
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC757/5B38AA3699FE11F1A9DE99834B11F970/F930E2AE9A0211F18F8C777D4D11F970.roa
File: F930E2AE9A0211F18F8C777D4D11F970.roa (raw, json)
Hash identifier: g0HTZkRvVAAIsmTQpLZEGBxeJYJHzsZAyNCmFjkA0Pc=
Subject key identifier: 2F:94:17:49:51:D7:05:5A:10:47:C6:B0:66:AE:53:C0:C4:4E:A7:65
Certificate issuer: /CN=A91AC757/serialNumber=E24B1E8935947C46F111CE29685A5919A1848162
Certificate serial: 02
Authority key identifier: E2:4B:1E:89:35:94:7C:46:F1:11:CE:29:68:5A:59:19:A1:84:81:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kseiTWUfEbxEc4paFpZGaGEgWI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC757/5B38AA3699FE11F1A9DE99834B11F970/F930E2AE9A0211F18F8C777D4D11F970.roa
Signing time: Mon 17 Aug 2026 06:14:59 +0000
ROA not before: Mon 17 Aug 2026 06:14:59 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 133946
IP address blocks: 2402:6860::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC757/5B38AA3699FE11F1A9DE99834B11F970/4kseiTWUfEbxEc4paFpZGaGEgWI.crl
rsync://rpki.apnic.net/member_repository/A91AC757/5B38AA3699FE11F1A9DE99834B11F970/4kseiTWUfEbxEc4paFpZGaGEgWI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kseiTWUfEbxEc4paFpZGaGEgWI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 10:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC757, serialNumber=E24B1E8935947C46F111CE29685A5919A1848162
Validity
Not Before: Aug 17 06:14:59 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a82a6e3-d2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:33:6c:6c:bc:3a:d2:a1:ac:11:73:f4:78:a3:
3f:39:4c:0b:cb:a1:47:fb:32:ee:82:26:47:c4:e7:
df:85:34:b3:37:1b:d6:a4:8f:6a:8c:b1:ba:69:88:
86:24:65:dc:5d:90:93:63:bc:dd:25:b4:0e:e0:ba:
0d:30:a0:cc:d0:3b:be:e7:5d:39:9a:1c:89:b1:4d:
2d:cf:ad:df:1d:a7:cc:57:41:34:dc:18:f0:0e:6c:
4e:a5:fd:24:3c:ff:ed:81:52:3e:de:fa:83:e5:6a:
5d:84:be:2c:48:d8:73:fd:66:80:4f:03:53:94:d6:
29:7d:1d:64:fd:d3:dc:40:0e:8f:0a:7e:2e:ed:fa:
75:15:ce:b9:44:06:c0:b8:b0:e0:6a:43:61:26:13:
08:e5:36:ee:df:93:fe:59:71:94:63:4a:53:60:23:
b6:7a:31:91:11:11:97:58:3c:00:b1:9a:5d:7a:37:
ef:30:3e:16:0c:11:2b:da:79:f7:e5:54:5b:ba:1d:
d6:27:3a:a3:88:94:1f:00:c8:bd:f4:58:bb:56:4e:
c9:39:d8:82:3e:ae:ff:47:c9:2c:ff:9f:68:b6:a2:
fd:6b:5e:be:95:1e:83:5a:42:0b:df:b2:b1:6b:99:
69:2c:cd:10:40:81:c8:83:19:3c:cd:07:93:8b:24:
99:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:94:17:49:51:D7:05:5A:10:47:C6:B0:66:AE:53:C0:C4:4E:A7:65
X509v3 Authority Key Identifier:
keyid:E2:4B:1E:89:35:94:7C:46:F1:11:CE:29:68:5A:59:19:A1:84:81:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC757/5B38AA3699FE11F1A9DE99834B11F970/4kseiTWUfEbxEc4paFpZGaGEgWI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kseiTWUfEbxEc4paFpZGaGEgWI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC757/5B38AA3699FE11F1A9DE99834B11F970/F930E2AE9A0211F18F8C777D4D11F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:6860::/32
Signature Algorithm: sha256WithRSAEncryption
81:94:64:10:5e:a5:c9:79:b8:c9:e1:21:83:36:4f:1e:4e:f4:
d0:21:8b:2c:db:96:2f:35:1e:d3:9c:68:a3:78:69:81:a7:9c:
bc:ae:03:a0:39:37:69:dd:1a:8f:d8:22:98:bd:d5:97:ab:01:
88:d0:b8:06:2b:6c:e7:44:66:2a:3a:ff:f6:53:4f:fc:82:d1:
5b:fb:c5:0c:3d:ea:dd:c5:63:d0:c2:20:22:bf:2a:e3:8a:d0:
d0:42:4b:5b:ae:ee:59:ab:ca:d4:e5:8a:ab:7e:89:ce:4b:8b:
d4:a3:0d:21:6d:9f:fc:a1:37:88:e1:f4:9e:55:ab:fa:82:ec:
e8:39:76:a6:03:b6:a6:49:ec:e9:f2:4b:43:d6:9b:e5:ae:55:
05:0c:22:5d:04:1b:39:74:17:df:19:1a:3c:4b:85:c2:ab:0d:
c7:12:c9:49:e7:a4:69:98:e5:ef:bd:7d:9a:c7:44:5e:c3:78:
cf:e2:a9:0b:12:5b:4c:62:e0:f1:71:9a:60:6b:0f:5b:04:96:
84:b8:52:b2:0d:20:9c:dc:47:f9:ce:5c:df:5c:84:9d:23:7b:
74:31:5f:d6:60:6f:ed:71:21:91:22:0d:49:14:5d:33:5b:78:
60:fc:65:b0:da:1b:c9:db:a2:de:13:91:d9:c2:1c:7a:78:5f:
18:ab:21:e3
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
Qzc1NzExMC8GA1UEBRMoRTI0QjFFODkzNTk0N0M0NkYxMTFDRTI5Njg1QTU5MTlB
MTg0ODE2MjAeFw0yNjA4MTcwNjE0NTlaFw0yNzEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhODJhNmUzLWQyYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQM2xsvDrSoawRc/R4oz85TAvLoUf7Mu6CJkfE59+FNLM3G9akj2qMsbppiIYk
ZdxdkJNjvN0ltA7gug0woMzQO77nXTmaHImxTS3Prd8dp8xXQTTcGPAObE6l/SQ8
/+2BUj7e+oPlal2EvixI2HP9ZoBPA1OU1il9HWT909xADo8Kfi7t+nUVzrlEBsC4
sOBqQ2EmEwjlNu7fk/5ZcZRjSlNgI7Z6MZEREZdYPACxml16N+8wPhYMESvaeffl
VFu6HdYnOqOIlB8AyL30WLtWTsk52II+rv9HySz/n2i2ov1rXr6VHoNaQgvfsrFr
mWkszRBAgciDGTzNB5OLJJn5AgMBAAGjggJhMIICXTAdBgNVHQ4EFgQUL5QXSVHX
BVoQR8awZq5TwMROp2UwHwYDVR0jBBgwFoAU4kseiTWUfEbxEc4paFpZGaGEgWIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNzU3LzVCMzhBQTM2OTlG
RTExRjFBOURFOTk4MzRCMTFGOTcwLzRrc2VpVFdVZkVieEVjNHBhRnBaR2FHRWdX
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNGtzZWlUV1VmRWJ4RWM0cGFGcFpHYUdFZ1dJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Qzc1Ny81QjM4QUEzNjk5RkUxMUYxQTlERTk5ODM0QjExRjk3MC9GOTMwRTJBRTlB
MDIxMUYxOEY4Qzc3N0Q0RDExRjk3MC5yb2EwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkAmhgMA0GCSqGSIb3DQEBCwUAA4IBAQCBlGQQXqXJebjJ4SGDNk8e
TvTQIYss25YvNR7TnGijeGmBp5y8rgOgOTdp3RqP2CKYvdWXqwGI0LgGK2znRGYq
Ov/2U0/8gtFb+8UMPerdxWPQwiAivyrjitDQQktbru5Zq8rU5YqrfonOS4vUow0h
bZ/8oTeI4fSeVav6guzoOXamA7amSezp8ktD1pvlrlUFDCJdBBs5dBffGRo8S4XC
qw3HEslJ56RpmOXvvX2ax0Rew3jP4qkLEltMYuDxcZpgaw9bBJaEuFKyDSCc3Ef5
zlzfXISdI3t0MV/WYG/tcSGRIg1JFF0zW3hg/GWw2hvJ26LeE5HZwhx6eF8YqyHj
-----END CERTIFICATE-----
Generated at Wed Aug 19 13:37:10 2026 by rpki-client