
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/D07522FE831D11F1B418DC1191A30FBC.roa
File: D07522FE831D11F1B418DC1191A30FBC.roa (raw, json)
Hash identifier: dzwge0kLLVVM1zxaXdNhUuJZI22hm2h7bCabK14OXlI=
Subject key identifier: 58:C1:51:4C:DC:85:8B:D2:59:38:EC:23:88:95:C8:68:08:6F:8E:C9
Certificate issuer: /CN=A91D2432/serialNumber=F5ECC9362C1D3B73824F5D4299ADBFAB4AF84D8D
Certificate serial: 03
Authority key identifier: F5:EC:C9:36:2C:1D:3B:73:82:4F:5D:42:99:AD:BF:AB:4A:F8:4D:8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ezJNiwdO3OCT11Cma2_q0r4TY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/D07522FE831D11F1B418DC1191A30FBC.roa
Signing time: Sun 19 Jul 2026 02:59:10 +0000
ROA not before: Sun 19 Jul 2026 02:59:10 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 202355
IP address blocks: 2402:6760:f000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.crl
rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ezJNiwdO3OCT11Cma2_q0r4TY0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 11:08:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2432, serialNumber=F5ECC9362C1D3B73824F5D4299ADBFAB4AF84D8D
Validity
Not Before: Jul 19 02:59:10 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a5c3d7e-d030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:35:a8:c7:9c:c9:2d:79:24:f2:13:8f:6c:26:
45:84:d6:56:8e:c7:e1:4c:a3:ba:27:98:58:f3:77:
9d:95:76:39:f0:25:b9:bd:99:68:96:01:79:56:4d:
a8:0d:f1:0b:98:80:95:36:f3:ae:70:d4:f9:01:90:
25:08:40:40:08:c6:ba:b4:1d:10:c6:a1:30:b1:45:
22:7d:5b:90:fb:0b:50:9e:63:86:d8:5b:2b:5a:99:
fe:38:9c:05:86:42:88:b7:0d:cc:f2:58:6b:df:68:
ab:c4:8f:f7:58:b8:1e:eb:fa:21:58:61:c0:a8:1f:
eb:24:3e:39:54:5b:ec:28:73:ed:f5:a4:17:7c:0b:
36:67:68:61:a7:30:f0:29:78:96:51:ba:5a:20:09:
4f:a9:4f:9c:c5:3e:6a:da:81:df:bf:f8:b4:87:a9:
a3:5b:41:fb:fb:2c:47:a3:ee:5d:28:9d:e4:26:22:
24:71:6d:20:0f:5c:04:35:7e:96:4c:22:79:74:31:
49:4b:38:23:8b:85:ed:f2:37:f8:d7:12:65:87:ff:
25:ed:62:30:b3:6f:44:b2:1a:f1:9f:d5:78:42:52:
d9:09:08:0e:d9:d3:e7:70:9a:74:3c:70:7c:90:c3:
d3:c9:8c:53:13:ea:a9:68:bf:6f:69:ff:2f:e7:62:
48:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C1:51:4C:DC:85:8B:D2:59:38:EC:23:88:95:C8:68:08:6F:8E:C9
X509v3 Authority Key Identifier:
keyid:F5:EC:C9:36:2C:1D:3B:73:82:4F:5D:42:99:AD:BF:AB:4A:F8:4D:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ezJNiwdO3OCT11Cma2_q0r4TY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/D07522FE831D11F1B418DC1191A30FBC.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:6760:f000::/40
Signature Algorithm: sha256WithRSAEncryption
a4:67:f6:6c:85:b5:ce:49:ea:69:90:6a:5e:3c:5b:c5:e0:6c:
73:bd:dc:58:62:48:31:40:b9:5d:c2:bc:68:98:b0:56:66:28:
da:e0:71:cd:3b:84:92:ed:8a:71:65:09:01:a0:a4:53:ff:59:
f7:e3:86:d5:62:db:95:32:b8:0b:19:ed:95:3c:1c:ee:a7:d3:
bc:bb:1e:40:6e:b7:97:86:27:b6:d3:50:2b:b1:25:72:9b:b7:
3a:56:b4:09:dc:2a:8d:31:5a:fd:03:48:87:20:04:dc:ee:c6:
d2:da:dd:cd:2a:cc:7b:e9:4b:ff:b4:f6:5b:72:28:30:39:bd:
cb:38:e2:eb:fd:1a:2c:14:35:f1:46:51:c9:ae:46:96:04:70:
8a:d5:1c:33:2c:7c:16:0f:7d:78:bf:89:bf:b2:36:38:35:c7:
8c:ef:0d:f5:20:c7:aa:a9:49:7c:05:e0:4f:16:04:36:30:ae:
8f:b5:36:8b:ad:fd:3b:4d:b2:cc:cf:36:bd:a6:73:a0:d8:9f:
3e:f0:d4:cb:09:92:f2:a8:74:6f:e6:4a:b0:80:12:23:4c:29:
40:b9:b8:b1:f4:b7:be:b4:1a:cf:dd:8e:f1:62:97:04:e5:04:
09:6c:39:08:72:c0:28:49:1d:43:73:30:c6:d4:d7:8a:5b:4f:
f4:e6:9b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:09 2026 by rpki-client