
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/26FB7E3ABE4111F1BBAE9B086411F970.roa
File: 26FB7E3ABE4111F1BBAE9B086411F970.roa (raw, json)
Hash identifier: V+vOkhDCczTWhMx1bTt1hl61/d9z3gsXXE9fPjuY/c8=
Subject key identifier: 91:9F:9A:79:2C:EE:41:75:F3:5F:B2:FD:EA:4E:44:A5:AC:95:E4:8E
Certificate issuer: /CN=A91B6C85/serialNumber=ED3160847DC4AED92D8C59D198465B1CBEF2DF22
Certificate serial: 01B2
Authority key identifier: ED:31:60:84:7D:C4:AE:D9:2D:8C:59:D1:98:46:5B:1C:BE:F2:DF:22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TFghH3ErtktjFnRmEZbHL7y3yI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/26FB7E3ABE4111F1BBAE9B086411F970.roa
Signing time: Fri 02 Oct 2026 09:10:46 +0000
ROA not before: Fri 02 Oct 2026 09:10:46 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 0
IP address blocks: 218.100.8.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.crl
rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TFghH3ErtktjFnRmEZbHL7y3yI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 04:20:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434 (0x1b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6C85, serialNumber=ED3160847DC4AED92D8C59D198465B1CBEF2DF22
Validity
Not Before: Oct 2 09:10:46 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abf7516-b39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:76:08:fb:13:e2:78:fb:52:d7:94:d6:1f:28:
9b:16:9b:3b:a9:17:10:9a:7c:09:0c:6e:0e:17:cc:
e9:05:e7:42:63:66:cd:a3:90:c5:47:38:f5:51:8f:
62:94:ab:20:ab:32:35:39:ba:ad:60:93:81:b0:0b:
fe:f6:79:9c:f8:61:a6:1e:b8:b8:3b:f4:d8:7b:c3:
0b:ad:b2:1a:52:98:cc:64:a1:0a:72:f3:70:7d:ae:
ba:30:35:39:54:bb:b5:8b:0d:f3:78:46:1d:41:67:
c5:03:3d:73:fe:2d:bb:8a:a2:e7:0c:88:e8:42:45:
67:0c:ee:06:da:44:5c:d9:f0:2c:73:d7:27:e3:81:
0d:e0:f6:3c:03:68:85:f3:bc:07:49:19:f2:8a:c7:
b6:62:46:ad:06:0b:f2:de:ae:5f:b7:3f:59:17:47:
42:cc:b5:43:22:e8:73:9e:cc:73:37:3d:6b:84:f0:
f7:e7:b6:df:83:66:69:18:ad:35:25:16:7a:2e:5e:
ee:7b:17:f0:c4:32:97:de:4c:22:13:24:21:42:a0:
f0:fd:69:13:86:80:04:0e:b1:96:38:69:79:01:cb:
85:8e:65:b1:e8:32:da:c0:ce:85:69:0b:8d:d3:2a:
67:f7:6e:42:1d:5d:37:92:21:02:4e:66:62:85:98:
66:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9F:9A:79:2C:EE:41:75:F3:5F:B2:FD:EA:4E:44:A5:AC:95:E4:8E
X509v3 Authority Key Identifier:
keyid:ED:31:60:84:7D:C4:AE:D9:2D:8C:59:D1:98:46:5B:1C:BE:F2:DF:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TFghH3ErtktjFnRmEZbHL7y3yI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/26FB7E3ABE4111F1BBAE9B086411F970.roa
sbgp-ipAddrBlock: critical
IPv4:
218.100.8.0/23
Signature Algorithm: sha256WithRSAEncryption
35:08:ef:ee:75:5c:cd:c3:80:58:72:5c:ad:f0:9b:a3:54:7b:
9e:64:a8:81:f5:02:bc:e7:0e:1c:fa:13:0a:e0:df:0d:3d:0f:
56:74:af:39:26:26:e7:f6:de:bf:ab:e7:10:5e:e2:00:d2:f9:
0a:41:ad:4d:67:7d:79:26:22:c7:3e:3d:23:12:fe:2d:b0:e0:
87:d5:3e:77:ee:ef:bd:26:80:fa:bd:1d:d3:24:46:ae:94:46:
46:25:45:b6:5a:6d:ff:a6:83:ed:f1:4e:8b:5d:d0:a2:88:ab:
27:6e:68:cc:c1:13:a3:6a:bf:ea:b9:4e:7b:2c:cf:32:7a:b4:
d0:b0:ef:f3:3f:8c:50:b0:94:de:0c:eb:46:77:5d:08:c4:63:
c1:51:9b:0b:9d:c7:2c:a1:6d:a0:93:ab:71:5c:c2:f5:98:13:
e3:51:85:4b:0f:b8:81:7c:26:b7:bc:76:1b:1a:4d:b3:6b:e6:
ee:48:e5:05:27:19:52:2c:e1:26:2d:7a:77:92:0d:96:4d:08:
cb:14:83:08:42:95:f4:95:f7:dc:7e:97:95:24:c0:4c:3a:75:
ef:47:f3:0b:39:69:ec:de:0b:e4:2e:eb:a9:b4:8f:38:95:62:
15:f6:40:47:df:36:90:e9:e8:ed:98:87:54:13:a9:d8:8b:e8:
5d:f1:d0:a1
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjZDODUxMTAvBgNVBAUTKEVEMzE2MDg0N0RDNEFFRDkyRDhDNTlEMTk4NDY1QjFD
QkVGMkRGMjIwHhcNMjYxMDAyMDkxMDQ2WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmNzUxNi1iMzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArnYI+xPiePtS15TWHyibFps7qRcQmnwJDG4OF8zpBedCY2bNo5DFRzj1UY9i
lKsgqzI1ObqtYJOBsAv+9nmc+GGmHri4O/TYe8MLrbIaUpjMZKEKcvNwfa66MDU5
VLu1iw3zeEYdQWfFAz1z/i27iqLnDIjoQkVnDO4G2kRc2fAsc9cn44EN4PY8A2iF
87wHSRnyise2YkatBgvy3q5ftz9ZF0dCzLVDIuhznsxzNz1rhPD357bfg2ZpGK01
JRZ6Ll7uexfwxDKX3kwiEyQhQqDw/WkThoAEDrGWOGl5AcuFjmWx6DLawM6FaQuN
0ypn925CHV03kiECTmZihZhmAwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJGfmnks
7kF181+y/epORKWsleSOMB8GA1UdIwQYMBaAFO0xYIR9xK7ZLYxZ0ZhGWxy+8t8i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkM4NS8yODcwN0NCRTI4
ODYxMUVGOEYxRkIxODVDNEY5QUUwMi83VEZnaEgzRXJ0a3RqRm5SbUVaYkhMN3kz
eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdURmdoSDNFcnRrdGpGblJtRVpiSEw3eTN5SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjZDODUvMjg3MDdDQkUyODg2MTFFRjhGMUZCMTg1QzRGOUFFMDIvMjZGQjdFM0FC
RTQxMTFGMUJCQUU5QjA4NjQxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQB2mQIMA0GCSqGSIb3DQEBCwUAA4IBAQA1CO/udVzNw4BYclyt8Juj
VHueZKiB9QK85w4c+hMK4N8NPQ9WdK85Jibn9t6/q+cQXuIA0vkKQa1NZ315JiLH
Pj0jEv4tsOCH1T537u+9JoD6vR3TJEaulEZGJUW2Wm3/poPt8U6LXdCiiKsnbmjM
wROjar/quU57LM8yerTQsO/zP4xQsJTeDOtGd10IxGPBUZsLnccsoW2gk6txXML1
mBPjUYVLD7iBfCa3vHYbGk2za+buSOUFJxlSLOEmLXp3kg2WTQjLFIMIQpX0lffc
fpeVJMBMOnXvR/MLOWns3gvkLuuptI84lWIV9kBH3zaQ6ejtmIdUE6nYi+hd8dCh
-----END CERTIFICATE-----
Generated at Wed Oct 7 05:52:03 2026 by rpki-client