
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C0CD5D3CE6D511EC8E85EB09C4F9AE02.roa
File: C0CD5D3CE6D511EC8E85EB09C4F9AE02.roa (raw, json)
Hash identifier: guoG0mQ1CaG8urmftHkbkzgX5fPKUMP9UVITFer8ffs=
Subject key identifier: 08:70:FC:D1:D3:B6:4D:26:BF:CD:03:B6:12:A9:54:22:82:6E:64:CC
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6F26
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C0CD5D3CE6D511EC8E85EB09C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:36:42 +0000
ROA not before: Fri 02 Oct 2026 15:36:42 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 55318
IP address blocks: 202.59.252.0/23 maxlen: 24
2001:df2:4080::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 10:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28454 (0x6f26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:36:42 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcf8a-aa66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:06:0a:53:ec:88:19:23:04:79:88:73:80:64:
d4:cc:80:d5:2c:d1:62:69:2e:6d:a1:0e:96:9a:59:
64:3e:94:1a:3d:f4:88:07:4c:de:27:74:d2:95:e7:
ee:bf:5a:54:ac:15:9b:72:fa:0d:d2:8b:04:c3:7b:
c1:95:51:6b:60:11:69:e7:b4:9a:03:59:f1:ed:d3:
a1:bb:c4:d9:10:9b:70:39:63:29:c6:50:85:5c:7f:
62:7a:39:e6:be:c3:5a:46:7e:3d:de:d9:24:38:04:
7e:8c:75:64:f6:0d:fd:9a:fd:6f:f5:32:5d:51:90:
47:c6:d7:9d:86:ec:9f:58:ef:97:a4:9d:0e:fa:93:
5f:82:31:3d:6b:ec:cc:8c:03:92:aa:b1:b6:99:38:
fe:04:aa:47:5c:8a:d2:60:1b:d4:9a:59:4b:82:98:
6a:58:d3:29:f6:5b:96:a8:12:fb:b5:dc:8f:65:7d:
28:d8:47:5f:a3:cb:e9:42:95:55:29:4b:85:6a:99:
39:4f:a2:e9:52:1c:57:f2:ef:7f:5f:e6:ea:96:f4:
f3:47:97:e0:3b:b7:34:74:8e:f2:74:63:13:76:51:
e9:00:d5:7f:ff:1a:f8:be:8e:0b:25:ca:e7:85:21:
14:81:aa:dc:f1:c2:a7:9c:cd:69:8e:3b:39:dc:a5:
83:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:70:FC:D1:D3:B6:4D:26:BF:CD:03:B6:12:A9:54:22:82:6E:64:CC
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C0CD5D3CE6D511EC8E85EB09C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.59.252.0/23
IPv6:
2001:df2:4080::/47
Signature Algorithm: sha256WithRSAEncryption
0f:05:7d:ac:73:1a:26:ae:2a:bf:16:1f:87:96:06:2d:0f:36:
6a:7a:8d:78:e7:1e:3c:82:90:71:9f:85:a2:d2:09:5e:b5:44:
ce:36:71:2d:e7:b4:2f:fb:dc:94:c0:4c:3b:18:3a:63:59:d4:
7d:26:12:c6:a5:99:23:e7:61:ab:3a:07:cb:de:5c:c7:98:07:
e0:a6:23:17:1b:ca:77:4a:bc:f2:5a:38:5e:b8:4a:89:dd:db:
92:6f:cb:9d:74:fa:3d:c9:95:5a:ab:a6:c4:f0:0c:df:86:ee:
ba:ad:7b:23:da:0c:fc:13:48:ea:6f:41:ba:3c:cb:84:28:45:
12:bb:1d:ce:48:4c:e3:73:e6:eb:55:68:37:0f:15:f4:c7:99:
22:a4:69:9d:3f:02:e1:99:2b:30:91:cb:52:e9:90:a7:2e:01:
58:e9:05:f9:23:91:b8:0a:c5:5c:35:47:dc:eb:24:f1:72:52:
ba:47:1b:ab:09:40:21:30:c6:a9:2f:75:35:e1:e0:e1:f0:16:
1e:b4:11:01:99:43:27:b7:06:c6:3a:be:cb:e9:11:a5:01:dc:
1e:e1:ee:b0:00:a8:be:d7:a4:90:72:dc:bb:5d:15:ef:10:ff:
a1:ba:a3:4a:54:13:df:80:bd:f0:07:36:36:ba:ef:83:d0:f2:
a9:27:a7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:19:06 2026 by rpki-client