
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/8BB9BA0A739411F195A6A0F072A30FBC.roa
File: 8BB9BA0A739411F195A6A0F072A30FBC.roa (raw, json)
Hash identifier: FzVInQGTXeLkU7QD7YhuspnWb0dDGRHG9zYuBhHsID4=
Subject key identifier: D3:1E:1C:F1:22:14:A9:35:56:73:06:82:C7:6F:C1:2A:E7:59:E7:9A
Certificate issuer: /CN=A91BDEEB/serialNumber=6B63A60E7D7F51D038728C6425906047016C9904
Certificate serial: 014E
Authority key identifier: 6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/8BB9BA0A739411F195A6A0F072A30FBC.roa
Signing time: Mon 29 Jun 2026 08:28:46 +0000
ROA not before: Mon 29 Jun 2026 08:28:46 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 153581
IP address blocks: 2001:df5:11c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl
rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 07:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334 (0x14e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDEEB, serialNumber=6B63A60E7D7F51D038728C6425906047016C9904
Validity
Not Before: Jun 29 08:28:46 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a422cbe-3f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4b:de:68:06:2b:5a:48:f5:02:b7:38:47:8e:
f6:2d:0c:cc:b3:b6:97:3e:ac:24:8f:28:ec:02:ff:
d4:7b:36:2c:ba:89:e4:3d:98:6e:6e:c2:39:b0:48:
2b:cb:3d:25:b3:ae:95:e2:9e:69:9e:cf:a5:8a:da:
4a:81:08:f6:bb:b5:4a:8a:53:b7:46:e6:40:a4:d8:
d6:a9:ad:00:4a:2a:20:21:e5:be:4f:fe:13:c8:d3:
90:5d:fc:64:0a:3e:28:b7:1c:35:87:8e:a7:33:5b:
c5:2f:90:5c:b6:2c:70:dd:7c:21:b2:07:64:4b:67:
13:54:27:4e:15:0c:72:96:39:cd:38:b4:44:16:b4:
f1:44:f6:17:c0:bb:93:eb:09:fb:ad:ae:ce:77:02:
e3:2b:2e:90:b0:6c:b1:e0:ec:c0:e3:85:05:e6:6a:
11:c4:cf:5b:c1:80:3c:c4:29:2d:67:d4:1e:70:10:
9a:34:b6:b0:09:27:1a:ee:1f:86:8e:a7:a4:c6:8b:
f3:e2:04:84:5b:bd:ec:67:66:d6:9d:6d:6c:78:a3:
d8:d2:b1:c9:86:15:0b:ed:48:b7:fe:83:8f:00:a5:
06:f1:10:bb:40:6d:e8:7b:7e:a2:37:f7:e3:ae:41:
32:1a:42:0e:e8:fb:a9:c5:1d:9e:31:4a:e7:44:69:
d8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1E:1C:F1:22:14:A9:35:56:73:06:82:C7:6F:C1:2A:E7:59:E7:9A
X509v3 Authority Key Identifier:
keyid:6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/8BB9BA0A739411F195A6A0F072A30FBC.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:11c0::/48
Signature Algorithm: sha256WithRSAEncryption
2c:0f:a9:c6:65:92:de:dc:4a:79:83:9a:ad:6f:18:fb:28:6f:
17:d8:ff:81:da:5e:a4:2f:57:70:c9:30:4e:9a:6c:92:59:bb:
eb:b0:2f:f4:8e:f9:58:96:72:2f:d1:f7:bd:1b:bb:9b:00:33:
f5:7e:6c:2b:d2:95:ae:a1:e3:84:2e:17:9a:27:fc:96:1c:51:
6a:68:6d:6e:ba:28:f7:46:6d:ac:eb:43:86:94:03:2c:02:d9:
6f:86:9a:05:3a:3e:ca:9d:af:da:a8:4f:5a:97:8c:67:34:0b:
37:75:65:bd:f2:da:83:2c:aa:e4:18:a0:8b:8d:22:6c:bb:80:
70:6e:88:b3:f7:f5:49:90:04:91:10:90:80:31:9a:72:75:a4:
05:2f:ca:35:cc:18:40:a5:b7:d0:07:90:3f:1e:b5:55:2b:30:
d4:84:7a:c1:fc:0b:22:56:9a:03:47:1d:8a:b9:36:2b:e0:85:
6b:4c:61:7d:bd:9f:02:0e:02:34:61:b8:a5:b3:bb:3b:39:9a:
1a:52:b9:4b:22:20:00:99:04:24:fa:f0:e4:f9:7a:dd:37:80:
ce:c0:b0:38:18:cf:4d:63:ce:76:2f:7b:10:1e:2a:e0:07:cd:
96:ca:93:9f:1e:fe:97:45:16:7e:8c:93:95:15:58:68:e5:3b:
ef:44:19:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:19 2026 by rpki-client