
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/33A082DA948D11F1A5BE36406611F970.roa
File: 33A082DA948D11F1A5BE36406611F970.roa (raw, json)
Hash identifier: Zrbzfz5Z2TeRzK/kWg662lvjXfu9AESyGMfzdvdsjVE=
Subject key identifier: 8A:F9:62:33:48:0D:BA:E5:A7:50:46:FC:CA:9C:0A:45:71:97:F9:E5
Certificate issuer: /CN=A91C7836/serialNumber=5521BBA4B967998427C282BAD6B66F7E6DB6B707
Certificate serial: 10
Authority key identifier: 55:21:BB:A4:B9:67:99:84:27:C2:82:BA:D6:B6:6F:7E:6D:B6:B7:07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VSG7pLlnmYQnwoK61rZvfm22twc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/33A082DA948D11F1A5BE36406611F970.roa
Signing time: Mon 10 Aug 2026 07:29:20 +0000
ROA not before: Mon 10 Aug 2026 07:29:20 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 45117
IP address blocks: 2001:df7:3440::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.crl
rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VSG7pLlnmYQnwoK61rZvfm22twc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 09:09:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7836, serialNumber=5521BBA4B967998427C282BAD6B66F7E6DB6B707
Validity
Not Before: Aug 10 07:29:20 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a797dd0-8491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:42:40:e6:9c:46:5c:b6:af:f0:c7:4c:37:fb:
a8:09:c2:fe:ff:c7:76:c7:1c:c8:22:1c:3d:12:ba:
74:59:9b:41:8b:56:23:e2:83:c7:b3:4f:7f:b2:fb:
c1:ab:bb:e0:e4:74:2a:15:6a:e5:03:18:f3:38:23:
b4:c5:11:4b:9f:29:fb:ca:fc:11:83:d6:ea:72:b9:
c8:07:2c:07:aa:9d:f9:41:10:46:70:3a:c7:f8:83:
97:15:b5:52:1a:81:66:7e:8d:33:b3:cf:e3:d6:ea:
dc:1d:57:05:41:89:78:78:11:d3:08:c8:b4:ea:7f:
dd:19:86:65:02:d5:93:bc:5b:7f:53:54:7a:5c:8f:
71:9f:ac:74:67:d9:66:a3:f4:82:39:62:68:02:da:
b1:16:24:f6:7a:07:6f:30:a7:28:25:68:ff:f2:55:
e9:5f:08:af:6a:fc:b3:7e:36:1f:83:04:7f:38:0e:
0f:3e:84:d4:41:fe:b6:7f:40:02:11:34:34:12:13:
02:93:34:13:63:54:20:4b:cf:2b:59:67:6f:27:fe:
b2:f4:42:3e:7b:c1:95:fe:7f:7b:7d:ef:8e:42:97:
a3:24:51:a2:e3:03:bd:17:b0:42:fc:5f:32:87:43:
e4:56:7e:52:d4:72:99:e7:ff:fc:a2:91:c9:25:92:
93:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F9:62:33:48:0D:BA:E5:A7:50:46:FC:CA:9C:0A:45:71:97:F9:E5
X509v3 Authority Key Identifier:
keyid:55:21:BB:A4:B9:67:99:84:27:C2:82:BA:D6:B6:6F:7E:6D:B6:B7:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VSG7pLlnmYQnwoK61rZvfm22twc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/33A082DA948D11F1A5BE36406611F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:3440::/48
Signature Algorithm: sha256WithRSAEncryption
3c:ae:07:fb:7d:ec:bc:57:8d:9d:6a:cc:bd:4d:ee:67:7b:44:
bf:ff:60:e9:93:ed:b8:11:80:5d:6e:2f:14:21:87:af:5b:4d:
4e:6a:01:d9:9c:f0:2b:02:2a:4c:77:4c:5f:1a:ad:e8:fd:93:
c2:ef:fd:47:b2:3e:5a:96:61:73:8e:03:23:a6:74:4b:e7:0d:
49:99:da:05:d1:49:34:a0:df:45:2f:65:7f:c7:65:9f:99:7c:
b4:e2:9d:0d:e0:cb:ca:90:df:75:8b:26:d1:7b:06:33:d1:e7:
42:0b:c8:ed:8b:da:40:12:57:5e:e5:0b:69:dd:8d:5e:bc:c2:
39:40:5f:8c:d7:22:0a:d3:6e:53:d0:9b:02:21:d2:56:df:da:
11:20:ed:b4:6b:73:4f:1a:05:85:c2:00:5b:09:4c:24:a7:d4:
4b:a7:76:64:c7:2c:66:9f:2e:d4:bd:24:c3:5f:e4:3c:79:41:
b3:23:01:b9:eb:31:63:a0:6d:fa:02:2b:0d:b7:4d:91:cd:36:
3a:aa:d9:71:26:f7:30:62:79:d4:37:84:ae:79:3f:20:a1:70:
75:35:64:14:8f:b2:6d:cb:e1:18:9c:06:e6:26:6f:2f:86:6c:
6a:6e:2c:5c:66:eb:6f:c6:07:6f:be:66:ad:b2:c8:b0:d0:8a:
25:68:2d:f3
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
NzgzNjExMC8GA1UEBRMoNTUyMUJCQTRCOTY3OTk4NDI3QzI4MkJBRDZCNjZGN0U2
REI2QjcwNzAeFw0yNjA4MTAwNzI5MjBaFw0yNzEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhNzk3ZGQwLTg0OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCzQkDmnEZctq/wx0w3+6gJwv7/x3bHHMgiHD0SunRZm0GLViPig8ezT3+y+8Gr
u+DkdCoVauUDGPM4I7TFEUufKfvK/BGD1upyucgHLAeqnflBEEZwOsf4g5cVtVIa
gWZ+jTOzz+PW6twdVwVBiXh4EdMIyLTqf90ZhmUC1ZO8W39TVHpcj3GfrHRn2Waj
9II5YmgC2rEWJPZ6B28wpyglaP/yVelfCK9q/LN+Nh+DBH84Dg8+hNRB/rZ/QAIR
NDQSEwKTNBNjVCBLzytZZ28n/rL0Qj57wZX+f3t9745Cl6MkUaLjA70XsEL8XzKH
Q+RWflLUcpnn//yikcklkpN5AgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUivliM0gN
uuWnUEb8ypwKRXGX+eUwHwYDVR0jBBgwFoAUVSG7pLlnmYQnwoK61rZvfm22twcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3ODM2LzA3NEYzOTZFODAx
NjExRjE4QTc2QkQ3ODVCQTMwRkJDL1ZTRzdwTGxubVlRbndvSzYxclp2Zm0yMnR3
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVlNHN3BMbG5tWVFud29LNjFyWnZmbTIydHdjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NzgzNi8wNzRGMzk2RTgwMTYxMUYxOEE3NkJENzg1QkEzMEZCQy8zM0EwODJEQTk0
OEQxMUYxQTVCRTM2NDA2NjExRjk3MC5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAgAQ33NEAwDQYJKoZIhvcNAQELBQADggEBADyuB/t97LxXjZ1qzL1N
7md7RL//YOmT7bgRgF1uLxQhh69bTU5qAdmc8CsCKkx3TF8arej9k8Lv/UeyPlqW
YXOOAyOmdEvnDUmZ2gXRSTSg30UvZX/HZZ+ZfLTinQ3gy8qQ33WLJtF7BjPR50IL
yO2L2kASV17lC2ndjV68wjlAX4zXIgrTblPQmwIh0lbf2hEg7bRrc08aBYXCAFsJ
TCSn1EundmTHLGafLtS9JMNf5Dx5QbMjAbnrMWOgbfoCKw23TZHNNjqq2XEm9zBi
edQ3hK55PyChcHU1ZBSPsm3L4RicBuYmby+GbGpuLFxm62/GB2++Zq2yyLDQiiVo
LfM=
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:57 2026 by rpki-client