
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/935296A6558B11F0BB2DB436C4F9AE02.roa
File: 935296A6558B11F0BB2DB436C4F9AE02.roa (raw, json)
Hash identifier: w6oumHH557ZKVZs6WxXOGaayFm4G0nEQpZ4z3V1LbMA=
Subject key identifier: 7F:44:28:3C:6C:FC:F4:8E:09:E1:50:11:5A:05:96:F2:E4:03:B2:0C
Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Certificate serial: 02FD
Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/935296A6558B11F0BB2DB436C4F9AE02.roa
Signing time: Thu 05 Nov 2026 03:49:26 +0000
ROA not before: Thu 05 Nov 2026 03:49:26 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 153997
IP address blocks: 2402:be0:fefe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 02:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 765 (0x2fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Validity
Not Before: Nov 5 03:49:26 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6aebfcc6-eff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dd:ea:29:66:37:15:d5:93:d0:e6:3a:b3:b5:
e5:96:3e:4b:e8:0d:49:e9:c1:d4:3d:37:87:1e:33:
fa:39:ec:51:15:56:f9:73:49:03:86:71:72:22:58:
03:a6:09:b8:01:09:e3:42:7b:c2:10:98:b8:04:55:
86:69:5b:6b:36:1d:df:f2:89:04:dd:e7:0a:21:2c:
bf:79:78:f0:bf:2f:b0:a3:57:b3:6a:cf:ba:50:52:
49:b8:fe:ba:aa:88:46:fb:1d:07:c0:3b:e2:2b:b3:
0b:2a:8d:11:3e:f4:15:59:7f:d1:b6:e6:1d:71:67:
10:6f:46:98:65:20:60:5c:7d:9b:65:89:46:92:11:
44:c4:b7:44:ff:d3:f4:06:4f:e8:a1:ef:aa:a9:76:
30:ab:dd:3e:f8:cc:73:71:e4:b0:66:c9:2e:2c:1e:
37:04:36:e9:e2:8d:d0:71:b7:f5:ee:0b:ea:06:0a:
d7:11:15:35:87:14:70:b7:d2:ca:c1:ff:4d:dd:55:
22:74:2f:5e:e8:9d:2b:df:09:23:35:47:2d:71:9e:
53:73:ee:62:7c:e7:79:28:84:17:93:61:01:2c:ff:
24:4a:2c:f3:dc:b0:9e:59:b1:e5:2b:52:36:46:7d:
43:d9:09:b5:d4:b2:bf:db:09:94:45:73:71:e3:ad:
27:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:44:28:3C:6C:FC:F4:8E:09:E1:50:11:5A:05:96:F2:E4:03:B2:0C
X509v3 Authority Key Identifier:
keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/935296A6558B11F0BB2DB436C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:be0:fefe::/48
Signature Algorithm: sha256WithRSAEncryption
02:58:2b:55:39:4a:2a:13:00:7f:03:fd:ae:48:37:46:44:64:
d3:56:f9:6f:b4:76:d0:69:32:72:37:65:46:f0:b1:17:05:08:
38:27:99:a2:1f:30:12:ac:e6:f5:f3:f2:5a:2c:b9:49:57:25:
54:85:54:02:1d:03:0e:09:be:0c:84:e6:33:89:4a:47:86:99:
d1:e1:6b:60:61:ae:e0:51:e0:a4:15:75:26:70:26:83:a9:8c:
90:9e:3a:94:2c:f2:14:94:7b:c0:6a:88:e8:08:df:4a:f2:ab:
a3:f1:0d:00:c6:e0:83:62:02:3d:2a:98:1f:bf:97:9f:e3:a2:
43:5a:e1:9d:16:41:0c:25:bb:d6:ea:61:c7:3b:6c:3a:8c:54:
a4:c7:1d:81:23:ca:7e:38:d4:a3:f4:65:d7:80:5b:b1:18:dd:
d4:1e:f7:26:01:f5:b5:8c:32:78:6b:c1:d7:3d:1c:ef:f6:c8:
96:49:36:f1:26:23:4d:1e:e1:9f:f6:1d:c6:ec:27:7c:ca:d8:
b3:86:25:d7:1b:2a:20:58:14:ea:b1:dd:16:e0:ec:97:dc:0c:
a9:87:a9:0c:d6:69:e5:31:e0:ed:bd:b3:d3:ab:cd:33:d4:a6:
5a:40:32:7c:8a:9e:a3:c1:d6:b2:0a:56:41:3c:c3:93:6b:36:
a5:e8:7f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:31:36 2026 by rpki-client