
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/95851A544E8F11F1BB8AFF5DB7833773.roa
File: 95851A544E8F11F1BB8AFF5DB7833773.roa (raw, json)
Hash identifier: bjzn1i56aX7nhZkQIU0OEQDjrscerkhHzwk56zyo5ro=
Subject key identifier: 9E:5F:EE:F5:A4:A9:7C:56:E0:C4:4C:14:EF:73:A8:5E:39:C2:BF:F2
Certificate issuer: /CN=A91EB077/serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
Certificate serial: 1B76
Authority key identifier: 38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/95851A544E8F11F1BB8AFF5DB7833773.roa
Signing time: Thu 06 Aug 2026 16:30:17 +0000
ROA not before: Thu 06 Aug 2026 16:30:17 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 14618
IP address blocks: 2401:1d80:3000::/40 maxlen: 48
2401:1d80:3100::/40 maxlen: 46
2401:1d80:3200::/40 maxlen: 48
2401:1d80:3300::/40 maxlen: 46
2401:1d80:4000::/40 maxlen: 46
2401:1d80:4100::/40 maxlen: 46
2401:1d80:4200::/40 maxlen: 46
2401:1d80:4300::/40 maxlen: 46
2401:1d80:5000::/40 maxlen: 46
2401:1d80:5100::/40 maxlen: 46
2401:1d80:5200::/40 maxlen: 46
2401:1d80:5300::/40 maxlen: 46
2401:1d80:5800::/40 maxlen: 46
2401:1d80:5900::/40 maxlen: 46
2401:1d80:5a00::/40 maxlen: 46
2401:1d80:5b00::/40 maxlen: 46
2401:1d80:6000::/40 maxlen: 46
2401:1d80:6100::/40 maxlen: 46
2401:1d80:6200::/40 maxlen: 46
2401:1d80:6300::/40 maxlen: 46
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl
rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7030 (0x1b76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB077, serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
Validity
Not Before: Aug 6 16:30:17 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a74b699-6993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:15:bd:b0:0d:56:91:df:a1:f2:ef:bd:4b:
6b:3d:f6:f6:20:b5:a0:3f:bf:a5:1c:54:09:eb:ed:
7a:3b:86:90:a3:2d:31:2c:a9:31:22:75:69:cd:b9:
ac:e8:d4:9d:7e:9b:6a:af:0d:38:22:f1:f7:7b:c8:
61:e9:48:c3:05:3a:e6:5f:36:7a:55:1c:a6:fa:55:
a0:1a:41:48:8b:54:62:7f:92:49:58:c3:c2:b6:7f:
f6:9f:75:4c:db:40:30:be:08:22:7d:7a:cc:af:e7:
3e:28:c2:5c:81:bd:83:ea:69:0b:c5:76:01:41:cc:
fe:e2:a3:18:9d:6b:5c:08:82:7f:d3:69:df:57:47:
c3:aa:ef:d4:44:fd:d4:3c:61:bf:99:38:83:2c:7c:
47:2e:f2:20:6b:bb:5f:5f:f3:3a:99:21:8b:dc:b6:
c9:55:e0:8e:8f:56:c0:bb:37:68:28:72:53:be:b2:
d3:26:02:f9:8f:77:cd:c8:b2:77:d3:0b:14:50:ab:
f3:b9:5a:a4:54:1e:88:ac:f4:5e:8b:82:20:46:3a:
11:c1:ce:35:99:1c:c2:2b:bb:6d:65:cb:f1:b8:c1:
0c:b9:20:90:2a:7e:42:de:31:fa:1a:3c:d4:06:df:
aa:8a:a9:22:94:71:7c:a4:18:6b:75:d6:f8:76:7f:
ed:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5F:EE:F5:A4:A9:7C:56:E0:C4:4C:14:EF:73:A8:5E:39:C2:BF:F2
X509v3 Authority Key Identifier:
keyid:38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/95851A544E8F11F1BB8AFF5DB7833773.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:1d80:3000::/38
2401:1d80:4000::/38
2401:1d80:5000::/38
2401:1d80:5800::/38
2401:1d80:6000::/38
Signature Algorithm: sha256WithRSAEncryption
7e:31:d5:67:0d:a1:59:a3:fe:91:35:d6:e1:69:0e:50:c8:39:
97:be:f5:e6:e5:b0:48:cc:2c:c3:33:7a:ce:fa:fd:68:77:d9:
6f:1d:d7:0a:32:2e:8b:21:7f:2b:bb:fa:8e:b2:98:6b:26:86:
a1:2b:b6:c0:1a:e5:f3:29:41:64:59:e8:6e:51:8e:25:73:6b:
90:0f:b7:a4:18:6d:a7:eb:8e:79:01:95:5f:89:6c:7a:63:1d:
07:f5:17:38:25:ad:9a:e4:71:01:7b:f6:ff:5f:ce:61:57:c5:
66:76:49:4b:ff:0c:eb:3a:66:ee:77:f8:64:20:18:f7:64:7d:
8f:a2:b5:b3:86:f8:f1:62:b7:5d:10:be:0d:c2:83:83:73:a5:
16:0f:ff:e0:52:b4:2a:78:44:c1:fe:9b:92:07:b0:69:36:28:
e5:e8:44:b4:93:de:33:c8:22:1f:6e:0a:ee:af:92:01:87:69:
fc:06:2d:4b:3a:fa:d9:50:7c:39:10:03:f8:48:7a:1d:28:ac:
ab:76:48:1c:c2:9e:c6:24:2b:8a:4c:a3:5a:ee:ff:97:e6:a1:
e4:7b:d6:89:c4:45:54:df:a4:84:41:d7:96:b7:4c:4e:2c:b0:
c9:08:f4:f0:06:41:2c:fc:f9:9e:69:e3:10:2e:93:b2:a7:27:
39:e1:61:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:49 2026 by rpki-client