
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/6CFCC5EC8F4D11F1B986D3494611F970.roa
File: 6CFCC5EC8F4D11F1B986D3494611F970.roa (raw, json)
Hash identifier: DIzsgSR5GwxTp5MHAgczXy9dfk2cq7Ie4lXeoFdLBeg=
Subject key identifier: 54:4B:43:FB:42:86:F9:0D:1A:7C:6F:E7:78:0A:04:7D:66:BA:59:87
Certificate issuer: /CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33
Certificate serial: 01F1
Authority key identifier: AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/6CFCC5EC8F4D11F1B986D3494611F970.roa
Signing time: Mon 03 Aug 2026 15:10:13 +0000
ROA not before: Mon 03 Aug 2026 15:10:13 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 2001:df3:ad40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl
rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 01 Sep 2026 03:56:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 497 (0x1f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9353, serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33
Validity
Not Before: Aug 3 15:10:13 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a70af55-fc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:25:c5:87:5d:da:77:cc:1d:49:15:c2:56:75:
53:5b:c6:4c:f8:cf:c9:0f:00:87:57:82:1e:51:b1:
c8:6c:4c:7b:d9:d0:9a:1d:dd:2c:f2:df:cf:e1:21:
0c:e9:48:70:0a:3d:0f:c6:ef:a6:d8:16:4d:f8:73:
d6:8b:fa:fa:4c:e0:58:95:3d:06:d6:f7:9d:d7:86:
0e:35:59:6f:bf:27:f0:93:d1:bc:b0:1a:b3:94:4b:
9a:69:17:31:db:1a:a4:f6:ba:ae:62:1c:d6:f7:d8:
a9:37:db:a5:82:f1:bb:96:44:78:ae:81:be:e1:22:
d9:7d:c0:dd:fb:d7:d2:f4:2c:b4:05:05:ea:be:eb:
74:ef:c4:59:48:36:a4:07:c1:18:ed:30:21:28:1f:
f6:5d:0d:33:65:79:62:dc:22:e7:62:d8:e5:c3:06:
46:a4:0f:f7:b1:1d:80:b0:cc:e7:19:9f:d9:2c:d0:
a5:08:35:88:c5:57:10:4b:19:f7:b4:07:d4:01:cb:
f9:4e:44:9a:47:a2:2f:f5:2c:44:0f:0e:92:4b:9e:
74:f1:0d:4b:09:58:3c:3e:71:7a:40:54:70:c9:a4:
71:62:de:5d:15:5a:18:13:8f:8f:9e:dc:4c:a6:a7:
d3:83:25:1c:d9:aa:e2:53:04:cf:bd:d3:75:a5:8d:
3c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4B:43:FB:42:86:F9:0D:1A:7C:6F:E7:78:0A:04:7D:66:BA:59:87
X509v3 Authority Key Identifier:
keyid:AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/6CFCC5EC8F4D11F1B986D3494611F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:ad40::/48
Signature Algorithm: sha256WithRSAEncryption
2c:de:fb:50:f4:65:66:02:6c:ba:cc:d6:3c:0b:6c:d6:94:dd:
85:7e:34:b9:0c:f2:0a:8e:dd:cd:32:6f:09:6c:41:cd:b0:3e:
28:bd:b9:45:28:40:4f:c9:25:3c:92:c1:25:75:d5:7c:7b:44:
f4:fa:c5:a9:49:3b:9f:30:a3:91:bd:72:92:ac:09:ad:cf:2d:
e8:d1:b7:17:80:d7:bc:49:ea:c4:7a:5a:b2:dd:75:10:5f:f3:
73:2c:72:02:d0:9a:c4:27:d9:01:4b:27:fc:60:f4:ad:40:83:
82:3e:48:96:af:47:9a:91:7b:d8:1f:4d:34:83:6d:f5:52:6f:
f3:2c:a3:9f:5d:3e:2b:9d:09:7b:24:43:df:df:ec:70:38:ec:
77:a9:04:f0:f8:e2:8a:60:b8:80:13:8b:e6:cc:7e:72:cb:5f:
31:65:70:48:0f:3a:95:f8:38:b2:92:87:5a:5d:1d:b6:f2:fe:
60:37:fe:c9:17:db:e3:d1:07:5c:bd:cb:6d:7b:b0:1a:ef:f9:
d3:1b:26:88:3b:bd:0b:3a:41:fc:e7:d7:28:f3:e0:a0:32:e8:
3b:5a:6a:7e:77:a4:9f:e2:42:66:7f:83:f3:6d:04:a8:e1:19:
6b:ae:9f:ec:87:99:df:2c:c4:3b:77:5e:7e:00:ee:3d:f7:2f:
da:32:f8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:10:13 2026 by rpki-client