8:b8:2b:91:39:5b:b5:06:6e:1a:bb:5e:45:82:4e:36:29:
6b:a5:bd:08:b9:b1:ec:1f:1c:95:d3:9f:6c:39:5d:7b:73:a0:
d1:be:77:37:67:16:7f:1d:a6:fe:f9:d3:e4:08:4c:e2:a0:6c:
ec:0c:46:4e:15:22:b0:97:f0:37:f4:97:7c:93:4d:4b:04:ec:
48:0f:d2:9b:da:ec:e5:a9:b6:94:e8:08:a6:95:b8:02:fe:3c:
07:3a:61:a0:e4:e4:a6:04:e9:de:3f:4b:55:be:2c:2d:c6:5e:
ce:99:b1:d4:54:95:6f:a0:e9:49:a2:ef:3d:a7:98:4d:97:16:
44:91:67:74:1f:96:5f:53:78:3c:da:1e:21:4d:c6:26:9b:fc:
7d:79:69:32:1f:3f:d3:b0:21:05:f8:b9:c7:37:df:a3:07:0d:
8f:3d:1b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 22:15:16 2026 by rpki-client