
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D3FFD0E0592111EF9A271B30C4F9AE02.roa
File: D3FFD0E0592111EF9A271B30C4F9AE02.roa (raw, json)
Hash identifier: mYDfGtzn2+KXHc4zalWD6YCMxXMW8WCjB50z+L/syTU=
Subject key identifier: 27:DA:A1:6F:28:B2:05:39:51:1C:91:F2:49:DA:02:81:95:D2:B7:18
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6EA3
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D3FFD0E0592111EF9A271B30C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:32:06 +0000
ROA not before: Fri 02 Oct 2026 15:32:06 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 152966
IP address blocks: 2001:df4:21c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28323 (0x6ea3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:32:06 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfce75-8dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0b:b7:7d:7a:33:7f:44:d6:43:fd:85:0e:56:
df:5f:63:79:a2:88:b9:c8:70:f5:7f:64:42:5c:67:
90:49:c1:ad:89:be:72:13:c0:f4:47:bf:3c:b7:ed:
61:4d:02:ea:08:82:9e:da:50:52:d1:be:c1:b7:e0:
dc:00:a7:b3:a9:20:f3:d0:22:b2:cb:c1:68:69:b2:
cb:87:76:ca:7e:c3:3e:82:97:8a:fe:6a:7d:52:03:
0c:ee:14:99:72:6d:b5:ce:f2:39:7c:33:e8:3e:51:
a5:8f:6d:61:4b:3c:4c:85:f2:75:21:54:1c:86:e7:
f5:96:7d:b6:0a:13:a8:f0:d7:2e:a9:78:fc:7d:21:
82:58:5b:f5:86:a8:a5:21:a0:de:4f:d2:84:57:40:
c0:c1:d8:c4:9f:e8:6b:cc:71:95:42:c6:86:68:06:
c4:d8:21:bd:da:f1:e5:c4:db:76:9d:f2:75:b6:2a:
2d:eb:03:30:b9:78:e8:a5:5a:e3:a0:27:c1:dc:ad:
bc:48:3c:6d:07:af:1d:2d:88:be:a5:51:88:0b:b5:
6c:7d:a4:a0:b5:21:01:1b:dc:40:26:4a:44:fe:3d:
08:84:35:1d:f9:ad:a5:88:fb:86:cf:70:2f:6a:e7:
e7:73:d8:8a:8d:9a:3e:34:a6:4c:3e:70:ed:e5:4b:
e2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:DA:A1:6F:28:B2:05:39:51:1C:91:F2:49:DA:02:81:95:D2:B7:18
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D3FFD0E0592111EF9A271B30C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:21c0::/48
Signature Algorithm: sha256WithRSAEncryption
a3:7e:0f:77:c1:20:5d:57:48:0c:41:96:cf:86:9c:a5:09:a0:
56:f6:d4:98:e2:c3:a6:fd:39:50:86:e4:fc:76:bc:02:1f:67:
ba:ca:2c:10:a1:9a:8b:b1:21:b2:a0:69:c9:6b:9c:b7:94:02:
27:b9:5a:e5:ea:49:e5:20:22:5e:37:90:b7:4b:15:7e:8b:9c:
2c:e3:f5:9d:02:31:ba:89:86:15:b7:b4:e3:d4:03:a2:1c:9d:
b2:5c:93:5e:9b:04:7b:f1:55:27:08:a8:87:dd:1c:95:fd:78:
1c:ca:eb:89:c9:7b:f6:8a:5c:70:e6:75:c7:57:4c:3f:4b:7b:
ca:cc:77:3a:9b:51:d4:01:8f:35:cc:61:d7:9d:95:6f:68:03:
b7:e0:67:9d:14:1d:cd:3e:6f:8f:b4:3a:b8:0b:c3:d8:4d:33:
0a:f5:95:82:fe:be:01:e6:c2:d1:3b:3c:aa:f4:84:a0:cf:96:
45:59:5c:55:44:2b:a3:4f:8a:79:b8:cc:18:a8:4e:1a:cb:f9:
ad:27:21:9f:eb:f5:8f:e0:b2:4a:c3:59:3f:1b:35:61:1e:9d:
00:c4:29:22:d1:af:63:47:c2:52:d7:d5:f9:66:b7:ae:45:39:
cc:ae:23:4d:86:6b:0c:e2:60:cb:c4:5c:7f:5c:28:26:62:60:
4e:4d:8d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:46:39 2026 by rpki-client