
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/00D63708DD3711EC9EF48256C4F9AE02.roa
File: 00D63708DD3711EC9EF48256C4F9AE02.roa (raw, json)
Hash identifier: iN5/m8feIuXKDI2CqVCZSslGSyDa2AyofUuNmkaUSs0=
Subject key identifier: 85:46:C5:CE:CE:F5:D8:1F:98:AD:42:45:6F:4C:06:3C:F0:1B:F7:CF
Certificate issuer: /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Certificate serial: 0477
Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/00D63708DD3711EC9EF48256C4F9AE02.roa
Signing time: Sat 03 Oct 2026 00:48:55 +0000
ROA not before: Sat 03 Oct 2026 00:48:55 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 14618
IP address blocks: 2407:30c0:100::/43 maxlen: 48
2407:30c0:140::/43 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 00:31:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1143 (0x477)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Validity
Not Before: Oct 3 00:48:55 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ac050f6-d0ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:57:8f:a9:1c:0f:b9:19:33:b9:d8:c7:a0:14:
42:3a:d7:15:1c:fe:25:1a:e9:2d:d0:13:7d:63:8e:
c2:71:86:e4:a1:6e:c6:33:67:b9:ce:b1:a7:e4:49:
f8:de:e2:c3:bc:6b:99:32:f0:26:f8:54:2c:82:77:
b3:78:dd:f9:62:c7:9f:6f:80:58:f7:29:44:83:5e:
6d:7b:25:72:fe:5c:27:f4:1f:7e:00:1e:a5:8e:26:
3b:09:1c:82:b9:70:71:02:b2:4f:27:c2:95:65:11:
da:46:bc:bc:c7:1e:39:fb:21:b1:92:fc:d6:56:3d:
17:78:65:36:78:46:3a:f6:55:41:50:32:b0:29:b6:
2c:61:67:1e:b2:64:6f:6b:9b:40:dd:1e:4a:a1:9f:
27:c1:19:8d:bc:20:a3:93:fa:8c:15:30:6f:c0:1c:
cb:b5:36:53:e9:51:27:bb:52:b3:4c:f2:e0:3c:b8:
e6:12:7b:8e:7e:b5:96:40:c3:bb:ac:88:e3:fa:23:
4a:66:0e:0d:9c:5b:65:a1:b8:7b:f0:94:e1:81:37:
a8:ed:b0:17:47:ee:9f:32:21:f6:ca:a8:43:e4:fd:
e0:23:08:bb:1b:0b:a5:e9:5f:ed:8a:57:3d:ee:0c:
e6:3b:6d:31:01:29:7d:a5:b0:4a:07:8e:8a:bf:dd:
6c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:46:C5:CE:CE:F5:D8:1F:98:AD:42:45:6F:4C:06:3C:F0:1B:F7:CF
X509v3 Authority Key Identifier:
keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/00D63708DD3711EC9EF48256C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2407:30c0:100::/43
2407:30c0:140::/43
Signature Algorithm: sha256WithRSAEncryption
1d:cd:18:59:59:30:f2:29:6e:91:12:af:6b:dd:cd:9c:52:0e:
f4:1a:cc:cd:21:72:5d:e4:cf:43:c7:f7:09:dd:d8:41:7a:cd:
44:38:1c:71:94:70:4e:a5:b7:ea:e5:e4:bd:49:ef:2e:5e:4a:
8b:6a:8c:1f:d5:32:3f:fe:20:7c:35:27:03:8f:91:80:39:bf:
e4:2a:14:af:2a:ce:b6:27:63:0f:f2:d2:17:82:c4:1f:d0:a0:
1b:d7:1b:c8:3d:33:3d:6e:84:23:19:e2:47:3e:14:3c:b9:24:
c2:a6:8e:9c:d4:f9:15:dd:cb:3f:1a:e4:0c:a2:57:e6:33:88:
46:8c:1f:b2:8d:c8:30:db:b4:4c:0e:b3:de:9c:ee:5d:68:c3:
82:2b:72:5b:78:14:80:8f:2e:00:a0:dd:3f:52:29:dd:5f:63:
2c:d0:f3:dd:ce:ae:ec:bd:4e:9b:a8:ac:54:01:22:d9:31:8c:
00:b3:07:c5:68:46:58:1b:09:87:7c:c4:ee:f4:94:8d:50:27:
44:be:ee:5a:be:09:bb:7f:d1:36:69:da:d8:78:91:e2:de:07:
04:4e:3b:a4:2e:02:6f:c5:31:34:a5:b3:76:91:4e:d4:fe:89:
f1:28:39:49:48:82:28:93:ca:38:a9:fb:f8:86:91:0e:c4:f5:
29:5a:0e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:47:59 2026 by rpki-client