
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/C9848396CD1711ED898C311FC4F9AE02.roa
File: C9848396CD1711ED898C311FC4F9AE02.roa (raw, json)
Hash identifier: 840BTsr7MCOvubWbnUyTx2fy05G4bC6cgOK+3N3KMHs=
Subject key identifier: 70:0B:CD:28:3E:C8:E1:44:F5:79:B2:02:83:32:DD:34:88:6C:DA:C5
Certificate issuer: /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Certificate serial: 2787
Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/C9848396CD1711ED898C311FC4F9AE02.roa
Signing time: Mon 28 Sep 2026 16:23:29 +0000
ROA not before: Mon 28 Sep 2026 16:23:29 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 24429
IP address blocks: 2404:8d02:28c8::/48 maxlen: 48
2404:8d02:4881::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl
rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 15:44:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10119 (0x2787)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1136, serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Validity
Not Before: Sep 28 16:23:29 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aba9481-2b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:aa:18:27:51:8a:b9:da:78:ff:15:5d:48:53:
b0:4c:b5:f0:f7:24:f6:6c:a1:e2:22:77:26:e8:c6:
10:69:cb:65:be:bd:ae:20:dc:76:20:ea:6a:82:83:
93:a8:50:53:90:6d:3e:ec:39:b2:25:e6:9b:90:87:
e4:d8:3a:7e:9d:98:da:9d:28:c8:b1:7b:fa:1d:77:
60:27:74:7e:bf:d2:27:0a:db:41:17:67:75:a8:43:
a9:61:f0:6b:9a:b5:93:96:8c:46:0d:c7:74:4a:dc:
25:35:2c:f0:ae:bf:be:df:f6:ca:eb:ec:36:5a:02:
b9:34:03:b3:43:e9:dc:a0:8f:b7:33:87:ad:6f:52:
37:c7:a9:33:41:17:df:ee:4f:8b:90:80:ae:14:6a:
fb:fc:07:05:14:ed:68:2e:26:66:4d:ed:f7:e0:8b:
84:20:81:7a:be:87:c1:11:92:57:73:bb:ba:5c:4b:
34:14:b4:78:95:dd:75:b9:c8:86:d5:02:4b:cb:32:
a7:7d:03:84:b9:ac:5c:81:e1:db:b7:fd:de:6e:90:
d1:eb:43:e3:0f:15:b4:1f:b6:39:25:b6:d3:16:ad:
b3:f3:c3:5a:18:59:e0:87:35:89:c4:bd:08:85:7c:
42:cf:ec:9d:32:2b:45:ae:4f:1a:ec:0f:ca:71:be:
68:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0B:CD:28:3E:C8:E1:44:F5:79:B2:02:83:32:DD:34:88:6C:DA:C5
X509v3 Authority Key Identifier:
keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/C9848396CD1711ED898C311FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2404:8d02:28c8::/48
2404:8d02:4881::/48
Signature Algorithm: sha256WithRSAEncryption
8c:f0:69:55:5d:47:24:13:14:83:91:b8:bf:e7:79:89:bd:48:
4d:ad:6c:a2:32:32:0b:16:a9:42:fa:00:1f:24:96:6e:30:0c:
e8:b1:f1:a6:28:d7:95:6b:9b:fd:0f:e9:42:f3:34:a5:33:24:
d0:7b:48:eb:3c:6f:0a:d5:81:27:48:b1:5e:f7:7f:7f:72:2c:
bd:5a:27:08:00:17:cb:8e:d2:ea:bf:da:23:58:81:22:17:03:
c5:4e:68:8f:90:d7:e8:2a:f3:da:8b:ac:dc:fa:0e:5d:ba:c0:
c8:03:53:f4:6c:d6:7b:3a:54:47:58:25:8e:8c:de:fc:59:a9:
1a:94:13:68:dc:f9:13:b8:e4:bc:a4:e6:f9:bd:d7:88:9e:e3:
68:a8:00:c6:9c:4e:0e:2f:1c:cd:4b:95:01:a3:f2:32:6d:bc:
d3:25:45:cc:70:60:56:05:7a:f4:b4:e1:79:b1:13:d0:a6:e0:
c9:cd:26:e2:52:77:b9:da:d1:80:81:7d:81:a8:b6:4f:59:0f:
e9:f7:bf:2f:29:e7:9c:0c:19:f7:57:0f:d5:92:7b:eb:47:22:
73:9d:6f:c4:02:c1:2f:33:67:c7:b8:45:87:17:c6:1f:92:f8:
60:1f:4d:e1:e9:eb:0e:d9:f8:3f:19:6d:99:09:c8:aa:8b:21:
53:9a:0f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:47:37 2026 by rpki-client