
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8DFF3E8E736D11F0AA6D9947C4F9AE02.roa
File: 8DFF3E8E736D11F0AA6D9947C4F9AE02.roa (raw, json)
Hash identifier: 2ohBrBHj0CIAm7zdM/GXR7gTfNqb/DSw008O7lgqueo=
Subject key identifier: 8B:35:AE:DA:BD:86:05:11:4E:D9:0F:A7:4A:45:18:EF:B9:48:04:A6
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6EDB
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8DFF3E8E736D11F0AA6D9947C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:34:02 +0000
ROA not before: Fri 02 Oct 2026 15:34:02 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 154091
IP address blocks: 2001:df5:e940::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28379 (0x6edb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:34:02 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfceea-48e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8a:02:09:b6:37:2b:6f:ba:ea:18:9d:4e:b0:
dd:0e:b0:72:60:71:8b:65:88:e8:4d:29:5b:df:35:
f7:4a:fc:ba:3f:e4:2a:ae:a8:77:fe:c1:c9:8e:18:
07:26:ad:6b:1c:81:a1:24:32:96:08:41:cf:5e:2f:
6b:52:5d:ef:26:9c:23:3d:5b:3b:b5:f9:30:34:9c:
26:cc:b4:82:d0:7e:7a:81:21:08:65:c8:c8:5a:7a:
9b:65:dd:0c:9c:33:9c:54:4d:12:f3:6e:1f:0e:ca:
ab:64:f6:43:7b:32:ee:1e:b8:8b:7a:f1:40:49:16:
b6:e4:c4:c6:54:ef:5e:e6:ef:e6:d5:d4:55:03:39:
b3:09:73:7e:a9:ac:d5:44:56:10:93:34:3f:4c:3e:
46:eb:33:24:06:95:61:33:be:4c:9b:73:2f:4f:76:
af:df:08:eb:fa:db:4c:f6:97:a4:b5:54:30:92:8c:
b9:d8:1f:9d:cf:99:6a:cf:3a:99:23:1b:d9:34:04:
f2:81:44:36:48:7c:96:36:fd:fb:5e:f1:9b:62:b1:
90:1a:0c:ce:7c:e8:77:81:0e:28:41:2a:93:3b:e8:
ef:ce:1a:61:28:f0:1b:c0:04:9d:f2:97:1c:bb:2a:
e2:20:51:a2:ef:77:20:fb:e1:ea:3b:bf:72:e3:9f:
94:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:35:AE:DA:BD:86:05:11:4E:D9:0F:A7:4A:45:18:EF:B9:48:04:A6
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8DFF3E8E736D11F0AA6D9947C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:e940::/48
Signature Algorithm: sha256WithRSAEncryption
44:f5:86:cf:06:98:34:0e:4d:e2:54:c0:68:74:a7:b6:65:73:
d6:3b:31:60:f3:c4:88:03:dd:b7:a5:f1:15:48:14:73:e8:d9:
c7:df:b7:7f:bc:45:cb:37:02:bf:64:a7:05:00:e1:0d:04:96:
9c:98:3c:c7:12:d0:cd:74:f9:a1:20:2a:b5:6a:a5:91:06:05:
51:24:93:ac:bc:be:91:f8:63:e7:9d:53:58:3f:5d:06:6d:c0:
0d:c3:dc:44:31:2e:bb:a2:24:29:a5:d3:ab:68:2e:f6:ad:09:
ea:ed:ad:4d:df:c3:9d:5e:d0:58:0b:e3:2f:70:93:d5:d4:ba:
57:f7:a8:a6:c6:0c:43:c5:a1:8b:7c:94:4a:88:ea:8b:4e:12:
73:c3:0b:8d:03:e1:73:05:02:79:d9:23:06:ae:bd:fa:73:62:
f0:da:ee:74:9a:cb:10:93:9e:11:c7:b2:83:0e:6e:d4:ef:cc:
b2:f7:13:07:dd:e5:77:9d:a0:9c:0b:c6:81:97:b7:5c:9f:11:
f8:4d:a2:ed:62:7f:4d:b6:98:c3:7b:75:a7:cd:00:60:4c:cf:
bd:b7:b0:54:dd:ce:77:47:85:03:4c:d2:e1:f2:8d:37:b8:74:
3f:e7:58:9d:55:5c:3a:29:ab:a1:90:93:1a:76:53:c6:94:29:
41:96:0c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:45:35 2026 by rpki-client