
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/961A19E4BC4411EF95825C2FC4F9AE02.roa
File: 961A19E4BC4411EF95825C2FC4F9AE02.roa (raw, json)
Hash identifier: RLErHy3UFnFzgEJjWtTBOSGQ0x/rBeir5a1EnPLIxn4=
Subject key identifier: 3F:C1:A0:FC:5D:83:A2:E0:6D:1B:10:5A:73:6D:2E:C6:F3:9C:BB:F1
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6EBF
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/961A19E4BC4411EF95825C2FC4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:33:05 +0000
ROA not before: Fri 02 Oct 2026 15:33:05 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 153435
IP address blocks: 2001:df4:b1c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28351 (0x6ebf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:33:05 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfceb1-24a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:41:2d:72:5a:48:af:14:6b:f9:e0:8c:87:41:
3d:7e:12:3b:da:0f:24:89:12:04:25:10:c6:06:52:
62:a7:89:a5:7d:28:9d:37:59:ca:45:44:08:6c:00:
df:9b:e4:6b:ba:ed:d9:e1:0f:9f:7a:f1:da:27:26:
af:67:18:cb:0b:2d:6c:de:53:f0:4e:58:20:fb:2a:
eb:75:80:53:fa:50:1d:1e:03:e7:69:63:fe:42:24:
54:96:16:a1:f6:0b:60:7c:e3:b7:66:eb:ec:e0:4e:
1a:c2:00:fb:0f:22:a3:1f:76:76:31:dd:f4:6a:96:
79:a6:e8:d0:2f:23:b3:90:49:13:69:d8:ec:ea:3e:
90:03:66:bf:4e:48:1a:4b:a8:73:d8:15:84:dc:a3:
05:6b:5b:c3:ec:76:46:ab:41:a0:53:d9:40:9a:a1:
98:f5:0c:91:9b:05:a5:06:10:76:a5:62:f0:87:36:
0b:a4:18:8b:cb:69:67:11:48:92:2c:13:3e:59:a2:
39:27:04:cb:4f:e2:47:0f:52:06:f4:c6:31:cd:fc:
2b:58:82:4b:74:44:92:60:13:3c:fa:dd:05:17:76:
5f:e6:06:00:21:39:3c:75:9b:1d:9b:54:1a:3d:82:
a9:87:7f:5d:f4:cc:2c:fd:48:75:12:67:a5:8d:fe:
db:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C1:A0:FC:5D:83:A2:E0:6D:1B:10:5A:73:6D:2E:C6:F3:9C:BB:F1
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/961A19E4BC4411EF95825C2FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:b1c0::/48
Signature Algorithm: sha256WithRSAEncryption
b4:0d:c3:30:0e:a8:04:c3:f4:08:85:0a:58:ab:e2:ba:3d:83:
41:bf:03:a9:5d:25:c8:74:bd:8d:d9:8f:45:c0:0c:77:f6:58:
cc:f9:73:35:31:2b:96:eb:6f:20:de:5a:64:a2:4d:33:e5:fc:
c5:f6:c3:2f:bb:0b:9d:e8:3e:e4:ff:c8:58:da:7f:1e:7e:9a:
2a:17:27:d1:09:ab:6e:49:20:18:0e:39:80:d2:dc:76:d3:b3:
b1:d3:9c:ce:5e:e2:e0:36:77:43:25:2e:c8:3b:99:d6:68:b0:
bf:8f:b9:33:ab:58:49:88:89:69:d7:fd:71:b2:10:25:ee:57:
e6:d9:9f:17:fb:8d:36:ed:ce:1d:e6:50:81:a5:7c:db:2a:cd:
79:99:42:0e:26:f2:38:3b:ab:16:2b:21:ea:22:f3:ae:21:e2:
77:78:41:2a:8d:d1:c8:71:8f:32:de:78:d8:ab:31:f4:73:1a:
49:b8:ae:fd:b0:0c:78:a4:24:22:2c:b0:62:3d:73:22:1c:c2:
98:1e:32:8e:92:55:47:9e:d4:bc:a0:78:f1:b0:91:d1:a4:f0:
a9:a7:ff:e2:ff:34:93:b5:35:34:4e:30:f7:a6:9d:8d:4a:aa:
32:d1:d4:3a:5d:c0:d7:fe:b5:95:ae:52:80:bb:0d:8f:e5:2d:
a7:7a:bb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:51:41 2026 by rpki-client