
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C158A23E707E11F1854C60B37AA30FBC.roa
File: C158A23E707E11F1854C60B37AA30FBC.roa (raw, json)
Hash identifier: 6iMmDd7OHDS1SRTZBb+eAdNCkQko08sxjEvdg2EYfr8=
Subject key identifier: 41:A9:B1:DE:8B:0A:2B:49:84:67:F0:70:8C:4E:9E:67:22:DD:E0:26
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6CBF
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C158A23E707E11F1854C60B37AA30FBC.roa
Signing time: Thu 25 Jun 2026 10:15:14 +0000
ROA not before: Thu 25 Jun 2026 10:15:14 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 151938
IP address blocks: 2401:9f60::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 04:12:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27839 (0x6cbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Jun 25 10:15:14 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a3cffb2-b777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7b:27:49:71:82:ec:dd:9a:78:00:2f:ca:53:
5d:65:a8:99:47:d0:c9:6f:90:62:5a:63:c4:f8:48:
30:55:27:53:c9:94:07:bc:d7:58:27:2d:0b:b7:b5:
1b:fe:26:bb:7c:73:aa:3d:a6:1c:33:72:de:0a:2a:
bb:c7:c8:a8:f2:72:0e:1f:e7:e3:6a:c5:84:b1:02:
78:f0:4c:72:99:17:a6:0a:78:b4:94:ec:fa:34:ad:
87:15:76:3a:26:bf:f3:a4:99:2e:b0:ba:eb:e7:60:
a1:4a:54:51:ee:79:d4:b4:19:e7:93:54:29:7c:16:
78:da:c5:3e:c1:b8:aa:19:56:0f:67:a6:0a:44:03:
fd:83:fc:b0:67:75:d0:bb:c4:4c:01:e6:24:ae:1a:
7b:6b:5b:72:07:e9:d0:d7:55:65:44:44:74:f9:ba:
3f:59:aa:f4:d0:68:bc:5f:28:8f:03:1e:ab:06:40:
54:65:4a:71:c2:69:8b:31:2f:56:59:24:18:71:31:
8f:34:5c:71:7e:24:d1:bf:7a:4c:76:eb:19:a0:fb:
94:8b:ca:73:43:23:69:7e:5e:c0:cc:a7:55:52:ff:
bb:0b:19:fa:37:da:cc:c3:f6:d4:10:c9:b2:10:5b:
2a:5c:27:22:5d:c5:39:af:37:25:a4:c6:fe:bc:ad:
93:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A9:B1:DE:8B:0A:2B:49:84:67:F0:70:8C:4E:9E:67:22:DD:E0:26
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C158A23E707E11F1854C60B37AA30FBC.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:9f60::/48
Signature Algorithm: sha256WithRSAEncryption
bf:a4:a7:d0:ee:f5:2a:0d:84:ea:da:33:bc:37:2a:13:33:83:
c1:a4:fc:c6:7a:9f:7b:ef:2c:66:09:90:2c:d2:be:48:e3:23:
71:f1:a7:89:3f:c2:28:76:c9:63:a7:48:72:de:03:22:e2:9f:
0a:2b:73:52:e1:ac:41:51:2b:75:f6:44:60:2e:83:c6:4f:9d:
79:53:4b:3f:7d:93:bf:ac:e6:6d:11:30:46:73:0a:ef:b2:90:
d1:1f:6d:d8:de:67:45:90:82:d4:5d:bf:52:a0:a5:19:72:4a:
03:d7:9a:ba:b1:10:5e:82:f4:95:a7:b4:89:af:10:b6:81:e5:
e4:df:fd:39:f2:5d:17:c0:ba:62:86:b1:53:54:53:22:1c:33:
01:c1:f4:bb:08:05:4e:d2:85:c0:d7:01:f8:4f:ad:d2:75:27:
57:3e:5c:ee:ab:c5:7c:6e:61:86:91:9e:02:c0:6f:49:52:e0:
e0:ad:6e:d7:6c:3e:fc:6d:e0:86:e1:0c:e8:28:98:04:ad:cb:
f8:d0:b3:3e:a1:41:ca:d1:84:33:73:0e:40:41:eb:de:0c:15:
ee:45:94:5c:a0:fa:38:2b:ed:38:ea:68:29:58:c6:01:08:2a:
78:c4:7f:3b:19:17:71:ca:91:c7:0f:5a:6b:bf:98:21:63:aa:
82:b7:7e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:57:08 2026 by rpki-client