
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/F88F98EA55A211F0978C8774C4F9AE02.roa
File: F88F98EA55A211F0978C8774C4F9AE02.roa (raw, json)
Hash identifier: cHVZM2RrxPryzH19ncHHRhi6LeE54UzV1q7hfFg6Guw=
Subject key identifier: 58:36:CE:86:98:1C:0D:D7:01:F4:83:1F:E5:49:C5:C3:37:F7:48:26
Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Certificate serial: 02FF
Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/F88F98EA55A211F0978C8774C4F9AE02.roa
Signing time: Thu 05 Nov 2026 03:49:30 +0000
ROA not before: Thu 05 Nov 2026 03:49:30 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 399916
IP address blocks: 2402:be0:fefb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 02:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 767 (0x2ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Validity
Not Before: Nov 5 03:49:30 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6aebfcc9-762d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4c:4c:42:17:06:7f:11:33:a9:07:b7:ee:81:
f4:a7:00:e0:91:58:78:0f:f9:64:67:d6:ef:6e:a2:
c7:13:9f:7b:f6:86:73:86:8b:e2:70:19:66:94:ff:
58:9f:e3:08:dc:4f:94:54:fa:7c:d4:27:0a:c0:59:
61:11:98:e7:8c:02:0f:c7:e7:86:c9:3e:cd:bc:40:
db:58:0b:45:9e:4f:70:c9:aa:74:94:06:ec:b6:ab:
c5:02:47:9e:76:d2:dc:2c:d9:13:e4:b1:34:2b:3f:
4a:8b:3f:7a:68:47:8d:3a:18:37:82:74:6d:43:e0:
11:eb:3a:f6:52:cb:77:17:87:b5:3f:af:6c:da:c6:
6d:30:2f:de:a1:c6:fa:e6:b8:6c:f4:fe:24:6e:60:
af:7e:1d:80:8f:b6:38:70:95:15:f3:e0:e2:83:f2:
17:90:08:35:3c:4f:b8:a5:fd:94:3e:7a:c4:d6:8e:
06:62:79:e1:1f:09:1a:b0:4a:3f:97:39:38:0f:a6:
46:e1:29:2f:79:ef:fd:d6:30:e5:47:42:1a:ff:75:
89:c7:8f:7d:8d:f0:9d:33:0d:c3:db:17:ca:fc:5a:
a2:f0:f5:8e:f7:6d:0d:dc:31:fc:9b:cc:b6:56:18:
19:0b:6f:31:fc:35:ac:a5:1e:1b:e4:f1:0d:39:a8:
42:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:36:CE:86:98:1C:0D:D7:01:F4:83:1F:E5:49:C5:C3:37:F7:48:26
X509v3 Authority Key Identifier:
keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/F88F98EA55A211F0978C8774C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:be0:fefb::/48
Signature Algorithm: sha256WithRSAEncryption
44:d8:86:74:8c:31:34:21:72:d6:5c:cc:e3:2b:45:05:ab:e6:
f6:0a:b1:8d:28:07:bc:08:9f:a7:c9:fa:4b:00:02:85:15:48:
72:1c:28:69:bf:25:0e:80:0e:f7:d0:7f:c1:a0:80:ae:60:08:
cd:46:0b:0f:36:f4:76:fd:b6:ad:7a:84:a3:93:4e:e5:53:ed:
68:fa:e3:8e:de:fe:30:b7:0e:08:e9:b8:51:12:bc:e6:d2:a0:
58:28:0b:db:4b:05:55:01:1d:6b:20:a5:3a:58:b3:c1:69:3f:
67:b8:b4:94:31:1a:8b:86:a2:a4:62:dd:90:af:51:1b:f6:a5:
3a:fb:14:c9:16:16:49:fc:cc:71:ed:c7:c4:f0:83:d8:e7:e5:
2d:22:27:69:f6:d6:4e:f1:aa:d7:4f:d9:c9:d6:52:7e:f1:65:
d8:14:3b:b6:cb:2f:3c:da:74:d6:2f:87:98:52:2b:b6:83:b7:
4c:05:fa:4e:42:67:49:54:70:a3:57:db:fa:a7:14:18:ef:0d:
f0:75:ee:10:61:43:a4:92:c8:0a:12:51:e7:03:ce:ea:13:36:
48:17:4f:03:5b:6a:f2:0b:32:cf:29:78:be:af:1e:a7:93:f2:
56:ff:ee:ae:98:b6:5c:95:87:02:17:af:e4:c1:c6:15:56:8a:
57:1b:fb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:23:20 2026 by rpki-client