
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/D1C40E28183411EF99FD8776C4F9AE02.roa
File: D1C40E28183411EF99FD8776C4F9AE02.roa (raw, json)
Hash identifier: S9/lkj/DKcKnfCq4t7T6hsP2A0dgA2qay1zXB2+mqUg=
Subject key identifier: 89:A2:F9:DD:E3:EE:75:70:52:05:F8:00:62:BE:24:19:C4:15:D5:2F
Certificate issuer: /CN=A91D604E/serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73
Certificate serial: 0D97
Authority key identifier: E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/D1C40E28183411EF99FD8776C4F9AE02.roa
Signing time: Fri 31 Jul 2026 18:36:11 +0000
ROA not before: Fri 31 Jul 2026 18:36:11 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 135517
IP address blocks: 2400:f8c0::/32 maxlen: 36
2400:f8c0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl
rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:12:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3479 (0xd97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D604E, serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73
Validity
Not Before: Jul 31 18:36:11 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a6ceb1b-82d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1c:f8:1e:e0:a9:e6:8d:d3:86:fa:dc:50:5a:
20:37:d4:d4:ca:fe:b8:56:b3:33:46:6e:78:59:e2:
a1:81:2a:86:1e:db:01:15:b9:50:f5:e7:83:7c:52:
c7:9c:1e:b6:ff:27:7d:d7:89:f5:65:88:5d:71:ce:
85:eb:86:62:49:dd:57:d6:91:10:f7:2c:54:66:77:
93:c6:92:09:4f:19:ad:a3:06:b4:e2:92:ca:3b:74:
42:85:7b:d1:4b:86:2b:fe:94:8a:3d:b6:b5:0b:74:
bd:60:22:68:a2:7a:4b:d7:8f:84:f6:e5:28:4c:bb:
3f:80:7f:b2:ab:7f:fc:c7:c5:3e:93:82:25:53:1e:
9c:53:dd:2c:76:ee:4c:a2:21:67:35:8f:46:64:b9:
56:7e:d4:6b:f2:54:e4:5d:02:93:b9:78:70:91:8d:
3e:1a:97:a7:df:0a:e7:01:97:49:e9:cd:64:f4:f8:
bd:79:40:98:73:f6:41:93:0b:5b:a0:72:11:23:f3:
dc:49:db:4e:11:e6:7e:90:31:f8:ca:87:f6:73:03:
e7:ff:4e:f7:47:fe:64:94:2a:4c:8e:a9:16:38:cb:
3a:8b:01:1b:ce:5f:52:bc:07:9c:f0:15:ab:9f:b3:
ef:0a:f0:7e:32:9b:16:61:b3:16:88:63:9e:d7:3b:
71:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A2:F9:DD:E3:EE:75:70:52:05:F8:00:62:BE:24:19:C4:15:D5:2F
X509v3 Authority Key Identifier:
keyid:E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/D1C40E28183411EF99FD8776C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:f8c0::/32
Signature Algorithm: sha256WithRSAEncryption
50:1c:8d:89:4b:6c:1d:58:c5:0d:0b:83:90:85:67:1f:5c:62:
2a:98:0b:5a:e2:96:7b:05:a0:d2:37:ae:a5:48:f5:de:e5:a5:
1c:82:45:8d:13:33:f1:5c:8c:17:fb:9e:3d:86:dd:52:a2:9d:
bd:a1:41:7f:49:5f:79:4e:d0:ba:df:77:60:12:c2:e4:ef:b1:
28:eb:8c:a1:d9:39:44:8a:26:ec:c7:0c:52:3c:74:91:6e:eb:
e3:86:1a:93:24:7a:0a:f2:82:60:dd:23:34:11:f3:65:50:5d:
7c:12:0c:70:69:51:d2:14:4a:32:cc:b4:36:97:56:c4:60:44:
0b:2d:0c:b7:10:6c:a4:37:f1:16:0c:cb:72:ae:fc:ec:bd:55:
d2:39:f1:88:c7:c7:9e:74:8c:85:58:1e:1e:6c:7d:a1:d3:62:
2a:b8:f8:a6:80:f5:5a:dc:89:8b:1c:ce:e5:74:3c:01:64:e1:
28:87:0c:9f:42:49:0d:ab:8d:49:54:1f:4e:67:35:e3:f4:11:
6e:2b:38:52:ee:20:05:40:53:68:b1:bd:45:e0:95:77:34:dc:
91:2c:b0:c0:a7:35:1e:8a:e6:c1:78:a6:d5:d2:d3:25:c7:5d:
d4:98:e4:b7:64:0a:38:a9:bd:84:23:e9:7f:a0:77:f2:4c:e8:
9b:52:b4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:31 2026 by rpki-client