
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C3809/B7C3DA2A8EE911F1811037946311F970/39CD26E88EEA11F18D5914636411F970.roa
File: 39CD26E88EEA11F18D5914636411F970.roa (raw, json)
Hash identifier: +/GsjYmLP1MJ0UBnltZuLmnLB7EDcP7VF/Red6/k4FU=
Subject key identifier: 9A:6A:41:2F:43:36:57:10:D9:9D:F2:64:A6:73:ED:76:F9:CF:58:1F
Certificate issuer: /CN=A91C3809/serialNumber=17506B92B863377320BDB2E306F48C8500918FB3
Certificate serial: 02
Authority key identifier: 17:50:6B:92:B8:63:37:73:20:BD:B2:E3:06:F4:8C:85:00:91:8F:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1BrkrhjN3MgvbLjBvSMhQCRj7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3809/B7C3DA2A8EE911F1811037946311F970/39CD26E88EEA11F18D5914636411F970.roa
Signing time: Mon 03 Aug 2026 03:20:07 +0000
ROA not before: Mon 03 Aug 2026 03:20:07 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 154791
IP address blocks: 2001:df7:4dc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3809/B7C3DA2A8EE911F1811037946311F970/F1BrkrhjN3MgvbLjBvSMhQCRj7M.crl
rsync://rpki.apnic.net/member_repository/A91C3809/B7C3DA2A8EE911F1811037946311F970/F1BrkrhjN3MgvbLjBvSMhQCRj7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1BrkrhjN3MgvbLjBvSMhQCRj7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 01 Sep 2026 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3809, serialNumber=17506B92B863377320BDB2E306F48C8500918FB3
Validity
Not Before: Aug 3 03:20:07 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a7008e7-e763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2e:7a:94:be:83:51:8e:e6:fc:73:85:59:8e:
63:04:ea:fe:a3:5d:0b:e7:17:d2:01:4e:a8:8e:56:
48:2c:a1:3b:12:94:77:7f:04:e9:d7:67:d1:f9:53:
02:35:31:52:f8:fd:68:ca:be:42:12:af:53:51:48:
c8:eb:56:8c:76:40:15:8d:f0:2f:d9:f2:7c:bf:93:
52:6a:ad:74:b6:bf:6d:50:ff:55:06:22:ec:01:31:
4b:01:12:f9:13:dd:14:6f:ad:fe:65:02:b8:6b:21:
7d:87:6c:d2:6b:e6:e5:a9:0f:1c:28:3a:dc:37:84:
ec:15:0e:32:a5:83:3b:41:36:95:24:52:c2:83:bc:
dd:d5:43:d1:d2:09:97:18:03:47:0e:82:b2:e6:95:
4d:bd:29:88:25:ae:3f:1d:ba:c2:ab:5b:3b:88:10:
fd:6c:69:e2:9d:02:8e:8d:f3:25:30:61:43:1c:70:
78:8b:15:9d:4c:eb:4f:0a:95:bb:5a:7d:6e:cf:b2:
e4:cf:ef:88:ee:c5:4a:de:f1:fd:04:5b:4e:2d:19:
51:f1:14:7e:df:a6:16:aa:26:5c:c4:c9:e7:84:fd:
57:c3:16:57:94:6e:6d:25:0a:d0:2f:12:8c:fd:e1:
27:81:c2:81:1d:37:38:e0:be:e7:b7:f2:6f:bc:32:
30:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6A:41:2F:43:36:57:10:D9:9D:F2:64:A6:73:ED:76:F9:CF:58:1F
X509v3 Authority Key Identifier:
keyid:17:50:6B:92:B8:63:37:73:20:BD:B2:E3:06:F4:8C:85:00:91:8F:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3809/B7C3DA2A8EE911F1811037946311F970/F1BrkrhjN3MgvbLjBvSMhQCRj7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1BrkrhjN3MgvbLjBvSMhQCRj7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3809/B7C3DA2A8EE911F1811037946311F970/39CD26E88EEA11F18D5914636411F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:4dc0::/48
Signature Algorithm: sha256WithRSAEncryption
15:09:df:73:65:20:e9:db:98:a5:7b:69:d2:0d:aa:df:37:b1:
00:02:5b:e9:57:7a:ef:c0:81:5b:b5:af:6b:fa:56:42:25:aa:
c2:18:98:09:1e:ab:4b:24:10:7e:1c:cb:b7:69:fb:c1:53:42:
db:74:da:44:1a:09:84:eb:9b:83:10:8a:61:19:9d:67:c7:d6:
2d:cb:e1:26:46:8d:33:c9:3e:08:c9:9d:9b:a3:11:a2:89:1b:
54:5d:c6:17:ec:b6:ea:af:68:58:cb:c5:0a:ae:4e:b7:de:16:
4f:fa:3d:df:d7:89:0b:f0:56:c8:3d:3a:25:11:32:cb:b4:a0:
47:62:39:e4:85:55:bb:e3:5c:8e:e6:19:9d:34:e9:55:55:c9:
42:0f:76:06:54:c7:c4:14:4b:8d:21:5a:ab:fa:3f:c9:b7:8d:
f0:5f:23:b5:62:75:2a:29:bd:8b:22:00:2a:e7:0a:d7:a9:18:
51:06:87:e9:61:20:74:2e:08:36:d8:98:ba:7a:14:11:e6:6e:
7b:49:74:bc:e2:80:66:6c:b5:8e:d2:23:91:d2:82:0f:fe:5a:
97:34:c9:b8:95:b7:98:ae:e8:9c:47:03:fe:03:b0:52:47:c5:
9b:1e:cf:2f:7f:54:0f:d2:6c:53:ac:8a:95:4b:3a:94:80:02:
91:32:48:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:58:06 2026 by rpki-client