
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/A55DE586ED6311EDB69EB62AC4F9AE02.roa
File: A55DE586ED6311EDB69EB62AC4F9AE02.roa (raw, json)
Hash identifier: 5DPxa9zh03P/4EIxkUOZTnMchK9kaQkZ16Z7NXsueHg=
Subject key identifier: A8:E7:26:07:9F:80:6A:EE:54:34:61:39:40:09:9C:F7:66:D8:CC:4A
Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Certificate serial: 0428
Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/A55DE586ED6311EDB69EB62AC4F9AE02.roa
Signing time: Thu 11 Jun 2026 03:31:16 +0000
ROA not before: Thu 11 Jun 2026 03:31:16 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 18004
IP address blocks: 2407:2440:1b::/48 maxlen: 48
2407:2440:1c::/48 maxlen: 48
2407:2440:1d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:31:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1064 (0x428)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Validity
Not Before: Jun 11 03:31:16 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a2a2c04-8ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:17:5a:7b:3a:e5:de:51:c6:45:63:32:a3:
1b:0a:68:6c:a2:60:06:4f:0d:58:db:3e:61:af:d3:
c7:67:58:be:c4:09:59:17:4c:39:e9:10:3f:81:1e:
40:e3:53:bd:93:11:f5:6e:52:63:16:19:b3:d4:7f:
8f:72:e0:ba:78:5f:ba:23:2a:6a:f5:9f:8b:78:9c:
c9:49:cf:9b:49:e0:ea:16:37:28:f3:aa:7c:50:3b:
0e:f8:c0:4e:fa:21:b2:73:f2:3b:50:96:f7:7d:9b:
79:9a:5b:dc:1b:2a:df:65:7b:e1:ac:d0:58:67:30:
fc:c3:56:03:bb:67:c9:56:20:22:ee:43:af:a8:12:
42:cf:d9:00:a5:e8:bc:85:bd:3e:5e:bb:b5:4e:b3:
bb:ce:0d:b7:0b:78:63:37:fe:30:23:5c:cd:bb:fa:
01:d7:5d:96:69:c7:57:59:19:08:03:94:15:75:aa:
53:ce:74:80:9e:92:55:2e:d8:56:e7:9a:f7:6b:39:
2b:ec:53:9d:6d:71:de:59:c7:09:c3:f2:16:36:16:
d8:50:46:66:25:a9:4c:1a:51:42:37:15:49:f6:2c:
00:5d:44:b7:71:57:9a:30:04:db:4a:25:15:36:8b:
98:69:e7:91:de:7e:7b:b1:64:4f:fb:7d:4b:ff:59:
ef:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E7:26:07:9F:80:6A:EE:54:34:61:39:40:09:9C:F7:66:D8:CC:4A
X509v3 Authority Key Identifier:
keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/A55DE586ED6311EDB69EB62AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2407:2440:1b::-2407:2440:1d:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b9:ee:fb:56:be:0d:55:26:ef:b3:f3:71:1f:a9:c3:56:63:96:
fd:1c:53:35:dd:e1:1c:e9:a6:26:12:48:89:6f:f7:eb:7c:71:
76:5b:a4:6e:c3:43:b6:ac:a7:dd:db:a0:ad:b9:76:86:bf:bd:
92:31:8b:cc:df:e4:2b:3d:17:5a:62:75:58:30:bf:20:d9:d5:
42:18:69:d9:a2:f2:a1:ee:25:6c:cd:b3:72:69:64:bc:94:a2:
9f:41:23:5d:50:67:97:80:2a:36:6b:f0:9d:34:8a:ec:d7:07:
c5:d5:d5:4a:f2:65:68:83:49:fc:d8:f1:4c:95:c6:c0:1c:96:
96:13:21:07:5b:20:50:db:4f:86:f3:53:7b:60:ac:73:5b:6e:
d5:a0:c2:df:7e:75:a4:63:0f:72:b1:a6:d6:10:26:78:03:e7:
d3:1d:31:73:04:3c:7b:9b:f3:9f:14:7e:fc:3d:46:21:48:2f:
99:e0:70:57:59:fa:89:05:0e:ad:d6:7d:9e:84:46:02:f5:14:
8f:e0:4c:60:15:45:19:7b:18:cd:50:bd:cd:28:e0:c7:c5:c8:
26:a0:52:bb:67:ef:42:e9:4b:01:ab:b6:11:77:e9:86:43:57:
cf:28:27:e1:3a:bd:e3:6c:ca:a2:eb:31:50:46:1f:98:11:da:
fc:fc:a3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 12:21:10 2026 by rpki-client