
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/95851A544E8F11F1BB8AFF5DB7833773.roa
File: 95851A544E8F11F1BB8AFF5DB7833773.roa (raw, json)
Hash identifier: DZ5DPupzTqqmSWdwYpXblDHHSqI4zxqj2PRZ30A7k3I=
Subject key identifier: 1D:82:90:8E:07:62:A9:05:A9:15:EA:85:BC:4D:49:E9:30:B3:BD:7A
Certificate issuer: /CN=A91EB077/serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
Certificate serial: 1B44
Authority key identifier: 38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/95851A544E8F11F1BB8AFF5DB7833773.roa
Signing time: Wed 13 May 2026 05:50:03 +0000
ROA not before: Wed 13 May 2026 05:50:03 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2401:1d80:3000::/40 maxlen: 48
2401:1d80:3100::/40 maxlen: 46
2401:1d80:3200::/40 maxlen: 48
2401:1d80:3300::/40 maxlen: 46
2401:1d80:4000::/40 maxlen: 46
2401:1d80:4100::/40 maxlen: 46
2401:1d80:4200::/40 maxlen: 46
2401:1d80:4300::/40 maxlen: 46
2401:1d80:5000::/40 maxlen: 46
2401:1d80:5100::/40 maxlen: 46
2401:1d80:5200::/40 maxlen: 46
2401:1d80:5300::/40 maxlen: 46
2401:1d80:5800::/40 maxlen: 46
2401:1d80:5900::/40 maxlen: 46
2401:1d80:5a00::/40 maxlen: 46
2401:1d80:5b00::/40 maxlen: 46
2401:1d80:6000::/40 maxlen: 46
2401:1d80:6100::/40 maxlen: 46
2401:1d80:6200::/40 maxlen: 46
2401:1d80:6300::/40 maxlen: 46
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl
rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 16:17:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6980 (0x1b44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB077, serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
Validity
Not Before: May 13 05:50:03 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=6a04110b-d365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e3:97:72:d7:52:3e:ea:07:ff:8b:16:bc:95:
c4:8d:73:00:7f:6f:22:06:da:59:cb:f9:dd:12:e8:
c9:85:f7:d4:99:5d:e0:d4:67:2d:82:dc:9f:e9:12:
59:aa:d1:5b:9d:05:45:4a:f2:0f:20:47:08:8c:96:
94:74:ca:9a:c8:51:cd:13:ff:d4:32:0d:2d:f1:45:
d0:14:54:d5:f6:a5:a3:65:18:fb:d5:f6:22:45:26:
40:2c:b9:7f:30:3a:a6:b5:f3:85:52:6c:f9:21:2e:
18:f3:b3:95:7c:45:5f:d3:95:e0:03:c8:99:4a:92:
e0:da:e2:c4:b1:a7:f7:0e:17:bf:8d:95:f5:c1:31:
34:57:37:75:79:2a:e1:71:ac:0f:fc:89:50:7b:e8:
64:2c:e1:b9:4c:7e:be:37:de:4a:77:10:ee:0e:3e:
2e:22:52:2d:72:2b:6e:12:ca:1d:91:42:17:01:0f:
26:44:3b:1e:86:12:8d:cc:52:70:cc:77:58:c3:b4:
e6:02:6c:7f:60:ab:3f:18:60:59:02:91:43:a4:aa:
e7:b9:13:37:28:b0:b3:2a:15:7f:71:aa:50:5c:4a:
51:e1:53:fc:df:41:15:f2:33:91:d0:fc:f3:aa:9f:
b2:86:a0:31:91:50:95:33:ed:bd:00:f9:6e:6b:d0:
d6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:82:90:8E:07:62:A9:05:A9:15:EA:85:BC:4D:49:E9:30:B3:BD:7A
X509v3 Authority Key Identifier:
keyid:38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/95851A544E8F11F1BB8AFF5DB7833773.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:1d80:3000::/38
2401:1d80:4000::/38
2401:1d80:5000::/38
2401:1d80:5800::/38
2401:1d80:6000::/38
Signature Algorithm: sha256WithRSAEncryption
ca:51:a8:bf:41:0a:74:61:97:69:51:ef:78:21:b3:6a:32:7e:
6e:01:41:ca:cd:57:4e:2c:d7:d6:d0:2a:a7:78:85:53:47:a6:
78:c7:53:8b:c6:9b:41:2d:30:24:ff:7b:1f:3e:cc:50:dd:ce:
83:63:15:6d:cb:9e:72:1e:07:00:54:69:f5:23:6b:6c:38:eb:
40:60:11:e8:a2:aa:36:20:7b:ce:42:49:07:58:e4:14:d0:ea:
41:e6:2d:3a:5a:46:0c:f9:50:1c:fa:29:68:ec:01:59:f4:ed:
5e:dc:4f:6a:90:89:69:c6:3c:5e:e4:55:ef:b5:aa:13:ff:bc:
d3:c0:da:7c:e1:9b:af:e9:40:08:8f:09:15:79:63:bf:0b:11:
51:18:9b:c3:56:be:7c:fa:d4:63:eb:d1:ec:36:10:94:21:8d:
b1:fb:ec:48:af:63:cf:99:af:7d:01:06:48:f4:c6:b1:02:72:
15:c2:6e:ea:79:f8:56:a5:da:41:cc:c1:eb:e4:64:16:68:f0:
de:5f:a8:93:51:e9:6d:89:3c:11:29:0f:68:e9:c7:99:b6:76:
17:66:10:a9:0f:27:32:16:8d:c8:b4:8f:df:0b:d8:aa:52:e8:
d3:06:55:20:13:7a:2e:02:73:a4:34:fe:53:5c:b2:de:ea:80:
12:4c:db:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 14:18:38 2026 by rpki-client