
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0DF1/896C8EF4942211F1A451A27A4611F970/BCEB3F26942411F1AFFB0BD14611F970.roa
File: BCEB3F26942411F1AFFB0BD14611F970.roa (raw, json)
Hash identifier: iYryFwkjj72eBhpxq/yWPGYfEbEiGh1ZPD6Papc8FgU=
Subject key identifier: 94:6C:20:EC:15:29:FC:1C:81:C6:2E:FB:53:21:DE:BB:21:81:98:F2
Certificate issuer: /CN=A91E0DF1/serialNumber=F44B53C720A97B1A697B0C47B062453A698C45CA
Certificate serial: 02
Authority key identifier: F4:4B:53:C7:20:A9:7B:1A:69:7B:0C:47:B0:62:45:3A:69:8C:45:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EtTxyCpexppewxHsGJFOmmMRco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0DF1/896C8EF4942211F1A451A27A4611F970/BCEB3F26942411F1AFFB0BD14611F970.roa
Signing time: Sun 09 Aug 2026 19:01:33 +0000
ROA not before: Sun 09 Aug 2026 19:01:33 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 140107
IP address blocks: 2402:6920::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0DF1/896C8EF4942211F1A451A27A4611F970/9EtTxyCpexppewxHsGJFOmmMRco.crl
rsync://rpki.apnic.net/member_repository/A91E0DF1/896C8EF4942211F1A451A27A4611F970/9EtTxyCpexppewxHsGJFOmmMRco.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EtTxyCpexppewxHsGJFOmmMRco.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:55:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0DF1, serialNumber=F44B53C720A97B1A697B0C47B062453A698C45CA
Validity
Not Before: Aug 9 19:01:33 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a78ce8d-7448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:39:c9:ef:88:a6:89:25:02:86:d0:39:f3:51:
2b:87:06:ea:8b:78:63:f3:9e:6c:0d:c5:d6:7f:41:
f2:50:11:c5:dd:f1:fe:26:70:c3:22:60:22:de:2f:
5c:cd:4f:81:a1:69:ec:0d:b5:0f:11:91:0e:ab:83:
50:22:a4:91:f1:93:51:3e:00:40:17:e2:4c:b7:80:
27:cc:34:de:71:ce:c0:e4:7f:dd:d4:2d:79:f9:c6:
80:c1:68:38:89:ae:5e:dc:e9:e8:58:ae:54:f4:79:
0c:46:72:7f:00:82:a1:46:e2:df:b7:bf:ba:b2:7b:
b5:26:1a:e1:84:11:3e:48:3c:d0:0e:b1:41:0e:24:
a8:34:da:26:e9:17:5d:c7:76:f3:73:52:a9:1a:b9:
68:7d:59:9f:d0:19:78:3a:e3:a2:2e:23:63:0b:de:
66:0d:96:9e:d8:27:0d:7e:9e:0d:ea:ed:5d:9f:93:
88:c0:4c:99:de:96:f4:30:e7:29:92:28:60:8e:3c:
82:da:75:e1:cf:da:d5:ef:67:85:98:48:91:ae:16:
94:f0:08:a7:47:66:47:c5:e2:85:67:85:c1:9b:6f:
44:06:b9:07:22:9d:53:98:4c:ec:7f:19:3f:67:14:
f0:6b:23:cb:08:da:63:21:ca:de:5a:f8:c8:ea:71:
aa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6C:20:EC:15:29:FC:1C:81:C6:2E:FB:53:21:DE:BB:21:81:98:F2
X509v3 Authority Key Identifier:
keyid:F4:4B:53:C7:20:A9:7B:1A:69:7B:0C:47:B0:62:45:3A:69:8C:45:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0DF1/896C8EF4942211F1A451A27A4611F970/9EtTxyCpexppewxHsGJFOmmMRco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EtTxyCpexppewxHsGJFOmmMRco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0DF1/896C8EF4942211F1A451A27A4611F970/BCEB3F26942411F1AFFB0BD14611F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:6920::/32
Signature Algorithm: sha256WithRSAEncryption
37:2b:8a:e0:df:89:b1:64:ec:3f:ed:50:95:f8:56:76:b1:d9:
35:07:4f:97:55:05:0f:58:6b:af:3c:00:ee:66:d1:85:d4:4a:
e5:8f:2a:f4:33:c5:44:02:54:47:60:0c:29:b7:74:f2:c0:c2:
d9:83:39:e3:65:f3:db:71:2c:94:bd:2b:9b:79:be:a0:e3:69:
fa:25:4d:59:99:e3:d0:37:53:61:4a:6e:e9:ec:16:8e:57:40:
a1:98:11:7b:01:6a:70:fa:14:c6:5b:fe:05:fb:78:a7:f6:22:
a0:ff:79:22:6b:c0:3d:b3:f8:b7:26:80:ff:23:b5:42:23:10:
78:1e:de:fc:de:aa:aa:33:d4:a2:61:c3:69:bd:cf:30:c9:85:
ae:1c:aa:c6:79:3b:dc:91:7e:85:59:e4:0f:38:6c:36:24:5f:
37:37:8a:fe:12:bb:74:3f:fe:22:15:4e:51:74:44:87:9d:86:
32:87:a3:bf:fa:4b:19:c4:46:c6:af:41:5e:85:85:14:cd:22:
a0:a1:74:0c:c6:3f:78:b8:b1:8d:cd:5d:49:84:17:0c:ea:96:
32:63:91:7e:9f:6c:19:af:aa:a1:77:b2:09:f6:bc:3d:c6:c2:
01:2f:01:91:32:46:0e:30:85:84:78:c2:c6:c7:82:9b:c2:56:
63:99:dd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:37:08 2026 by rpki-client