
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/36B29DDC841711F0AB46F416C4F9AE02.roa
File: 36B29DDC841711F0AB46F416C4F9AE02.roa (raw, json)
Hash identifier: wfGSp7+JsmcD0oEs9KhJM3F6ykDJOKd65jRk6d+1FZA=
Subject key identifier: FC:80:DA:37:2B:B0:07:26:EE:BC:76:46:E0:92:E6:B6:59:47:69:AB
Certificate issuer: /CN=A91CB8A3/serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9
Certificate serial: 03A4
Authority key identifier: 2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/36B29DDC841711F0AB46F416C4F9AE02.roa
Signing time: Sat 15 Aug 2026 00:49:47 +0000
ROA not before: Sat 15 Aug 2026 00:49:47 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 149991
IP address blocks: 2001:df0:e6c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl
rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 00:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 932 (0x3a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB8A3, serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9
Validity
Not Before: Aug 15 00:49:47 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a7fb7ab-bb54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:5e:60:dd:aa:b9:68:dd:1c:ab:4d:df:03:
87:7a:6b:10:1f:93:45:f4:10:71:f1:66:2a:8c:95:
71:1a:51:25:4d:cf:97:7f:48:c3:74:d8:f6:3c:a2:
85:f6:b1:8c:d9:08:d3:10:5e:05:eb:3a:19:68:b6:
ee:f3:0a:90:81:af:a4:a9:a6:af:59:a3:67:41:2f:
78:f2:bd:b1:d1:cf:5c:dd:85:b9:e9:a8:0c:a3:6f:
07:0b:dd:8a:a1:54:ad:27:0a:e2:87:e4:87:33:01:
c5:2f:f1:5a:bb:4f:b0:45:f2:f2:8a:dc:44:e1:28:
8b:5c:40:38:e8:aa:de:31:e1:ee:57:1a:25:da:a3:
f7:72:5a:b4:88:55:c5:d2:37:c4:f3:81:32:7b:96:
f5:1f:64:d5:dd:68:06:1a:82:13:87:3c:be:b8:32:
d9:fd:d2:c5:00:93:64:0f:4a:5b:60:83:d8:81:fc:
ef:8e:1f:d7:c4:a1:52:11:37:9b:90:dd:a6:44:d3:
9f:c4:0c:64:97:e3:85:40:c4:dc:89:0d:40:62:fd:
90:20:8e:c4:34:4c:8c:df:29:da:3f:f6:a0:85:ff:
14:19:a2:bf:65:8d:f4:c3:b2:6c:f0:d1:39:c5:7a:
ad:ae:a5:b3:49:89:86:74:af:bb:7c:c3:66:2e:0c:
3f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:80:DA:37:2B:B0:07:26:EE:BC:76:46:E0:92:E6:B6:59:47:69:AB
X509v3 Authority Key Identifier:
keyid:2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/36B29DDC841711F0AB46F416C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:e6c0::/48
Signature Algorithm: sha256WithRSAEncryption
79:ba:14:ad:0b:e2:f8:db:55:d8:02:38:ff:35:69:65:d2:8b:
f6:44:7c:84:53:7e:c1:99:3e:f5:43:ae:8b:40:17:f8:c0:1a:
ad:56:4f:ab:c5:ea:a0:f5:41:98:8a:3d:55:e6:70:ec:d2:5a:
29:e1:fb:39:92:f7:19:d0:88:37:1f:f4:c1:9f:52:db:62:3a:
86:84:af:2e:26:9e:a6:26:0e:92:09:ad:32:b3:f0:cf:32:a0:
5c:b8:0c:66:f1:89:df:01:bf:94:f6:f1:32:23:71:71:91:3c:
8d:1e:ff:cd:c8:12:e3:72:80:21:f7:0d:bb:e2:42:1c:84:78:
17:69:f5:b8:11:38:ca:99:6c:a6:34:1a:74:4a:d3:dc:b1:5e:
d6:13:75:f9:bf:49:3b:37:f4:38:b6:76:52:f0:77:f3:b9:bc:
90:02:50:63:bf:c5:f5:5e:5a:e6:ca:88:9f:71:2e:8a:ec:e9:
df:e1:fc:77:01:32:f7:f3:a9:96:af:7a:0d:34:86:d0:f9:cf:
5a:4a:71:1f:a1:a6:29:3e:1c:c0:ec:eb:54:34:46:76:9a:a8:
60:d5:80:de:1d:e7:7c:32:fa:f7:98:82:80:a2:7c:a7:03:3b:
d2:28:20:21:f1:44:d8:4b:30:8b:75:f6:c3:e2:9c:93:6a:d3:
b9:e9:f7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 10:09:17 2026 by rpki-client