
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/BB5954CE241111F094390A32C4F9AE02.roa
File: BB5954CE241111F094390A32C4F9AE02.roa (raw, json)
Hash identifier: ef4lv30v406PmcKm4a1LzWHrixGqc5q9ekgP0Wh8CuU=
Subject key identifier: 7F:76:BC:01:4E:F0:64:0F:A6:06:E6:5E:68:F0:F7:D6:EB:69:21:24
Certificate issuer: /CN=A91C5D53/serialNumber=D62716F761F188D56FA117F9DC94BE414104A681
Certificate serial: 0148
Authority key identifier: D6:27:16:F7:61:F1:88:D5:6F:A1:17:F9:DC:94:BE:41:41:04:A6:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/BB5954CE241111F094390A32C4F9AE02.roa
Signing time: Wed 05 Aug 2026 06:56:10 +0000
ROA not before: Wed 05 Aug 2026 06:56:10 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 140704
IP address blocks: 2001:df4:18c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.crl
rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 08:56:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5D53, serialNumber=D62716F761F188D56FA117F9DC94BE414104A681
Validity
Not Before: Aug 5 06:56:10 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a72de8a-bdf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:12:8f:51:76:83:da:4c:20:2a:f8:60:71:4c:
ef:fa:6b:29:60:62:94:8a:b4:13:c6:18:f9:e6:07:
3a:ae:ce:2d:cd:64:7b:a0:20:4e:7a:1c:c5:e0:88:
59:61:c5:58:e0:e3:29:40:10:0d:63:36:22:f7:21:
8a:bf:32:fd:e1:ad:d5:87:74:3c:bf:1b:45:96:44:
7c:c6:14:e4:db:71:21:5f:8f:41:14:4e:d7:9e:76:
f3:f0:62:78:cc:4c:48:ea:95:e3:e2:fd:29:74:85:
c0:57:58:72:85:0b:0f:ff:ee:5f:7f:8f:62:e5:68:
17:3c:70:4f:42:dd:21:f0:43:99:0e:9d:eb:6a:bf:
04:a4:76:84:d2:f5:92:78:d8:c5:89:0d:78:ed:86:
01:40:5b:af:9e:8e:b7:f9:0a:c3:a2:e9:d6:f6:a5:
41:a5:13:db:8a:96:15:54:52:e3:25:38:a0:0c:b4:
73:03:a7:b1:f0:45:a4:ec:4f:e2:24:a2:e7:57:ad:
02:c3:cb:3c:10:b5:bc:70:30:18:75:1a:c2:cf:60:
f5:9f:71:d9:46:60:50:9c:76:97:fe:37:63:5f:57:
ce:b9:c5:65:0e:7a:0a:bc:c0:aa:e0:09:d5:84:19:
12:1c:c7:89:47:8a:d1:a5:5a:7f:25:0f:1c:f2:02:
00:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:76:BC:01:4E:F0:64:0F:A6:06:E6:5E:68:F0:F7:D6:EB:69:21:24
X509v3 Authority Key Identifier:
keyid:D6:27:16:F7:61:F1:88:D5:6F:A1:17:F9:DC:94:BE:41:41:04:A6:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/BB5954CE241111F094390A32C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:18c0::/48
Signature Algorithm: sha256WithRSAEncryption
8f:94:94:d9:5e:8e:ba:fb:c1:4e:17:b9:35:4f:a1:32:59:19:
c9:00:e5:08:fc:61:45:ec:8a:f4:08:a9:6b:b8:dc:56:7e:b9:
af:94:69:53:04:89:e0:57:59:a7:d4:6d:b6:af:ae:40:f6:0c:
54:99:24:1d:60:57:c7:08:dd:dc:ec:73:b5:0f:63:87:62:96:
27:11:e7:99:dd:c2:80:9b:e7:54:19:73:5b:f9:81:b9:54:21:
fb:cb:29:70:aa:93:17:7e:89:49:af:61:ec:e8:b0:a7:af:c3:
56:1c:f8:28:b5:d0:89:a2:a2:bc:ab:b3:2b:fb:b0:f6:12:7d:
5f:d3:5a:ce:b9:68:3a:ae:2a:e6:ce:22:74:26:ca:71:73:9a:
e7:f7:58:19:20:d8:5b:b5:cf:51:86:4d:bb:9c:6d:0a:cd:06:
4f:f4:4d:ab:f0:64:81:56:7d:98:38:61:aa:d6:b0:ca:dc:1e:
eb:4a:7e:77:4f:8a:89:94:51:b0:bc:a8:54:8b:ce:8f:43:71:
18:dd:38:65:a5:55:4b:d8:32:3a:4d:81:19:13:e0:38:2c:26:
e3:50:0e:db:81:50:0c:b5:b1:39:9d:3d:1b:76:06:73:f1:df:
32:c0:8d:63:83:54:3f:3e:a2:2d:48:c4:0d:1c:22:86:e0:67:
24:dd:4c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:22:44 2026 by rpki-client