
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C873A/3C1F57FC8F1411F1AAFCC9463411F970/B57C128E8F1411F1B4F762993411F970.roa
File: B57C128E8F1411F1B4F762993411F970.roa (raw, json)
Hash identifier: CyRdafZtYteQkqRhGDaejp5amAP2SU7A6K/gROP8/go=
Subject key identifier: DB:50:A2:3B:5C:F4:8C:B7:57:7E:29:4D:85:E1:E1:41:49:1F:9B:82
Certificate issuer: /CN=A91C873A/serialNumber=7848068662E630AD003D70DED872178CE83C0C4B
Certificate serial: 02
Authority key identifier: 78:48:06:86:62:E6:30:AD:00:3D:70:DE:D8:72:17:8C:E8:3C:0C:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEgGhmLmMK0APXDe2HIXjOg8DEs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C873A/3C1F57FC8F1411F1AAFCC9463411F970/B57C128E8F1411F1B4F762993411F970.roa
Signing time: Mon 03 Aug 2026 08:24:14 +0000
ROA not before: Mon 03 Aug 2026 08:24:13 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 154786
IP address blocks: 2001:df7:4fc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C873A/3C1F57FC8F1411F1AAFCC9463411F970/eEgGhmLmMK0APXDe2HIXjOg8DEs.crl
rsync://rpki.apnic.net/member_repository/A91C873A/3C1F57FC8F1411F1AAFCC9463411F970/eEgGhmLmMK0APXDe2HIXjOg8DEs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEgGhmLmMK0APXDe2HIXjOg8DEs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C873A, serialNumber=7848068662E630AD003D70DED872178CE83C0C4B
Validity
Not Before: Aug 3 08:24:13 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a70502d-8c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:90:15:b6:2b:5a:1e:fe:7c:87:d5:39:89:98:
8a:57:fc:80:da:72:6c:65:38:08:68:37:e1:57:d6:
ce:4d:53:4a:f1:94:2e:be:89:c9:ca:ad:7f:df:13:
2b:a2:45:99:d0:68:dc:95:1f:6f:e3:b0:82:d4:68:
0b:b5:e5:ec:cc:7c:d3:ca:d5:96:0a:72:b9:ee:84:
80:ff:38:bd:fd:5f:40:5b:06:e8:a5:7c:cb:93:57:
62:1c:c7:95:5b:ed:96:5d:6e:2b:47:64:a5:34:e8:
e7:62:2a:08:a8:99:fb:d1:b3:dc:07:ac:be:4e:11:
01:99:32:1e:4a:99:70:8a:64:6e:c3:14:f0:89:b1:
0e:a9:f1:73:68:36:19:4c:d0:ca:8f:23:e5:fc:5c:
25:e5:c7:20:ee:d9:da:7c:c6:c2:ff:3f:a8:b8:e2:
57:cc:3b:0c:03:6e:de:ac:77:9b:11:04:af:5c:55:
37:21:30:23:9b:7e:4e:23:4b:f0:b8:86:12:19:66:
58:8c:f9:d3:e3:cf:b1:d7:60:43:27:3a:a2:f0:19:
05:0b:2f:0c:81:a1:c7:2a:ac:51:84:00:74:7f:42:
8f:a5:9b:0e:40:76:7a:77:9b:46:d7:93:4c:48:09:
4d:08:fe:2f:73:4c:30:cc:8d:69:25:09:cb:ec:ce:
f3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:50:A2:3B:5C:F4:8C:B7:57:7E:29:4D:85:E1:E1:41:49:1F:9B:82
X509v3 Authority Key Identifier:
keyid:78:48:06:86:62:E6:30:AD:00:3D:70:DE:D8:72:17:8C:E8:3C:0C:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C873A/3C1F57FC8F1411F1AAFCC9463411F970/eEgGhmLmMK0APXDe2HIXjOg8DEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEgGhmLmMK0APXDe2HIXjOg8DEs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C873A/3C1F57FC8F1411F1AAFCC9463411F970/B57C128E8F1411F1B4F762993411F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:4fc0::/48
Signature Algorithm: sha256WithRSAEncryption
37:14:58:94:17:d5:b5:09:d1:4c:db:61:1b:13:f1:ad:ac:8c:
84:d6:f3:16:e7:87:66:a7:04:3e:06:67:6a:e2:c3:4f:c1:ff:
91:63:cc:37:79:89:30:bf:81:76:14:ab:46:95:4d:99:05:5d:
d9:40:39:0e:69:32:e3:06:85:89:6a:cc:8d:54:e0:4a:23:aa:
85:08:d1:67:f9:57:a8:ad:4b:a3:95:1e:ec:c8:3d:45:eb:b5:
7a:46:4b:0d:86:7c:c6:de:c9:e2:ef:6a:6d:3a:ef:84:32:9e:
9b:09:a0:13:1c:f0:9f:2f:61:dd:b6:85:0d:7c:bc:20:6c:d3:
be:f9:56:96:7e:30:0e:c2:70:e2:a2:af:5f:bf:1a:44:f5:59:
e0:51:6a:68:b0:bb:44:8a:9d:e1:0d:61:21:53:e5:94:9f:f8:
40:fb:10:e5:de:fa:9f:f8:37:6c:da:71:72:5a:d1:ba:dd:cd:
b0:e6:82:ed:f5:ee:e2:95:0d:85:c9:e2:e5:1b:03:d0:3d:5b:
37:44:f9:06:6d:46:ee:fd:1f:e5:8e:48:b7:06:14:f7:f9:a8:
ba:cd:6d:25:e2:3c:38:0e:62:6d:ef:b5:7c:41:1f:72:97:c2:
98:93:a0:d9:17:c3:bf:65:ee:a8:fc:2c:33:4c:d8:3e:ee:46:
68:11:8b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:10:59 2026 by rpki-client