
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/48C2333271D011F18649332165A30FBC.roa
File: 48C2333271D011F18649332165A30FBC.roa (raw, json)
Hash identifier: LDP5Esly8VYRBXjaigIiSwQbm+Rq9+J2C6Fns5Nz1AU=
Subject key identifier: 37:47:EE:B1:DE:A8:60:E1:97:FF:4E:5F:20:4B:F9:DF:C1:C6:05:98
Certificate issuer: /CN=A91F40E0/serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE
Certificate serial: D6
Authority key identifier: 89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/48C2333271D011F18649332165A30FBC.roa
Signing time: Fri 07 Aug 2026 06:57:31 +0000
ROA not before: Fri 07 Aug 2026 06:57:31 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 152698
IP address blocks: 2001:df5:f9c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl
rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 01 Sep 2026 06:50:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F40E0, serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE
Validity
Not Before: Aug 7 06:57:31 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a7581db-c9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:01:d0:59:a7:59:84:22:02:05:da:6b:34:77:
d7:53:2e:92:fe:2c:59:75:be:d3:21:eb:0f:0b:ec:
52:dd:3e:81:53:a5:80:72:47:4e:1c:8d:d9:26:19:
88:ff:be:e1:19:30:3c:f8:8f:8f:de:e6:22:07:20:
73:07:dd:b3:08:a1:cd:a8:b0:8d:bd:a1:1f:ce:0f:
52:37:5a:b9:c4:96:c4:61:91:ea:b1:c5:15:f6:4a:
0f:41:21:d1:27:62:26:bf:ab:52:6b:2a:50:f2:f4:
d8:a5:7c:91:44:91:b9:11:3d:31:9e:34:46:63:20:
86:37:9f:60:bd:96:7d:b2:67:db:4b:89:69:e4:03:
2a:80:96:27:17:3e:1d:c3:e6:be:21:78:e3:3b:4a:
df:af:0f:a7:a1:09:15:30:03:44:69:f2:b8:2d:1e:
5d:ec:7f:76:00:26:ef:95:c2:18:cc:a5:e6:56:b7:
db:d4:72:13:c8:90:2f:06:41:66:ff:fc:98:8b:5f:
dd:e1:e8:c1:24:d2:59:ce:9e:1e:15:77:2c:28:a4:
c6:50:a8:7b:f6:2a:3d:9e:2a:34:05:97:c2:05:d3:
1d:44:ee:a2:c0:f7:30:ae:15:9f:2b:4e:f7:af:7f:
6d:2c:a2:6a:4e:7a:14:af:63:05:a6:05:95:d7:b0:
4b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:47:EE:B1:DE:A8:60:E1:97:FF:4E:5F:20:4B:F9:DF:C1:C6:05:98
X509v3 Authority Key Identifier:
keyid:89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/48C2333271D011F18649332165A30FBC.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:f9c0::/48
Signature Algorithm: sha256WithRSAEncryption
98:16:76:29:61:1d:d6:44:1f:81:0a:1b:d7:03:9f:5a:a6:03:
92:25:ba:ad:e0:ae:fa:ff:56:37:f5:be:aa:60:40:18:9b:51:
8b:5a:b2:7a:fa:55:ac:46:cb:7c:dc:d4:87:ed:50:07:32:88:
c4:3c:11:c8:12:4c:ed:1b:cd:bc:da:08:40:9a:d1:42:bb:b8:
2c:96:06:a7:75:f1:d3:01:e4:50:e2:c9:3e:93:c1:cb:25:34:
e7:77:2d:16:1a:a9:b9:3a:57:45:40:7a:b5:20:71:16:23:82:
11:4d:17:74:b5:55:ed:5b:fc:9d:b1:9f:3f:aa:11:40:f4:fd:
24:85:c8:d0:1b:31:b8:39:ad:19:8c:7f:62:69:0d:88:a7:61:
94:fd:c5:21:1c:a2:22:f8:2c:8c:cc:96:76:ce:4b:91:5b:70:
51:9e:5b:0a:99:09:b7:55:65:2f:c2:f4:57:f1:07:31:0c:c1:
da:b9:8a:b2:ad:f1:2f:3a:77:4f:e4:e5:e3:be:a2:8e:58:ab:
2c:68:86:d0:ce:39:e8:82:89:3b:32:32:70:df:98:e5:78:e7:
91:7c:30:0c:7c:0c:00:e9:d9:97:8c:4c:0a:64:d3:13:ad:7f:
ad:04:81:98:f9:07:02:65:a2:8a:72:ca:cd:1d:23:a4:af:a2:
c6:84:3c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:57:58 2026 by rpki-client