
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/01607012DD3711EC9EF48256C4F9AE02.roa
File: 01607012DD3711EC9EF48256C4F9AE02.roa (raw, json)
Hash identifier: GACvDp++E0De7ni1GpURUHF3RpOe5rQxioJSjVY8+gI=
Subject key identifier: 93:41:74:99:C9:32:AF:66:AE:DB:0B:52:59:B7:96:57:A0:1A:DF:C9
Certificate issuer: /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Certificate serial: 0478
Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/01607012DD3711EC9EF48256C4F9AE02.roa
Signing time: Sat 03 Oct 2026 00:48:57 +0000
ROA not before: Sat 03 Oct 2026 00:48:57 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 16509
IP address blocks: 2407:30c0:100::/43 maxlen: 48
2407:30c0:120::/48 maxlen: 48
2407:30c0:140::/43 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 00:31:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1144 (0x478)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Validity
Not Before: Oct 3 00:48:57 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ac050f9-7779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:24:d1:58:9f:d8:33:e4:02:15:71:30:44:fc:
fb:59:b4:4f:3f:0f:f9:17:62:04:46:43:ab:cf:0c:
f3:e0:da:55:f2:2a:23:13:5a:f1:c1:03:d7:f1:95:
8c:ed:87:71:cb:e9:d3:b5:13:32:08:fc:66:54:22:
ff:88:2b:7a:5c:3b:4a:75:c5:ee:4c:dd:df:f5:5c:
1d:7f:01:7a:9a:cb:3f:fb:30:2f:c4:5d:ac:81:f1:
03:e4:fc:3b:dd:37:32:ef:8b:48:8f:8c:5d:7c:ae:
44:3f:da:11:a9:d6:ea:09:fb:d7:44:9d:40:60:f6:
c9:43:8d:b9:68:71:7b:16:de:c6:c1:57:64:09:84:
cd:c5:95:7a:e7:75:27:52:7d:7e:0b:bf:b3:50:de:
e1:b0:e4:6d:69:ea:cd:07:76:03:d5:81:7e:fe:91:
c9:b5:bb:29:cf:f8:23:54:07:cf:22:de:b3:93:dc:
bd:1f:e9:53:8e:9a:33:8e:3b:da:a1:8c:bd:8e:f1:
4e:12:2d:4f:a6:7d:e6:af:9f:53:03:5d:f2:cb:6f:
ec:81:0a:36:d2:c0:66:9f:59:5e:d2:f2:87:d2:b9:
e5:57:9b:47:cc:11:db:8b:22:a4:a3:b4:02:45:d2:
9a:4e:c0:7b:fc:28:69:f5:33:ff:07:22:cb:95:d5:
ee:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:41:74:99:C9:32:AF:66:AE:DB:0B:52:59:B7:96:57:A0:1A:DF:C9
X509v3 Authority Key Identifier:
keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/01607012DD3711EC9EF48256C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2407:30c0:100::-2407:30c0:120:ffff:ffff:ffff:ffff:ffff
2407:30c0:140::/43
Signature Algorithm: sha256WithRSAEncryption
1a:b7:46:4f:92:78:48:30:ea:bd:61:34:9d:2f:28:1a:0e:55:
94:8c:e8:e3:b9:bd:08:65:09:6f:85:0a:7f:de:58:3c:43:8d:
7d:6e:09:8a:95:e2:57:ba:43:8c:69:e4:86:66:4c:ec:0e:87:
18:8b:06:95:dc:cd:32:79:3e:00:2e:f5:d0:99:d6:31:58:14:
3e:cd:16:c8:18:02:eb:bb:ce:90:f0:2e:07:ec:53:f8:a9:93:
78:07:f6:91:de:03:47:53:82:58:e8:1c:6b:e0:c4:93:19:cc:
57:66:c6:b4:59:cc:5e:f9:71:09:d1:57:3c:ba:87:80:23:91:
cc:a6:75:ac:e4:e2:69:2e:85:a1:02:72:73:fa:c3:8f:92:d4:
ca:0f:67:1f:3e:ea:93:3d:50:37:4a:b7:9f:8d:1e:15:12:73:
b3:d3:fc:78:3f:81:94:73:83:46:d1:51:67:72:72:9e:05:de:
d9:ee:c5:77:e6:53:af:00:be:be:0e:ce:bc:9c:4d:a3:29:63:
a5:a5:4e:7a:62:af:9d:c4:5c:5a:e6:86:4e:b1:a3:42:ca:8e:
96:95:d0:ab:4b:28:6b:06:b5:25:88:67:0e:2b:de:ee:59:38:
aa:b7:ac:53:9b:6a:b6:f2:10:b6:02:d9:f8:95:5f:a3:22:a6:
be:db:fe:15
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgICBHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYzMDQxMTAvBgNVBAUTKDI1OTZBRUQwQzBDQjNCQ0ZFMzE4MDRCMjM5Q0Y0NjU3
NzEyRTI3NkEwHhcNMjYxMDAzMDA0ODU3WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWMwNTBmOS03Nzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmyTRWJ/YM+QCFXEwRPz7WbRPPw/5F2IERkOrzwzz4NpV8iojE1rxwQPX8ZWM
7Ydxy+nTtRMyCPxmVCL/iCt6XDtKdcXuTN3f9VwdfwF6mss/+zAvxF2sgfED5Pw7
3Tcy74tIj4xdfK5EP9oRqdbqCfvXRJ1AYPbJQ425aHF7Ft7GwVdkCYTNxZV653Un
Un1+C7+zUN7hsORtaerNB3YD1YF+/pHJtbspz/gjVAfPIt6zk9y9H+lTjpozjjva
oYy9jvFOEi1Ppn3mr59TA13yy2/sgQo20sBmn1le0vKH0rnlV5tHzBHbiyKko7QC
RdKaTsB7/Chp9TP/ByLLldXucwIDAQABo4ICdjCCAnIwHQYDVR0OBBYEFJNBdJnJ
Mq9mrtsLUlm3llegGt/JMB8GA1UdIwQYMBaAFCWWrtDAyzvP4xgEsjnPRldxLidq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjMwNC8xOUU0REYwNkRC
MDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84X2pHQVN5T2M5R1YzRXVK
Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0paYXUwTURMTzhfakdBU3lPYzlHVjNFdUoyby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYzMDQvMTlFNERGMDZEQjA3MTFFQzk5MjJENzBGQzRGOUFFMDIvMDE2MDcwMTJE
RDM3MTFFQzlFRjQ4MjU2QzRGOUFFMDIucm9hMDUGCCsGAQUFBwEHAQH/BCYwJDAi
BAIAAjAcMBEDBgAkBzDAAQMHACQHMMABIAMHBSQHMMABQDANBgkqhkiG9w0BAQsF
AAOCAQEAGrdGT5J4SDDqvWE0nS8oGg5VlIzo47m9CGUJb4UKf95YPEONfW4JipXi
V7pDjGnkhmZM7A6HGIsGldzNMnk+AC710JnWMVgUPs0WyBgC67vOkPAuB+xT+KmT
eAf2kd4DR1OCWOgca+DEkxnMV2bGtFnMXvlxCdFXPLqHgCORzKZ1rOTiaS6FoQJy
c/rDj5LUyg9nHz7qkz1QN0q3n40eFRJzs9P8eD+BlHODRtFRZ3JyngXe2e7Fd+ZT
rwC+vg7OvJxNoyljpaVOemKvncRcWuaGTrGjQsqOlpXQq0soawa1JYhnDive7lk4
qresU5tqtvIQtgLZ+JVfoyKmvtv+FQ==
-----END CERTIFICATE-----
Generated at Thu Oct 22 03:14:20 2026 by rpki-client