
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/64B2DE72AC1011ED8592693FC4F9AE02.roa
File: 64B2DE72AC1011ED8592693FC4F9AE02.roa (raw, json)
Hash identifier: Yq+XkZnFsUBeEQv24fQGoEmIq0pC6YGTxLPonEh4+Us=
Subject key identifier: 04:D1:D3:EA:26:D3:99:CD:94:52:D5:3A:5E:6A:AC:29:02:A5:5D:6A
Certificate issuer: /CN=A91F8E9B/serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9
Certificate serial: 02C6
Authority key identifier: 44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/64B2DE72AC1011ED8592693FC4F9AE02.roa
Signing time: Sat 05 Sep 2026 01:51:12 +0000
ROA not before: Sat 05 Sep 2026 01:51:12 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 24234
IP address blocks: 2400:b400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl
rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 01:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 710 (0x2c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8E9B, serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9
Validity
Not Before: Sep 5 01:51:12 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a9b7590-4e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b1:bd:32:6a:3f:2d:04:45:81:a9:70:19:57:
fe:82:7c:c8:55:bf:4d:b9:c7:0b:a4:a6:95:44:c6:
4c:5c:ae:e7:ac:4a:5d:bb:67:54:1f:ac:d2:ef:c2:
45:98:b2:9b:e8:d7:76:e2:a6:3f:fa:da:12:54:26:
6d:1f:0b:43:2a:ff:1d:9a:8e:cb:b7:8c:ab:d5:0b:
c6:d3:e4:11:4e:7b:bb:fd:d6:96:a9:d1:d0:c9:ef:
28:a2:77:a7:fb:0e:b0:2c:a1:df:37:27:76:9d:70:
ae:83:95:46:22:5b:b4:cb:63:69:66:49:23:9b:d1:
4c:2a:d7:4a:84:df:52:96:35:c8:33:65:39:37:7e:
7a:d1:51:1d:0b:10:91:b6:4c:fe:cf:77:1d:ec:22:
8d:03:df:e7:bb:71:9f:5d:e7:a5:88:80:5d:18:fc:
f3:36:10:ca:5a:9b:1a:94:c7:8c:20:23:b7:2b:29:
e7:f9:48:3d:66:b9:31:dc:93:7d:d2:e3:85:7f:dd:
7b:b8:23:4a:ae:ae:37:72:d3:e6:4a:3a:44:1d:d2:
a5:5c:9c:8d:99:70:03:fb:63:13:c5:0c:98:28:4d:
01:b9:c6:6d:45:e0:a6:d7:98:92:51:33:85:bd:f0:
f7:c9:ef:49:bf:89:f5:3e:71:e8:95:6f:70:a7:aa:
97:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D1:D3:EA:26:D3:99:CD:94:52:D5:3A:5E:6A:AC:29:02:A5:5D:6A
X509v3 Authority Key Identifier:
keyid:44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/64B2DE72AC1011ED8592693FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:b400::/32
Signature Algorithm: sha256WithRSAEncryption
82:fa:e1:da:fb:20:8f:aa:43:f2:93:c1:43:db:ee:d4:20:0f:
28:4e:b9:94:8a:73:54:23:54:76:26:11:c4:f9:96:3c:95:e3:
1f:4e:64:6c:0b:11:e4:67:92:21:5d:98:ec:f9:9f:08:dd:37:
82:d9:68:74:ed:67:80:4c:43:a1:ff:c7:2a:d5:db:c1:f1:d8:
3e:c0:09:19:4c:52:1f:1a:fe:bc:04:51:19:61:8d:84:8f:fa:
78:13:a0:0f:5d:9e:10:57:9b:28:e3:85:51:2c:54:0b:67:5f:
9e:d4:3a:f0:f4:f1:95:89:9a:b1:d7:2c:6e:ff:03:b0:e8:1b:
e4:19:b8:3c:1a:2c:8e:2b:99:73:e4:fd:98:d7:08:85:a8:ba:
94:d4:ec:c3:b7:8f:b3:00:41:55:2d:e6:69:10:de:1b:3a:ae:
64:fb:fd:3b:fd:cf:d6:73:15:ce:c3:82:a7:b7:76:eb:fc:86:
2e:b4:82:4a:15:88:04:a2:ca:18:92:bc:54:d2:f0:4d:1b:58:
e6:7b:43:47:54:0f:ca:8d:66:90:60:95:f7:be:78:83:44:f7:
db:7f:3f:2b:d9:f9:46:1d:d1:d7:66:55:35:2e:19:99:42:3e:
7b:54:fb:46:6e:78:a0:1c:aa:57:e8:41:6e:32:65:98:ca:db:
80:d9:71:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:56:16 2026 by rpki-client