
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/9035F5F07A4A11F1B8163F0086A30FBC.roa
File: 9035F5F07A4A11F1B8163F0086A30FBC.roa (raw, json)
Hash identifier: VI2u04S0VNmMAD0r4a1hC7wJPi7mvZdC/n4RJ1VCcT4=
Subject key identifier: 0B:7E:3B:6B:F3:FE:13:04:DB:DB:64:35:66:5B:C3:C5:8D:FE:1A:B1
Certificate issuer: /CN=A91EB564/serialNumber=6D9480CF3284D002B591F5E21DB112097FCE70B1
Certificate serial: 04
Authority key identifier: 6D:94:80:CF:32:84:D0:02:B5:91:F5:E2:1D:B1:12:09:7F:CE:70:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZSAzzKE0AK1kfXiHbESCX_OcLE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/9035F5F07A4A11F1B8163F0086A30FBC.roa
Signing time: Tue 07 Jul 2026 21:26:49 +0000
ROA not before: Tue 07 Jul 2026 21:26:49 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 153509
IP address blocks: 2001:df6:b740::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.crl
rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZSAzzKE0AK1kfXiHbESCX_OcLE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 11:04:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB564, serialNumber=6D9480CF3284D002B591F5E21DB112097FCE70B1
Validity
Not Before: Jul 7 21:26:49 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a4d6f19-a0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:dc:e2:73:80:79:f2:fa:a5:f9:8e:b0:dc:2b:
41:af:dc:d8:c5:38:5e:97:ee:c1:24:83:a2:15:12:
d4:dd:21:3a:33:46:4c:d5:52:c8:4f:e5:0d:90:27:
5f:29:df:1d:ef:8f:93:eb:ab:14:2b:2d:68:2d:91:
5b:be:db:0e:85:76:f9:be:f5:6c:49:1d:7e:61:0a:
75:24:37:6c:51:bc:cc:22:11:8d:6b:7a:e9:a7:ed:
5e:3d:0d:ac:e3:f7:28:b7:b2:d9:d3:16:d7:48:17:
d0:52:5b:8b:62:58:5c:86:1d:2e:2a:b8:4d:c3:a5:
41:79:14:87:ed:fc:86:5a:68:a4:17:cb:1e:f3:df:
2e:60:11:01:fb:26:8e:1a:48:06:a3:9e:15:f2:39:
58:30:26:78:3f:68:ed:b5:05:3f:6c:37:31:9d:6d:
ff:35:3d:03:42:f3:42:72:69:07:7b:57:ff:6c:ca:
d3:42:9c:1a:29:58:5f:88:5a:31:ca:61:fc:7e:a8:
91:18:81:34:ae:cd:2a:c4:44:59:06:49:10:7f:51:
2d:c2:37:35:47:c4:2b:cd:80:0b:1e:d2:24:8a:7c:
16:fb:92:6d:6e:51:ab:be:82:6a:72:22:9b:79:87:
dc:3d:66:ce:9c:27:c1:bb:7f:86:29:80:51:c3:57:
ae:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7E:3B:6B:F3:FE:13:04:DB:DB:64:35:66:5B:C3:C5:8D:FE:1A:B1
X509v3 Authority Key Identifier:
keyid:6D:94:80:CF:32:84:D0:02:B5:91:F5:E2:1D:B1:12:09:7F:CE:70:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZSAzzKE0AK1kfXiHbESCX_OcLE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/9035F5F07A4A11F1B8163F0086A30FBC.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:b740::/48
Signature Algorithm: sha256WithRSAEncryption
ba:75:ee:37:ff:1f:a2:42:f2:2d:3a:1c:e4:f2:18:b0:79:32:
05:96:b0:8b:cf:a9:a9:68:8b:51:49:3c:ed:19:bb:ff:1f:2a:
01:a5:3a:38:f6:59:47:4d:7a:7e:e3:84:5c:59:d3:82:86:30:
be:0a:fe:7d:15:15:16:71:d7:d5:0e:0a:fb:7c:de:88:fa:12:
f5:5f:71:6d:66:26:42:4c:e7:13:f2:82:11:9d:b2:31:70:f5:
5c:4a:b8:76:32:e6:86:5f:16:51:ca:c0:dc:ca:2b:e8:0f:53:
27:e9:0c:5b:48:c1:4a:f4:f8:3d:91:08:3b:ce:c0:ad:d1:cf:
a3:3e:be:6b:c3:1b:0e:ab:13:eb:fc:12:45:23:b3:0f:b2:f0:
39:4e:69:91:92:df:4c:f2:1c:ed:01:56:67:a2:ef:43:7a:99:
5d:eb:9f:01:9a:01:16:ca:84:d3:fb:03:f0:da:90:dd:2b:95:
e7:62:41:dc:d2:52:d0:2d:d6:82:96:3f:3e:90:5f:5e:b1:d9:
89:26:17:ba:b0:2e:f8:4b:0b:a1:59:77:f6:db:ae:a4:c0:3d:
87:ac:3b:d5:11:e2:84:1b:6b:bb:89:f7:e3:d5:a6:62:2d:bd:
8e:18:c6:77:76:10:39:3a:7b:54:59:9c:2d:60:d5:0d:7a:06:
d7:1a:dd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:56:46 2026 by rpki-client