
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/B8A6EC507C0311F19A8027EB8FA30FBC.roa
File: B8A6EC507C0311F19A8027EB8FA30FBC.roa (raw, json)
Hash identifier: /Q/OsSViVbdEWWh4hmj1eO/01IaaRMepWRYxRTkU9Pw=
Subject key identifier: 54:8D:BC:6D:24:FB:6F:E0:75:6C:88:F1:A1:74:F3:19:E3:4C:8D:9A
Certificate issuer: /CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
Certificate serial: 07FA
Authority key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/B8A6EC507C0311F19A8027EB8FA30FBC.roa
Signing time: Wed 02 Sep 2026 21:42:44 +0000
ROA not before: Wed 02 Sep 2026 21:42:44 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 214483
IP address blocks: 2403:58c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl
rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 21:24:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2042 (0x7fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C326F, serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
Validity
Not Before: Sep 2 21:42:44 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a989853-e390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1d:09:f4:5c:4b:d4:2d:19:03:f6:aa:55:d7:
9b:cd:52:f9:6c:8f:e7:ac:3b:ba:76:8b:77:b0:74:
e0:67:22:4f:f0:b5:c5:2f:64:5d:40:83:51:26:d7:
ac:cc:0f:03:2a:c5:dc:80:ec:9c:d5:76:5e:08:1e:
95:ea:25:fb:18:d2:9a:60:f0:4e:da:fb:91:1b:08:
ac:ec:63:e1:17:00:fb:b8:d6:a4:71:6a:a8:65:1e:
2c:72:ea:51:15:04:8c:d5:1a:67:03:3c:26:01:13:
1e:30:b5:63:67:de:e7:fc:45:9e:1c:7c:d1:12:43:
13:4d:ce:ac:09:ce:68:5e:3c:d4:92:4b:43:02:83:
47:ce:17:55:41:a0:c1:68:55:b7:20:86:67:ed:9e:
ef:bd:24:a3:45:37:5b:d3:91:73:81:83:6b:2b:59:
4b:23:1e:32:71:a1:d2:a2:a7:5e:0f:c4:c6:ff:df:
77:63:fa:57:aa:59:64:5b:f6:50:c0:89:15:ab:9b:
af:cd:d4:53:64:d5:14:24:2b:85:17:00:ed:04:95:
30:29:0f:55:99:84:3c:15:bd:d4:d4:9e:8a:f4:31:
c1:cd:0d:5c:da:e2:0d:77:7e:b2:83:a8:4b:4e:63:
cc:1f:fb:5c:13:7e:e1:81:dc:6e:75:b8:ab:e1:8b:
b7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8D:BC:6D:24:FB:6F:E0:75:6C:88:F1:A1:74:F3:19:E3:4C:8D:9A
X509v3 Authority Key Identifier:
keyid:39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/B8A6EC507C0311F19A8027EB8FA30FBC.roa
sbgp-ipAddrBlock: critical
IPv6:
2403:58c0::/32
Signature Algorithm: sha256WithRSAEncryption
9e:20:42:1d:68:ab:ef:b7:17:70:12:b4:92:28:61:a7:8c:31:
e9:05:75:e1:d3:40:60:5a:fd:cd:c3:d7:c2:7f:54:71:31:b1:
49:44:8c:d7:0a:3e:a8:17:72:92:f3:0b:29:13:15:00:53:2b:
14:de:40:86:c6:28:00:cb:88:c1:90:bf:75:4f:45:d7:11:42:
2f:4e:22:e1:fa:ea:b6:21:41:ee:db:51:95:a8:02:e9:8f:6c:
9f:50:64:28:ce:d5:60:e9:65:92:b2:96:87:a6:1b:93:4e:78:
8e:63:40:11:57:34:2c:fe:36:e2:bb:0b:d8:74:b0:e3:e6:e3:
7a:ba:58:ca:f2:1f:5c:86:6c:85:3a:e9:47:ff:8b:68:4a:67:
65:e3:6f:d4:79:b6:99:64:dd:ab:b9:47:6f:9d:b5:2e:84:b1:
52:60:a4:c8:99:61:eb:40:2b:cb:30:b9:cd:c7:09:62:aa:f6:
90:07:9b:25:db:4b:c2:bd:a5:65:c0:61:57:c6:71:bb:a4:cc:
b0:78:c6:ec:82:fd:d8:07:a1:da:5d:7e:2f:1b:b3:15:bd:3e:
53:37:8c:d5:86:2f:15:c4:db:8b:61:31:a0:2c:7c:67:97:43:
12:72:ff:0f:a3:ac:41:a3:8b:aa:3c:ab:8a:98:7a:b5:a0:0b:
fd:2c:34:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:30:57 2026 by rpki-client