
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/6CF3FF44901111EF922BFC29C4F9AE02.roa
File: 6CF3FF44901111EF922BFC29C4F9AE02.roa (raw, json)
Hash identifier: yG7D+192iHoB0CziG5M9FGKMr90aHDVhZCF/y4kzOug=
Subject key identifier: BA:6E:62:78:17:37:95:A8:84:B6:B2:1E:86:ED:7C:C5:D2:03:C5:CA
Certificate issuer: /CN=A91B1A3B/serialNumber=DFC528CF0006E3414AFB7FE86D1FDEAF648B5C9D
Certificate serial: 0165
Authority key identifier: DF:C5:28:CF:00:06:E3:41:4A:FB:7F:E8:6D:1F:DE:AF:64:8B:5C:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/6CF3FF44901111EF922BFC29C4F9AE02.roa
Signing time: Thu 27 Aug 2026 04:57:24 +0000
ROA not before: Thu 27 Aug 2026 04:57:24 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 150146
IP address blocks: 2001:df1:d40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.crl
rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 05:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 357 (0x165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1A3B, serialNumber=DFC528CF0006E3414AFB7FE86D1FDEAF648B5C9D
Validity
Not Before: Aug 27 04:57:24 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a8fc3b4-454e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:54:34:93:1e:a3:06:6d:3a:8c:d8:78:56:5d:
42:35:4d:a1:40:a2:f6:8a:91:60:92:42:99:f8:b1:
b1:3e:9e:cc:f5:7a:f0:3c:9e:2a:6c:40:fd:c4:f0:
50:b4:8d:87:14:92:59:59:33:5d:72:a9:fe:44:f5:
11:06:03:68:4f:8b:9f:3b:81:58:b2:86:f1:72:ca:
59:09:a3:f5:17:ae:1d:74:c0:5f:f7:4c:d5:48:9b:
76:cf:93:b6:38:c6:c3:12:db:eb:ac:2b:eb:ea:14:
bb:6a:31:c4:b5:c5:48:46:7c:c5:69:c3:ee:44:fb:
21:c9:c3:f1:74:80:34:50:92:21:28:a1:f6:25:e7:
7f:8e:77:34:cb:82:0d:20:d9:d5:af:2e:57:9d:70:
b5:9e:4d:79:b4:45:1c:a3:5f:64:40:46:46:0c:93:
be:ae:c6:72:51:fe:72:8d:c3:0a:c0:b7:e4:19:81:
88:55:e6:f3:3e:31:fe:17:78:76:58:9c:c8:0d:65:
11:4c:0a:e2:ef:b3:2e:f8:af:85:f0:9a:c6:08:65:
ac:82:4a:08:8d:ed:eb:34:68:50:72:f5:bf:06:e0:
d2:57:68:74:5c:92:cd:d2:c3:b6:f8:19:86:38:b1:
e5:cc:0f:9a:7e:fd:a3:44:d7:67:d2:8a:de:b2:53:
f8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6E:62:78:17:37:95:A8:84:B6:B2:1E:86:ED:7C:C5:D2:03:C5:CA
X509v3 Authority Key Identifier:
keyid:DF:C5:28:CF:00:06:E3:41:4A:FB:7F:E8:6D:1F:DE:AF:64:8B:5C:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/6CF3FF44901111EF922BFC29C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df1:d40::/48
Signature Algorithm: sha256WithRSAEncryption
37:cb:86:a8:be:e0:c0:2a:cd:dd:7b:a2:e2:8e:d9:d3:3f:ba:
a5:63:8e:26:9d:55:29:aa:59:37:89:98:a8:db:4c:57:8b:31:
5b:63:5d:8f:d9:ac:21:85:7a:de:74:24:92:83:3e:c0:c9:3f:
23:60:b8:91:fa:76:01:38:45:bc:67:64:db:0e:85:3e:a6:2c:
f2:6c:1a:9f:dd:1b:e9:9a:82:ed:21:3e:57:2e:37:85:ee:e4:
81:6a:6a:31:7a:90:94:0d:ae:35:f5:cf:3d:dc:d9:43:04:40:
00:1e:22:84:da:fd:c4:84:0b:4e:92:a7:a3:0d:d8:a9:f7:e2:
2b:1b:c6:a3:5c:ad:00:2f:55:a8:22:50:59:a1:71:b1:22:8a:
48:58:ca:cb:4c:88:ef:85:da:af:4d:ec:c6:a9:70:fa:8d:0c:
7d:27:a0:7f:a6:ed:89:ab:89:20:98:9f:1f:25:8e:c7:18:e9:
42:0a:14:cb:4b:bd:04:92:29:f2:ce:12:1e:e8:21:fe:90:50:
de:60:5c:d1:8f:84:14:59:e3:46:f5:7b:e9:4a:11:41:09:5b:
0d:eb:6a:f0:7d:fc:51:d3:7c:ac:2d:b7:2d:a3:52:68:52:da:
42:dc:fa:e9:43:6a:cc:f1:46:a0:8f:c8:4d:fd:0e:c9:2f:f5:
b8:53:88:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:36:17 2026 by rpki-client