
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/2EC0243A89E011F1B81BDF965611F970.roa
File: 2EC0243A89E011F1B81BDF965611F970.roa (raw, json)
Hash identifier: Nq+dCQHf90s4zW0PH0vEDjROrWf2N7+/pmtAxto3En8=
Subject key identifier: 90:5F:CB:7C:6D:7E:AD:60:68:BD:8D:F3:99:9D:B6:05:CA:59:9E:A9
Certificate issuer: /CN=A91C7EF2/serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921
Certificate serial: D6
Authority key identifier: 6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/2EC0243A89E011F1B81BDF965611F970.roa
Signing time: Fri 21 Aug 2026 06:58:09 +0000
ROA not before: Fri 21 Aug 2026 06:58:09 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 135045
IP address blocks: 2402:1960::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl
rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 07:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7EF2, serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921
Validity
Not Before: Aug 21 06:58:09 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a87f701-f5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ca:96:ad:89:de:48:0a:6d:4b:5d:21:5e:70:
41:c0:92:b4:c3:9f:f2:2c:93:d0:8a:e1:25:0c:f2:
3a:94:b3:37:11:b9:12:52:ff:51:f5:64:06:85:94:
0c:50:d8:d5:22:cb:3f:c0:bc:b0:da:0c:55:75:ff:
ae:82:87:fd:15:49:d4:fc:89:7c:3d:37:aa:dd:0d:
4d:ea:8d:11:40:d9:44:67:b1:12:8c:94:3c:bd:4c:
72:53:9d:30:9b:6b:ad:99:30:8e:a9:51:44:5f:dc:
22:71:5b:70:b2:32:30:da:c0:04:e8:3a:85:f7:ab:
80:9e:bd:5b:c1:89:bb:fd:7e:d6:b3:d9:5c:b5:19:
3f:d6:2f:3d:ca:83:55:5b:2c:ff:27:c8:cd:71:33:
e7:98:42:9a:c5:4e:09:b4:d6:cc:c6:75:59:7f:81:
31:fc:14:3f:bb:6a:c8:4d:aa:d2:c1:5c:97:02:57:
45:11:5a:a9:bc:d2:e3:c6:98:9f:f1:1d:a0:6f:08:
98:9d:c8:9f:e4:54:9b:38:fd:93:12:e5:3e:25:d9:
0d:f1:67:55:1a:da:04:3d:87:c7:65:59:bd:aa:e3:
76:30:09:41:4e:52:58:8a:64:b4:fa:69:43:d8:b6:
7f:44:ef:18:61:b1:b3:16:bc:bc:df:25:a8:11:b0:
d9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5F:CB:7C:6D:7E:AD:60:68:BD:8D:F3:99:9D:B6:05:CA:59:9E:A9
X509v3 Authority Key Identifier:
keyid:6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/2EC0243A89E011F1B81BDF965611F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:1960::/35
Signature Algorithm: sha256WithRSAEncryption
71:8c:3c:e9:ed:cf:6f:17:dd:98:b5:09:4a:20:d6:b1:b4:58:
92:59:7b:cb:6d:4e:a7:1d:3f:65:f7:08:d6:56:f3:9f:a3:f4:
92:c0:04:ef:25:44:1d:32:a8:25:1b:3b:ab:0c:51:3d:c9:65:
a2:bf:9c:30:f9:e1:64:a5:51:fa:1b:09:9e:ca:67:dd:11:16:
97:1a:12:0a:65:5a:27:7b:0b:37:8b:fb:ec:a8:ca:bf:3b:1c:
c3:3e:60:24:e1:18:c1:2a:6f:ab:d4:6d:6b:6c:6b:15:e6:42:
de:90:9e:e5:8e:f8:00:a7:d9:e5:8e:be:67:f3:df:96:0e:15:
bd:1c:f3:10:86:4d:1b:3a:99:9a:22:55:72:07:23:69:c3:b2:
ac:a1:6c:bd:f6:00:8a:90:80:af:e9:72:79:43:ef:f6:fe:24:
cf:66:ad:6a:eb:a6:f6:b6:84:87:39:07:9b:41:4a:f3:05:47:
d5:f6:9e:f3:85:fa:40:e3:f9:e4:62:b4:42:a7:d2:3d:dd:de:
55:39:5c:3e:c7:42:e3:db:f4:cb:4e:d1:01:94:d0:6e:db:97:
56:07:3f:2d:7d:82:4e:64:d8:55:43:35:ec:b8:ca:48:f5:99:
cb:a0:9a:11:bd:f9:9f:86:90:24:4c:d8:b9:49:16:66:50:30:
60:e2:05:06
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzdFRjIxMTAvBgNVBAUTKDZBNDk3RUVENUY0RkUyQzE1MTY0REQyRDA3RkM0REQ1
MkJDRTg5MjEwHhcNMjYwODIxMDY1ODA5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTg3ZjcwMS1mNWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnMqWrYneSAptS10hXnBBwJK0w5/yLJPQiuElDPI6lLM3EbkSUv9R9WQGhZQM
UNjVIss/wLyw2gxVdf+ugof9FUnU/Il8PTeq3Q1N6o0RQNlEZ7ESjJQ8vUxyU50w
m2utmTCOqVFEX9wicVtwsjIw2sAE6DqF96uAnr1bwYm7/X7Ws9lctRk/1i89yoNV
Wyz/J8jNcTPnmEKaxU4JtNbMxnVZf4Ex/BQ/u2rITarSwVyXAldFEVqpvNLjxpif
8R2gbwiYncif5FSbOP2TEuU+JdkN8WdVGtoEPYfHZVm9quN2MAlBTlJYimS0+mlD
2LZ/RO8YYbGzFry83yWoEbDZpwIDAQABo4ICYjCCAl4wHQYDVR0OBBYEFJBfy3xt
fq1gaL2N85mdtgXKWZ6pMB8GA1UdIwQYMBaAFGpJfu1fT+LBUWTdLQf8TdUrzokh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0VGMi82QUZCRTQ0QzYz
ODExMUYwQTMzRDIzNjRDNEY5QUUwMi9ha2wtN1Y5UDRzRlJaTjB0Ql94TjFTdk9p
U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FrbC03VjlQNHNGUlpOMHRCX3hOMVN2T2lTRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzdFRjIvNkFGQkU0NEM2MzgxMTFGMEEzM0QyMzY0QzRGOUFFMDIvMkVDMDI0M0E4
OUUwMTFGMUI4MUJERjk2NTYxMUY5NzAucm9hMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYFJAIZYAAwDQYJKoZIhvcNAQELBQADggEBAHGMPOntz28X3Zi1CUog
1rG0WJJZe8ttTqcdP2X3CNZW85+j9JLABO8lRB0yqCUbO6sMUT3JZaK/nDD54WSl
UfobCZ7KZ90RFpcaEgplWid7CzeL++yoyr87HMM+YCThGMEqb6vUbWtsaxXmQt6Q
nuWO+ACn2eWOvmfz35YOFb0c8xCGTRs6mZoiVXIHI2nDsqyhbL32AIqQgK/pcnlD
7/b+JM9mrWrrpva2hIc5B5tBSvMFR9X2nvOF+kDj+eRitEKn0j3d3lU5XD7HQuPb
9MtO0QGU0G7bl1YHPy19gk5k2FVDNey4ykj1mcugmhG9+Z+GkCRM2LlJFmZQMGDi
BQY=
-----END CERTIFICATE-----
Generated at Fri Sep 11 07:07:33 2026 by rpki-client