
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/98B1AB6092AB11F1A333A10B5511F970.roa
File: 98B1AB6092AB11F1A333A10B5511F970.roa (raw, json)
Hash identifier: JKQHgGN19BzIR/HQmxNIMJHDKXETup4uH2VSXW31aUA=
Subject key identifier: 73:B7:89:41:32:B1:3C:A1:00:66:D3:4D:65:83:00:F6:00:64:CA:2D
Certificate issuer: /CN=A91AC5BC/serialNumber=F0CCF492065E93306D3BF3BEA3411AE4B687CF64
Certificate serial: 48
Authority key identifier: F0:CC:F4:92:06:5E:93:30:6D:3B:F3:BE:A3:41:1A:E4:B6:87:CF:64
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/98B1AB6092AB11F1A333A10B5511F970.roa
Signing time: Fri 07 Aug 2026 22:01:52 +0000
ROA not before: Fri 07 Aug 2026 22:01:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58563
IP address blocks: 206.109.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.crl
rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:22:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72 (0x48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC5BC, serialNumber=F0CCF492065E93306D3BF3BEA3411AE4B687CF64
Validity
Not Before: Aug 7 22:01:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a7655d0-1c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bd:c9:02:e2:65:8c:a6:d2:88:79:9b:f8:b7:
ca:cc:39:a5:a4:e9:78:3a:1e:1a:c6:da:5f:cc:52:
e7:bd:52:0f:52:0b:0f:d0:05:8d:1e:03:f1:82:77:
cb:c1:87:a5:99:fb:0e:a1:3b:bf:51:28:6f:7c:8a:
bf:a6:81:6d:0d:bc:ba:b8:6a:17:30:75:8a:b4:91:
c3:8b:9c:fb:31:7e:1e:0f:0b:4f:72:7c:91:2e:03:
68:15:31:10:dd:4e:36:a6:e1:f6:2b:47:12:fa:14:
58:d2:eb:cd:5d:40:11:59:11:48:b1:40:e4:a2:07:
5b:32:11:ae:61:71:64:07:af:48:93:96:c7:d0:47:
52:b8:6f:f4:6c:b7:7c:c0:ec:41:8b:e4:13:ba:27:
84:d0:fe:8f:d2:e6:5e:1e:15:84:05:e3:bb:bb:e2:
6b:92:27:d0:f1:09:62:36:53:3d:7f:74:ab:e7:00:
46:d3:7b:1a:6a:92:63:50:14:82:d5:05:02:60:ce:
b6:36:61:a8:59:22:fd:58:16:b5:15:41:01:dc:71:
21:8a:33:f2:59:d7:90:7b:66:5d:76:d2:f4:96:43:
46:6e:5c:4a:c5:ed:ad:16:d1:a9:0f:f9:a3:da:d7:
58:86:ba:1c:e3:8c:d3:c8:b1:e1:f5:62:7c:ed:9d:
68:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B7:89:41:32:B1:3C:A1:00:66:D3:4D:65:83:00:F6:00:64:CA:2D
X509v3 Authority Key Identifier:
keyid:F0:CC:F4:92:06:5E:93:30:6D:3B:F3:BE:A3:41:1A:E4:B6:87:CF:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/98B1AB6092AB11F1A333A10B5511F970.roa
sbgp-ipAddrBlock: critical
IPv4:
206.109.70.0/24
Signature Algorithm: sha256WithRSAEncryption
38:e5:19:ee:97:8d:97:a1:1c:25:9e:3a:66:58:b0:b6:8a:a9:
51:10:c1:92:32:99:e0:7a:42:eb:7e:b6:29:fa:9c:06:ac:fe:
bf:1e:f2:5c:3b:0b:9e:02:1f:d0:84:0e:1b:6d:c3:5f:0e:87:
8c:8a:36:52:74:38:44:ed:f9:cd:12:d2:07:18:02:ea:1c:82:
5d:a9:38:51:7b:9d:a4:f1:a1:70:4a:c7:ec:ab:70:45:b9:1f:
40:ec:b0:4e:58:fe:3c:36:b9:3e:dc:1e:26:3f:8f:af:fd:e2:
83:53:ff:0e:41:26:81:4f:5c:0e:6c:80:93:88:84:f7:1f:88:
e4:1b:23:65:f2:a2:cc:c3:5c:f8:d8:6f:41:dd:1f:c2:e7:64:
b3:f6:1d:72:35:0c:1a:68:43:5e:eb:8b:ff:b3:21:fe:83:10:
a8:32:75:6c:74:f5:47:15:2b:65:a6:4d:3a:3f:0a:78:e7:fd:
a3:bd:22:3e:81:61:26:3d:28:0a:f9:ad:8b:6d:ea:ef:d8:28:
f0:29:c9:d8:71:a2:7c:16:ce:3a:80:cd:74:48:24:2c:01:43:
68:7e:e5:ad:4e:36:1f:85:b9:8f:cf:9c:f1:c5:32:3c:b9:c5:
74:d5:97:f0:f1:5e:73:b0:28:98:c3:0a:c6:7c:b4:ac:17:ae:
34:ef:57:fc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 19 18:42:29 2026 by rpki-client