
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/FA418224CDC011F1A9F6B46FFB65CEF9.roa
File: FA418224CDC011F1A9F6B46FFB65CEF9.roa (raw, json)
Hash identifier: iU0Lu8FeV9x3oDILS6kpvQkR2Ve0j4JSgeitN2cCjYY=
Subject key identifier: B0:34:CF:4F:3A:3A:78:0B:CE:7A:44:B2:78:33:E1:57:18:34:5C:C8
Certificate issuer: /CN=A91E1604/serialNumber=E2F17737B84C1F67869C03A47F8C419FD420016C
Certificate serial: 01B9
Authority key identifier: E2:F1:77:37:B8:4C:1F:67:86:9C:03:A4:7F:8C:41:9F:D4:20:01:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/FA418224CDC011F1A9F6B46FFB65CEF9.roa
Signing time: Thu 22 Oct 2026 02:33:34 +0000
ROA not before: Thu 22 Oct 2026 02:33:34 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 135386
IP address blocks: 2401:a8e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl
rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 04:16:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441 (0x1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1604, serialNumber=E2F17737B84C1F67869C03A47F8C419FD420016C
Validity
Not Before: Oct 22 02:33:34 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6ad975fe-a80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3a:0b:f1:b0:31:5e:eb:03:6b:a0:b8:e5:d1:
24:1d:c6:c3:17:9e:25:0c:9b:ce:b5:7e:da:6f:28:
a4:54:d5:1b:59:77:34:a8:c9:72:72:56:6f:d9:ef:
99:9c:3e:57:a0:83:77:f7:85:4a:9b:64:6e:f9:46:
79:56:e0:32:5a:67:f8:74:c0:3f:e4:76:01:a3:a9:
9d:3c:ec:12:81:e6:fa:68:db:d6:78:e8:8f:f4:a1:
3d:1c:cb:11:b2:e7:4e:c9:83:1f:9d:21:e5:8f:fd:
dd:d8:f9:df:51:9e:14:85:2e:ff:90:10:ff:33:f0:
06:b1:0a:0a:02:59:a0:45:bf:d1:f7:fe:4e:3d:29:
90:30:ad:ea:d3:9a:a8:46:27:f2:9d:70:4b:e1:39:
8b:30:d5:e9:8b:a2:c7:51:0d:bb:a4:92:6b:87:f9:
07:a5:23:94:3c:9b:0d:6f:ea:c6:24:62:e9:56:0a:
5b:27:83:30:b7:3a:35:a4:b9:af:da:d2:49:17:f3:
90:7e:7d:93:1f:3d:40:c0:4c:98:08:69:f7:24:49:
44:dd:b1:87:22:e8:f7:7c:31:22:e7:55:c7:52:4b:
93:e2:aa:9e:20:00:98:58:27:b2:73:0d:07:e2:cd:
f7:d5:ea:58:83:7c:cb:20:13:5c:d2:2b:51:85:39:
04:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:34:CF:4F:3A:3A:78:0B:CE:7A:44:B2:78:33:E1:57:18:34:5C:C8
X509v3 Authority Key Identifier:
keyid:E2:F1:77:37:B8:4C:1F:67:86:9C:03:A4:7F:8C:41:9F:D4:20:01:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/FA418224CDC011F1A9F6B46FFB65CEF9.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:a8e0::/32
Signature Algorithm: sha256WithRSAEncryption
28:d7:56:11:47:f1:1e:b6:93:9d:08:72:31:1a:a1:1a:a7:88:
b3:7f:f4:fc:57:da:70:40:a7:26:d7:e0:ba:3a:cc:14:92:ee:
67:51:31:ce:23:7b:04:00:fd:80:80:4e:4b:85:da:fe:95:d1:
a2:4c:77:d0:fb:34:01:38:7e:dd:6e:54:52:bb:14:f8:d7:27:
94:da:c1:85:fb:1f:3b:7e:73:9f:21:42:fb:ab:17:3c:1c:e5:
d8:1e:68:e6:29:43:d0:a4:11:45:30:39:41:9c:2b:8a:17:81:
df:95:de:b5:0f:b6:71:76:5f:d4:82:6c:ab:6f:37:c7:74:18:
22:42:12:dd:bc:d6:17:5f:a1:89:fc:dc:6a:1e:78:38:f4:84:
48:c8:5e:c7:07:6d:69:ea:47:aa:da:06:9c:e4:74:c0:44:e2:
73:9b:43:fc:fe:42:e3:53:ce:a1:6d:2d:6e:c7:c7:af:ee:f6:
7e:dd:4e:f1:2e:5c:7e:98:66:d7:99:70:d3:1a:53:66:4f:58:
6a:be:25:dd:1c:60:84:11:40:3d:95:bd:39:31:3a:06:a8:78:
16:5e:cf:e3:50:78:37:cf:be:49:e8:a1:5b:ab:0e:27:f1:d0:
d2:9a:53:f2:35:6e:8f:e6:76:0f:df:47:9a:87:3e:c0:7b:03:
91:f2:98:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:34:15 2026 by rpki-client