
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/8D864528E26911EFB89A9142C4F9AE02.roa
File: 8D864528E26911EFB89A9142C4F9AE02.roa (raw, json)
Hash identifier: NpQW8k4zu/MCDQehzvD8ow5oFPR6pQ3aQJLeOrQZX6w=
Subject key identifier: 24:7A:C7:41:25:01:6E:5B:42:57:70:FA:D9:D7:0A:B7:5C:33:63:79
Certificate issuer: /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Certificate serial: 0B47
Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/8D864528E26911EFB89A9142C4F9AE02.roa
Signing time: Thu 26 Mar 2026 19:25:06 +0000
ROA not before: Thu 26 Mar 2026 19:25:06 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 4058
IP address blocks: 2001:218:2000:2::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2887 (0xb47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Validity
Not Before: Mar 26 19:25:06 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69c58812-7cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a4:0f:00:55:fb:f3:a5:bd:6b:8c:4e:08:04:
a6:fe:42:c4:fb:29:21:32:81:11:5e:ae:29:69:03:
02:c9:e0:4f:dd:a9:27:70:70:87:26:52:65:4a:a1:
c2:4b:39:8b:92:69:13:6d:42:f1:5a:fb:95:ad:07:
55:8c:e8:a9:59:88:7e:66:6f:33:3c:ce:69:ed:28:
a3:5d:a5:de:6b:fc:ff:04:5b:55:91:37:fa:c7:d1:
dd:60:07:a2:14:5a:11:fc:d6:0e:ce:49:6c:1d:45:
e0:20:66:3d:9d:25:a2:9f:24:d2:c5:df:73:41:be:
26:ee:e5:ee:2f:62:10:7e:18:36:20:db:2c:d1:ad:
80:95:91:8c:40:a5:fb:1d:31:7b:7c:76:2d:d4:bc:
28:b5:8e:44:da:1d:67:3b:39:fa:dc:31:36:d8:61:
c5:d7:d2:44:83:72:39:07:34:48:04:65:1d:bd:b9:
ae:19:c8:b4:06:4b:8d:17:f1:0a:f8:80:bb:af:1f:
7d:a5:20:de:53:47:41:ed:e9:f2:62:b8:2a:eb:c4:
20:9c:29:f4:ab:50:46:f8:2a:eb:4c:4e:1e:b5:bd:
6b:74:20:71:46:64:3b:ad:ad:9e:35:45:4b:31:d2:
ae:a4:ed:76:3d:aa:79:47:58:60:7e:4c:15:66:1a:
7a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7A:C7:41:25:01:6E:5B:42:57:70:FA:D9:D7:0A:B7:5C:33:63:79
X509v3 Authority Key Identifier:
keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/8D864528E26911EFB89A9142C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:218:2000:2::/64
Signature Algorithm: sha256WithRSAEncryption
85:fc:df:c1:59:53:98:e8:c9:48:23:af:e1:01:3b:e1:60:be:
e4:4e:a3:c4:a2:41:65:d1:b6:6c:ca:d4:04:5e:f2:0b:97:d8:
49:cc:2b:e4:d3:0f:5f:4a:67:ef:9f:ca:8e:9d:86:5c:7f:68:
a0:b8:1f:4b:f5:77:50:80:9d:c6:32:e4:df:34:7e:06:48:01:
d6:61:23:24:2b:76:0f:47:09:90:02:e7:c8:e0:e7:b3:e4:3a:
1b:e0:2a:49:da:ee:1d:39:fa:88:19:16:b4:4b:cb:cc:5e:bc:
10:77:89:7f:6c:d9:0b:0b:dc:a3:68:b2:2f:46:e8:db:5a:18:
55:d3:00:fd:2b:e8:94:be:09:b7:e3:82:b6:de:e6:c3:f5:4a:
f7:e6:6c:17:29:74:b1:3a:43:e7:f5:61:85:c2:81:3b:f9:35:
c1:75:cc:6f:e4:4d:58:74:1c:8a:0d:02:3f:3b:22:a9:15:a2:
72:3c:c7:bd:be:3a:d0:3b:64:d4:ad:ba:90:7d:b7:ab:a1:fe:
37:ff:59:07:d3:77:85:b1:92:6d:46:b8:7c:fa:8c:99:dc:d7:
39:04:75:c6:81:79:7e:7a:d4:5b:e3:f5:d6:9a:59:d6:d5:06:
2e:de:ad:bd:7d:bd:ba:87:08:dd:77:6d:17:c6:c4:96:10:79:
b8:f4:8b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 00:21:20 2026 by rpki-client