
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/14C4C7D4002611EFBD462953C4F9AE02.roa
File: 14C4C7D4002611EFBD462953C4F9AE02.roa (raw, json)
Hash identifier: XNwJRzeuKeHDcBqNhhKVmwXSnNPS4SmsbpnOy4X5BaY=
Subject key identifier: 6E:B5:2C:B4:A3:A8:B2:86:AE:8A:37:66:56:1D:8C:F8:0C:49:BB:4E
Certificate issuer: /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial: 031A
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/14C4C7D4002611EFBD462953C4F9AE02.roa
Signing time: Fri 07 Aug 2026 02:52:28 +0000
ROA not before: Fri 07 Aug 2026 02:52:28 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 216183
IP address blocks: 2401:b60:19::/48 maxlen: 48
2401:b60:20::/48 maxlen: 48
2401:b60:21::/48 maxlen: 48
2401:b60:210::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 02:23:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 794 (0x31a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Validity
Not Before: Aug 7 02:52:28 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a75486c-f656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4e:d3:79:f7:e8:08:e4:2c:68:7c:c2:fb:86:
7a:45:47:42:f4:09:f8:5c:26:17:d1:88:d1:73:b8:
39:2d:4c:03:3b:2b:1d:53:88:55:06:29:67:ad:09:
6f:c6:f8:27:3a:e0:1a:0f:6b:04:5c:cb:0a:45:1c:
39:9e:42:3d:99:f6:8c:0b:47:87:a7:e9:1a:d7:dc:
f8:1b:c2:5f:36:12:b4:ae:c2:67:83:b7:38:32:41:
fe:10:8b:62:1b:fd:f3:01:9c:64:65:2f:8b:3d:ab:
c1:6a:c8:07:70:dc:48:4f:9d:b0:2e:79:f8:85:03:
75:96:0d:d0:38:aa:5f:6c:06:c0:b0:eb:10:72:d5:
23:87:6b:0d:af:54:ab:05:3a:f8:90:a5:4c:c0:38:
50:7d:c0:7f:21:e8:5d:0c:e8:c9:3a:21:ca:47:26:
97:5c:13:47:f4:d7:e5:8a:94:a8:e9:b1:fb:68:ce:
bb:0b:35:e5:0e:40:e4:af:26:eb:de:eb:16:f9:00:
dd:df:9d:47:0a:7b:d4:21:b4:ec:15:8c:78:3a:27:
0c:dc:a6:51:e2:09:cc:d8:01:65:bf:86:4f:59:17:
20:f1:48:25:95:e5:1b:19:87:10:fa:15:be:08:97:
ba:e5:0a:2f:fe:81:98:46:28:04:c0:0e:f5:89:bc:
5f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B5:2C:B4:A3:A8:B2:86:AE:8A:37:66:56:1D:8C:F8:0C:49:BB:4E
X509v3 Authority Key Identifier:
keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/14C4C7D4002611EFBD462953C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:b60:19::/48
2401:b60:20::/47
2401:b60:210::/44
Signature Algorithm: sha256WithRSAEncryption
5e:10:ed:96:dd:58:6a:38:56:3c:96:96:1d:28:b9:da:8f:ab:
9b:c1:3b:05:3c:c6:fe:c4:fd:89:2f:d4:48:46:65:13:70:c1:
ec:46:ff:47:3f:55:eb:f1:80:af:03:3d:e3:af:c1:80:65:d8:
5c:b7:b1:3f:9f:17:9f:2c:24:28:3f:59:93:ec:d5:9f:bf:27:
d6:79:13:53:06:5b:e5:24:f2:15:fe:b4:f7:36:44:d0:4b:bd:
ce:39:6a:d1:64:f3:00:63:08:35:95:72:77:5d:d9:66:d7:61:
2c:d3:09:fd:c1:b9:a1:5d:a7:56:88:25:6c:c1:ae:ad:d3:0d:
9f:84:14:c8:7a:d1:84:d3:83:82:8d:ac:c5:a5:62:3f:98:33:
d5:71:b0:22:09:4f:60:f4:6f:ed:f4:ca:ef:b1:07:3b:12:c7:
2a:4c:1a:30:2b:60:e2:8d:66:be:14:4d:fe:01:ec:c9:5c:56:
b6:c0:f9:11:c1:ab:b1:f5:76:04:c9:8d:c0:82:00:5a:99:a2:
0e:9b:61:66:b2:a9:f4:fd:22:a0:bf:6e:fe:39:04:ee:ea:27:
3f:df:84:04:65:a6:b9:2f:aa:b3:a1:e5:23:f4:d0:52:e0:01:
38:4b:46:b0:e1:49:ad:18:44:bf:f7:e3:7e:8f:75:63:34:49:
a9:23:fa:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:38:00 2026 by rpki-client