
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/606F042E6B1811F1B59AF4BC8347A888.roa
File: 606F042E6B1811F1B59AF4BC8347A888.roa (raw, json)
Hash identifier: QotEZPEcXp6GfO9ceWSGmNQ5ZsQIvNMXBOFjup9LVAw=
Subject key identifier: B3:FA:42:F2:3E:D2:CA:C6:1A:9C:38:47:63:CE:09:EC:59:9F:09:1F
Certificate issuer: /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial: 0320
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/606F042E6B1811F1B59AF4BC8347A888.roa
Signing time: Fri 07 Aug 2026 02:52:40 +0000
ROA not before: Fri 07 Aug 2026 02:52:40 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 58062
IP address blocks: 2401:b60:3145::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 02:23:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 800 (0x320)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Validity
Not Before: Aug 7 02:52:40 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a754878-a00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:59:77:91:b3:39:25:57:00:a7:f6:24:e3:28:
88:1a:6d:1a:ba:81:03:00:50:61:71:09:71:ea:88:
3d:5c:fe:27:51:b6:17:3e:d1:0a:78:ec:1c:68:83:
da:55:5b:63:1c:ab:38:72:0d:04:75:7b:38:e6:0c:
6f:8d:75:e5:15:52:b5:0e:04:87:50:b2:2e:f3:6f:
c4:88:a8:cc:53:f1:5f:2a:b3:9e:04:3f:8c:14:91:
63:85:f3:ac:68:38:c7:55:73:c8:a3:e0:fd:4d:f1:
3e:ee:55:55:f2:b5:ab:21:09:3c:b6:d7:ff:92:ec:
69:f0:19:31:c4:9e:e0:88:a5:90:56:70:30:c0:15:
2e:d9:c0:25:37:91:d1:c8:bc:7d:ef:d1:b2:4f:3a:
4c:fb:64:1a:d1:61:df:16:f7:ce:12:8c:71:61:1d:
d5:5a:b1:db:1f:cf:d3:10:55:5e:d9:fe:fd:f0:23:
cb:b6:45:ee:11:80:55:96:2b:9d:5f:7e:93:7a:36:
3d:e5:db:a3:83:0a:a9:ee:59:79:6c:1b:ef:81:09:
ab:ff:bb:39:c9:f7:1f:d7:99:27:67:ec:ae:59:36:
c4:64:71:eb:e6:7e:9c:be:d4:6a:e1:88:68:fc:c9:
52:8e:89:5e:a4:d2:27:8a:7e:b7:55:be:c1:90:f5:
8b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FA:42:F2:3E:D2:CA:C6:1A:9C:38:47:63:CE:09:EC:59:9F:09:1F
X509v3 Authority Key Identifier:
keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/606F042E6B1811F1B59AF4BC8347A888.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:b60:3145::/48
Signature Algorithm: sha256WithRSAEncryption
1e:ce:52:31:06:4d:bd:85:25:1e:71:8e:73:ae:db:c5:f4:08:
23:22:64:cd:8b:0c:9a:b6:6a:b0:95:00:62:a7:9a:b7:66:26:
01:91:f4:66:38:63:65:5f:28:bf:36:9e:b8:c1:63:4d:2a:97:
be:0d:51:86:30:6d:d2:ce:32:43:9f:88:e3:94:5c:ce:0f:c0:
17:06:ea:05:5f:59:66:4c:38:93:da:dc:d5:92:a2:5d:04:a8:
de:46:da:f2:d8:68:7c:fd:2d:94:11:dd:8b:39:2f:d4:fd:fb:
7c:d6:b3:d2:af:5e:45:a7:d2:1a:d2:f6:94:0f:de:b0:22:f3:
9e:26:f0:31:da:d6:47:5b:b2:7f:1d:1c:94:74:63:a9:ba:e0:
30:67:4f:5e:a4:dd:34:25:5c:31:45:01:ee:82:1a:3c:f3:c1:
15:2c:9b:a0:88:23:56:b8:00:32:93:d7:37:74:5c:ce:66:f9:
e8:c3:28:54:f4:26:23:bd:ad:e2:bd:bf:dd:8e:15:0e:d9:bb:
a4:a1:c9:6a:69:f9:04:77:54:ee:30:b3:9d:b7:a5:94:75:12:
a4:97:28:70:e5:f9:37:d6:a6:f1:4a:c8:60:9b:37:4c:9e:33:
96:70:43:65:35:65:d2:80:3f:47:bc:69:c7:77:a7:87:0e:a1:
11:a2:bd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:01:46 2026 by rpki-client