
$ rpki-client -vvf rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/8862654086CF11EF901ED838C4F9AE02.roa
File: 8862654086CF11EF901ED838C4F9AE02.roa (raw, json)
Hash identifier: dkIQ4WnsTccyBWKjh3AaKgDcefsJNG0dzPIiDsqZ34k=
Subject key identifier: D9:B5:06:35:FC:F4:17:D2:02:F6:BD:2D:9E:4F:C9:E5:F7:A6:37:23
Certificate issuer: /CN=A91106C7/serialNumber=78FBFCD8D532BFBBAB7D79C51A7738EA494C26B7
Certificate serial: 014B
Authority key identifier: 78:FB:FC:D8:D5:32:BF:BB:AB:7D:79:C5:1A:77:38:EA:49:4C:26:B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ePv82NUyv7urfXnFGnc46klMJrc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/8862654086CF11EF901ED838C4F9AE02.roa
Signing time: Mon 02 Mar 2026 15:07:53 +0000
ROA not before: Mon 15 Sep 2025 06:13:55 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 152928
IP address blocks: 2001:df3:f640::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/ePv82NUyv7urfXnFGnc46klMJrc.crl
rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/ePv82NUyv7urfXnFGnc46klMJrc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ePv82NUyv7urfXnFGnc46klMJrc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:24:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331 (0x14b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91106C7, serialNumber=78FBFCD8D532BFBBAB7D79C51A7738EA494C26B7
Validity
Not Before: Sep 15 06:13:55 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a5a7c9-b755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2b:76:9b:b5:6e:dd:ef:3c:7e:70:b9:9f:ff:
2d:ed:f9:62:81:45:96:a8:e8:1c:05:2a:28:9e:ce:
07:5d:0c:75:13:26:90:cc:78:fb:04:dd:77:2d:c2:
73:84:87:f8:de:ca:fa:5c:2c:48:96:f4:ed:4d:bc:
9a:e1:ea:69:59:bb:40:83:df:d1:ab:58:5b:04:4b:
f9:e5:e6:3b:0b:9a:88:df:f2:33:95:5d:c3:7e:e6:
59:ed:4e:da:39:e9:19:bb:9b:65:0a:d9:9c:f6:c2:
21:51:2f:98:41:79:6c:cb:ac:33:30:ad:4c:46:3d:
78:82:ea:83:9c:12:a7:df:46:68:32:ce:96:2a:14:
2d:22:99:67:ca:38:6d:5e:a3:87:d6:d1:c8:9f:8b:
22:62:88:1b:c2:f8:55:8b:f5:9f:94:43:19:6c:70:
e4:72:dd:c1:81:91:5d:74:a0:e1:93:9e:31:a7:48:
3e:42:25:07:bc:17:69:a4:0b:17:40:67:87:e8:19:
e3:67:2d:38:d8:46:0f:a8:35:d7:1f:d5:16:ec:b1:
a1:b4:d2:19:e3:87:4c:08:0c:6a:81:2b:ee:47:1f:
2b:5c:82:d1:17:e0:7f:9e:28:29:93:a3:c6:78:09:
c5:af:d0:6e:7d:75:5c:7c:bd:be:17:c4:e2:f7:99:
95:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B5:06:35:FC:F4:17:D2:02:F6:BD:2D:9E:4F:C9:E5:F7:A6:37:23
X509v3 Authority Key Identifier:
keyid:78:FB:FC:D8:D5:32:BF:BB:AB:7D:79:C5:1A:77:38:EA:49:4C:26:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/ePv82NUyv7urfXnFGnc46klMJrc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ePv82NUyv7urfXnFGnc46klMJrc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/8862654086CF11EF901ED838C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:f640::/48
Signature Algorithm: sha256WithRSAEncryption
bc:88:21:7f:89:9b:7c:2c:23:3b:05:96:da:a1:42:89:37:15:
a5:3b:9d:cb:97:37:c4:46:3d:75:bc:61:25:f8:e5:ea:3e:e0:
43:7f:34:7a:7d:7a:76:00:45:4f:2e:75:d2:60:91:dd:00:b8:
47:8b:ab:9d:cf:10:db:60:ac:6d:80:8e:80:a1:84:a6:a3:08:
4e:64:8b:43:58:eb:aa:23:cf:ba:78:5f:4f:01:ca:6f:0f:6a:
36:0b:a4:b4:ee:fa:5a:e4:09:ac:c8:24:c5:b6:26:1f:a4:7d:
87:53:ce:05:dc:06:f4:be:f5:29:4a:b1:e1:73:dd:da:a2:fe:
c4:50:09:52:cd:be:dc:92:70:3b:5e:e1:b6:05:dd:10:d1:79:
4d:fb:ca:25:96:37:ec:f7:d8:51:00:fc:36:66:fb:3f:d6:d4:
b1:5c:90:52:9d:f2:b8:82:fd:d6:2c:3d:99:57:4e:b7:91:d9:
dc:8f:0e:60:1f:8a:d0:46:ef:08:bc:5f:d3:59:bf:13:3c:ec:
60:5a:ab:06:21:c1:13:cb:ff:c9:4a:23:59:96:bc:9f:5e:78:
ff:3a:3e:26:70:55:57:36:57:82:9d:94:e6:f4:23:dc:d3:9d:
d3:0a:08:74:f1:7d:1a:58:12:cc:71:88:89:5b:31:84:ef:57:
22:bb:5c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:54:17 2026 by rpki-client