
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/079C6D54703211F1A5EE34BC61A30FBC.roa
File: 079C6D54703211F1A5EE34BC61A30FBC.roa (raw, json)
Hash identifier: w2mHn7jPO/U6c3UsTpmViHUmi0booXw803xL0H2YQHs=
Subject key identifier: BD:6B:4F:9A:CA:4B:B5:C2:CA:CB:8D:FD:D0:CD:24:56:21:52:63:EA
Certificate issuer: /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618
Certificate serial: 0C16
Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/079C6D54703211F1A5EE34BC61A30FBC.roa
Signing time: Mon 10 Aug 2026 06:27:37 +0000
ROA not before: Mon 10 Aug 2026 06:27:37 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 136750
IP address blocks: 223.119.128.0/21 maxlen: 21
223.119.128.0/23 maxlen: 23
223.119.128.0/24 maxlen: 24
223.119.129.0/24 maxlen: 24
223.119.130.0/23 maxlen: 23
223.119.130.0/24 maxlen: 24
223.119.131.0/24 maxlen: 24
223.119.132.0/24 maxlen: 24
223.119.133.0/24 maxlen: 24
2402:4f00:f004::/48 maxlen: 48
2402:4f00:f004:5::/64 maxlen: 64
2402:4f00:f004:600::/56 maxlen: 56
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl
rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Sep 2026 19:15:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3094 (0xc16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EECAF, serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618
Validity
Not Before: Aug 10 06:27:37 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a796f59-e038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:53:aa:46:49:2e:18:8b:94:21:52:23:2c:ef:
6d:29:e9:6e:9b:73:63:c1:3e:3e:09:a1:54:9c:12:
81:b8:73:68:09:95:b5:f2:d8:9b:14:28:c4:13:3f:
0b:e9:06:d1:17:0a:19:aa:ea:4f:e5:59:f7:c2:7a:
e5:b7:3c:ce:b8:51:05:a1:5e:11:38:ea:7c:90:8d:
ee:8c:2d:c3:5d:72:17:3d:37:8e:1c:30:40:b6:69:
ba:2d:e5:d3:ce:37:8c:35:1e:34:7b:96:e9:b3:60:
ef:9b:f6:61:a8:a1:da:69:72:f3:25:fc:80:ee:25:
b2:d4:15:29:74:11:99:65:29:90:5f:71:58:56:dc:
cc:f8:f7:32:4a:fb:3d:7b:89:43:a3:4c:c6:06:50:
63:cb:43:41:11:c1:84:5d:85:5b:7b:b3:bf:50:ef:
ff:1a:b2:c4:9f:8e:26:66:e0:7e:0b:88:a7:e0:e6:
0e:ca:71:80:45:32:51:11:52:83:f9:57:ba:ac:7c:
8f:87:ae:52:88:64:45:dd:57:18:6c:92:98:c5:97:
4c:c8:8c:4d:f7:a9:70:04:35:d9:7b:ea:1f:68:28:
8e:5c:3e:35:3f:75:fb:00:81:d2:0d:60:91:36:fe:
d1:12:db:27:73:5b:62:a4:ee:69:01:f2:67:68:5c:
97:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6B:4F:9A:CA:4B:B5:C2:CA:CB:8D:FD:D0:CD:24:56:21:52:63:EA
X509v3 Authority Key Identifier:
keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/079C6D54703211F1A5EE34BC61A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
223.119.128.0/21
IPv6:
2402:4f00:f004::/48
Signature Algorithm: sha256WithRSAEncryption
15:ef:b1:03:44:53:f0:9f:63:d3:83:4e:7e:7f:b2:0d:c8:7e:
3e:8a:52:7a:66:d6:a4:ce:09:84:5b:e5:35:11:b7:ed:dd:ee:
64:a6:3a:42:9e:09:2b:cd:0e:ae:66:35:e2:6b:20:38:54:54:
09:02:96:56:4b:ca:19:52:af:84:dc:30:cb:f7:72:12:f6:79:
ef:c1:91:1a:94:28:be:32:b7:82:1b:90:4e:93:01:f1:82:e6:
3c:d9:28:e5:e1:63:d7:44:6d:48:20:8f:2b:fa:a8:0b:a9:e5:
6f:f6:bc:d8:3f:fe:85:90:bf:d3:5b:00:b9:38:d2:06:df:16:
0a:31:f0:3e:a8:5d:10:28:9e:4f:60:df:4d:1e:a1:2c:a4:79:
70:28:c4:16:6d:5c:fc:d1:5d:56:ce:3b:60:df:19:48:74:7e:
b2:34:70:4a:ad:0a:68:cf:74:46:4f:7c:34:ba:bf:f4:a6:82:
80:99:69:c4:1b:ad:9f:6e:f0:1c:90:57:2a:49:75:ee:22:c0:
a1:30:8a:e5:7b:76:e2:3b:23:59:b3:d0:d8:e3:a6:34:36:ae:
b0:72:78:f7:8d:22:c2:63:de:32:ff:0c:6a:12:16:0d:43:fb:
ea:d5:8c:27:e7:21:07:8c:71:e6:e4:53:9e:7a:72:56:6d:95:
28:07:c7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 15:46:28 2026 by rpki-client