
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/B8201598BED111EC93B74C4FC4F9AE02.roa
File: B8201598BED111EC93B74C4FC4F9AE02.roa (raw, json)
Hash identifier: avjUCYfIUTnXlS17xW5tzr/N2L2zs3IwMpwbWsZCILA=
Subject key identifier: 7E:AE:6C:DF:2F:DA:91:25:6F:1F:A4:E7:E9:B9:DE:21:C6:16:58:DE
Certificate issuer: /CN=A91F428C/serialNumber=D7186B2865B8600D662822AFEB90157006E0F410
Certificate serial: 3576
Authority key identifier: D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/B8201598BED111EC93B74C4FC4F9AE02.roa
Signing time: Wed 12 Aug 2026 15:17:01 +0000
ROA not before: Wed 12 Aug 2026 15:17:01 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 45172
IP address blocks: 2405:9400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl
rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 15:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13686 (0x3576)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F428C, serialNumber=D7186B2865B8600D662822AFEB90157006E0F410
Validity
Not Before: Aug 12 15:17:01 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a7c8e6d-ca8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:23:b6:12:f4:a9:6d:12:7b:b5:0c:f9:dd:98:
ec:e2:cc:38:46:a2:cc:49:29:7d:97:4e:1f:ca:f9:
1b:04:90:d3:2e:07:19:a4:69:5d:5f:c6:75:27:bb:
4c:19:b1:4b:42:dc:97:98:32:6f:5d:92:a6:c7:f7:
19:04:9e:d2:69:ba:46:81:aa:bd:ea:77:df:9b:b5:
ed:56:97:13:92:fd:55:1c:f2:0b:eb:85:d2:b7:2d:
75:85:4a:be:2d:4e:b7:a8:17:0e:4e:51:0c:f3:0e:
d2:55:3a:90:da:1a:56:3e:ad:bb:f1:0b:32:12:f3:
6f:b0:e1:81:2f:36:79:d5:b3:d5:6a:b9:d3:d4:f7:
27:29:98:9f:db:3e:b7:b7:5e:00:af:b4:30:1f:55:
7e:ec:3a:7d:bd:88:e8:18:47:27:fa:7c:27:59:6d:
83:68:84:a9:0b:f4:13:96:6d:b6:72:81:4e:24:6b:
1d:4b:ff:f1:bb:28:a1:3e:e9:ac:e0:77:b3:4e:ab:
a8:f5:cb:ae:dd:84:ca:bf:55:61:fe:88:f3:20:17:
d4:af:86:53:d3:d4:8d:a8:49:be:1e:d1:ba:0a:3d:
da:36:65:9c:72:ae:00:91:26:80:86:d9:59:63:5f:
e1:15:c7:d4:7d:9e:df:cb:d7:2e:7a:62:7b:3b:48:
d2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AE:6C:DF:2F:DA:91:25:6F:1F:A4:E7:E9:B9:DE:21:C6:16:58:DE
X509v3 Authority Key Identifier:
keyid:D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/B8201598BED111EC93B74C4FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:9400::/32
Signature Algorithm: sha256WithRSAEncryption
52:e5:f3:70:72:d2:59:81:db:ca:54:99:b5:a4:5f:9a:22:e3:
40:82:96:04:d0:55:3c:90:87:6c:89:b2:a5:99:03:12:0f:02:
3c:50:9c:4b:a5:60:c2:ff:cf:e3:7a:81:05:bb:3a:1c:5e:7b:
e6:ec:1b:43:c1:95:75:ec:f7:0b:18:06:bc:99:c7:a0:dd:68:
a0:a6:89:37:bb:52:82:1f:d2:e8:71:ac:41:cf:24:3d:2e:4f:
17:b8:54:a9:75:b4:c1:f8:64:7b:51:9d:b1:4a:7c:6b:79:fd:
9b:2c:7a:08:72:ab:96:1c:a7:c2:1f:29:4d:e3:f1:51:aa:20:
53:87:0a:d2:d5:df:eb:c7:bb:c9:03:05:a7:fa:e1:94:7b:2d:
20:f7:b7:2a:fc:8e:41:2e:69:e6:10:ed:75:64:7f:dd:fb:b0:
9b:41:d9:ad:20:ce:4a:ff:dc:d3:cc:e4:c4:70:2b:a2:77:fe:
f0:e6:f9:8d:b9:64:9e:42:55:9c:ae:fc:89:92:4c:42:f4:21:
dd:1d:9f:ea:71:72:80:01:f4:ed:0a:89:e1:b3:3c:d7:21:c2:
8e:98:be:0f:eb:e4:f0:ac:f0:26:d6:da:12:3f:9a:22:f4:d7:
2c:61:e7:fe:ba:09:16:2e:f5:52:a9:d4:70:a2:d9:6e:68:20:
2d:b0:ef:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:38:54 2026 by rpki-client