
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A6F151ACDB2E11EF9695A34BC4F9AE02.roa
File: A6F151ACDB2E11EF9695A34BC4F9AE02.roa (raw, json)
Hash identifier: Y/EdRXxaJQlhsPBfnoLzWvA14r3RZHLGA3GjH2rPCGI=
Subject key identifier: 58:88:2A:F8:08:8C:62:93:CF:8A:5E:2B:71:30:4B:45:0F:AB:8A:06
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6EC7
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A6F151ACDB2E11EF9695A34BC4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:33:22 +0000
ROA not before: Fri 02 Oct 2026 15:33:22 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 153539
IP address blocks: 2001:df4:e7c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 10:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28359 (0x6ec7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:33:22 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcec2-6647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:42:54:22:cb:ad:1f:41:83:c8:3a:e0:7f:e0:
1a:90:2f:64:9d:b3:82:7e:25:bf:f5:f9:df:ef:60:
eb:f3:d9:a4:44:46:e4:4e:48:56:c2:58:e4:ff:9d:
76:44:69:9f:a1:22:af:32:fa:96:d6:75:b8:67:a8:
39:e3:80:2b:02:79:bd:79:89:1e:b8:91:ce:50:47:
4a:70:de:42:aa:38:80:4a:83:dd:33:30:34:10:1e:
2f:d4:c8:ad:6a:65:a7:8c:f4:cf:f5:e3:5b:af:39:
b9:82:2a:da:a4:c4:2b:45:22:91:22:93:11:0c:fa:
4e:3a:8d:e0:cf:44:d3:8f:b8:ea:14:6d:77:fa:65:
96:96:ea:9d:d0:c2:76:c8:13:3f:a6:b9:ce:d3:27:
03:be:30:f0:72:a9:1c:fc:e4:27:cc:7d:58:59:36:
b2:17:81:f4:40:b8:ba:76:9a:89:21:b7:23:eb:08:
dd:14:49:02:2a:0e:88:1d:cd:fd:bb:78:b3:d5:c1:
eb:93:5d:e7:58:6a:4d:f4:6d:07:f7:25:7c:a3:fd:
37:2a:2d:18:50:70:35:d6:b6:71:7d:63:e1:d8:15:
c2:61:5c:4b:2c:62:fe:0d:9f:2e:66:18:45:65:89:
f8:6b:a6:bf:ed:ed:a8:4e:a6:fd:e3:8b:8f:0a:44:
d5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:88:2A:F8:08:8C:62:93:CF:8A:5E:2B:71:30:4B:45:0F:AB:8A:06
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A6F151ACDB2E11EF9695A34BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:e7c0::/48
Signature Algorithm: sha256WithRSAEncryption
43:98:6e:8e:46:11:e6:3c:30:81:26:8c:02:92:8f:ab:44:61:
21:86:50:4d:06:ef:9d:53:36:64:e5:fa:f1:08:1b:63:f9:a3:
0f:1e:52:90:6f:c3:53:ff:7f:f7:f1:e1:d7:f4:fb:50:d2:a0:
db:44:c7:bc:52:c9:5a:c4:48:84:db:83:5a:1b:a0:d6:a6:24:
ae:f3:59:f6:0f:93:38:d6:96:44:ec:51:bf:ed:98:4e:a8:c1:
59:8c:60:1a:79:9a:80:cf:bd:aa:9f:9c:d8:f0:83:66:73:ff:
3c:67:32:84:1a:51:22:d2:9d:30:4e:c2:96:bd:3e:4f:5f:14:
7e:df:64:f8:d5:a0:eb:3d:6d:ea:56:92:7c:55:bd:f4:02:27:
22:a9:6f:33:d9:0b:78:23:53:c3:61:47:44:78:a4:b4:87:c6:
0f:91:ac:95:d6:a5:d9:44:43:c2:ca:c0:9a:25:60:d3:7c:a8:
f7:1a:7e:9b:93:42:c8:ec:e8:cb:4b:be:09:84:a6:67:c1:6e:
d8:1e:48:a9:f9:bc:d4:03:23:0e:d4:4d:1b:19:b1:bc:21:4d:
4c:c7:89:51:0b:7d:be:95:02:b3:8c:b8:c9:36:29:21:af:42:
f3:0d:a6:a1:b6:09:23:02:8a:50:19:b7:e9:b6:c8:2b:02:7f:
39:22:15:df
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICbscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYxMDAyMTUzMzIyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2VjMi02NjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxUJUIsutH0GDyDrgf+AakC9knbOCfiW/9fnf72Dr89mkREbkTkhWwljk/512
RGmfoSKvMvqW1nW4Z6g544ArAnm9eYkeuJHOUEdKcN5CqjiASoPdMzA0EB4v1Mit
amWnjPTP9eNbrzm5girapMQrRSKRIpMRDPpOOo3gz0TTj7jqFG13+mWWluqd0MJ2
yBM/prnO0ycDvjDwcqkc/OQnzH1YWTayF4H0QLi6dpqJIbcj6wjdFEkCKg6IHc39
u3iz1cHrk13nWGpN9G0H9yV8o/03Ki0YUHA11rZxfWPh2BXCYVxLLGL+DZ8uZhhF
ZYn4a6a/7e2oTqb944uPCkTVLQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFFiIKvgI
jGKTz4peK3EwS0UPq4oGMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQTZGMTUxQUNE
QjJFMTFFRjk2OTVBMzRCQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN9OfAMA0GCSqGSIb3DQEBCwUAA4IBAQBDmG6ORhHmPDCBJowC
ko+rRGEhhlBNBu+dUzZk5frxCBtj+aMPHlKQb8NT/3/38eHX9PtQ0qDbRMe8Usla
xEiE24NaG6DWpiSu81n2D5M41pZE7FG/7ZhOqMFZjGAaeZqAz72qn5zY8INmc/88
ZzKEGlEi0p0wTsKWvT5PXxR+32T41aDrPW3qVpJ8Vb30AiciqW8z2Qt4I1PDYUdE
eKS0h8YPkayV1qXZREPCysCaJWDTfKj3Gn6bk0LI7OjLS74JhKZnwW7YHkip+bzU
AyMO1E0bGbG8IU1Mx4lRC32+lQKzjLjJNikhr0LzDaahtgkjAopQGbfptsgrAn85
IhXf
-----END CERTIFICATE-----
Generated at Sat Oct 24 15:41:10 2026 by rpki-client