
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E64A79F07FF711EBBDDF9359C4F9AE02.roa
File: E64A79F07FF711EBBDDF9359C4F9AE02.roa (raw, json)
Hash identifier: TdUSH1Alof2RnxE0ebd03aECKbH6VKoZwdmHDisxp5Y=
Subject key identifier: 85:CF:DF:6B:4D:D2:17:DF:DB:B5:92:60:14:14:62:A0:F9:FB:61:94
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6F08
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E64A79F07FF711EBBDDF9359C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:35:34 +0000
ROA not before: Fri 02 Oct 2026 15:35:34 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 38735
IP address blocks: 49.246.128.0/18 maxlen: 24
49.246.192.0/19 maxlen: 24
113.52.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 14:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28424 (0x6f08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:35:34 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcf46-ae18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:06:22:ce:64:a2:d6:bf:da:36:bd:c0:7d:be:
7c:fa:06:f8:19:c5:23:b0:e9:d5:a8:5b:09:03:55:
36:20:11:8f:04:0a:ca:67:48:3f:f5:51:13:9a:aa:
c9:86:f6:86:16:8a:05:5c:7b:48:06:32:33:a0:21:
3b:4a:0a:ba:5f:55:4b:d2:10:04:87:39:a0:12:d9:
a6:cc:ea:58:ee:dd:19:69:cf:d0:dd:3b:79:2d:ca:
25:d9:84:86:c6:4b:35:5c:19:98:65:36:2c:c6:c9:
c0:66:16:5f:03:41:f9:1e:a3:6b:0f:55:11:2e:a3:
a3:33:1f:73:30:ba:3c:d2:14:a5:b8:9f:88:77:66:
e8:52:9c:77:46:2a:3b:16:59:11:15:df:f7:67:e4:
22:e0:d2:d6:b7:cd:36:01:c6:19:b1:96:c6:b2:e0:
64:af:04:da:85:69:2d:d8:2e:45:35:06:6a:ab:e9:
c9:d0:ac:e9:c6:d1:9d:d6:de:1d:77:63:45:f1:0f:
65:0b:67:99:5c:d7:8e:54:1b:e6:54:59:1a:68:18:
ff:4c:c8:e1:00:73:ae:25:04:e9:ec:35:81:9d:bd:
d5:0b:79:3a:45:0b:14:1c:51:c0:c7:99:5d:08:2e:
91:22:d1:94:a1:1f:87:0f:60:1d:e3:3c:5e:76:c6:
8f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CF:DF:6B:4D:D2:17:DF:DB:B5:92:60:14:14:62:A0:F9:FB:61:94
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E64A79F07FF711EBBDDF9359C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
49.246.128.0-49.246.223.255
113.52.32.0/19
Signature Algorithm: sha256WithRSAEncryption
08:b4:7d:c0:1c:95:48:1a:c1:2b:42:fb:50:4a:0c:d8:00:34:
5d:4e:ea:f7:eb:31:2f:68:56:d4:04:a9:3d:a0:c8:cd:ab:93:
11:3e:17:6c:54:76:86:17:60:c0:ed:d8:dd:d8:88:0c:47:c1:
78:e2:0c:46:f9:fb:0c:be:8a:7f:b4:fe:62:6d:4a:ea:ac:57:
34:ce:fc:2d:5c:52:e5:43:cd:6b:b4:36:56:cd:88:5d:e3:21:
72:7d:64:d0:96:ee:be:18:b5:6f:37:80:9a:85:96:ec:7c:66:
90:97:bf:6f:6c:14:9f:26:d4:8e:32:bc:33:d7:d2:94:15:ed:
c8:40:cc:dd:ef:1f:aa:43:7d:06:27:e7:55:30:30:7e:b8:8c:
ae:43:52:b7:58:da:39:ee:14:3a:91:99:d0:97:ec:df:6a:ed:
23:d0:2f:52:fa:e4:26:ea:88:cb:21:19:02:ef:f0:0a:c7:4b:
bd:a3:07:d4:a3:fc:88:f3:e6:b3:38:38:75:32:d4:b5:34:3c:
f9:94:db:55:be:e1:e4:fc:13:84:ee:e2:e6:b5:64:cf:bf:5c:
fa:cb:ab:fa:9e:ed:4a:34:2d:7a:8f:22:f8:92:f4:f1:cf:fe:
47:43:fe:88:92:ef:a0:a7:97:46:d1:e3:3a:b5:4f:f6:c5:10:
7c:07:fc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:04:32 2026 by rpki-client