
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/500DFDA8578611EA8CC3B124C4F9AE02.roa
File: 500DFDA8578611EA8CC3B124C4F9AE02.roa (raw, json)
Hash identifier: zSpovKpU002aRj0qY0zdZXg1dWaqo+y8NB7/DtI+3e8=
Subject key identifier: 79:F1:7C:E7:BF:99:0C:DF:40:92:C7:4B:CC:16:02:B5:00:07:98:E0
Certificate issuer: /CN=A91731EA/serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC
Certificate serial: 2026
Authority key identifier: D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/500DFDA8578611EA8CC3B124C4F9AE02.roa
Signing time: Thu 24 Sep 2026 16:28:55 +0000
ROA not before: Thu 24 Sep 2026 16:28:55 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 17501
IP address blocks: 2407:6200::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl
rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 16:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8230 (0x2026)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91731EA, serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC
Validity
Not Before: Sep 24 16:28:55 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ab54fc7-9b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:40:40:55:b2:ce:51:9d:b5:9e:3f:aa:61:a2:
c2:9d:1c:2a:29:94:83:6a:d9:55:c9:f1:dc:88:48:
4b:6a:d5:82:52:37:0e:c4:5f:c9:be:02:e3:c6:55:
a2:79:5f:54:14:1f:51:06:66:0a:74:1d:bc:a4:0f:
bb:30:f8:8b:97:4c:88:10:ec:c4:73:46:49:29:c1:
ee:90:e4:48:9e:00:c7:c1:19:d2:4a:c2:fe:ea:52:
93:ce:ab:69:70:df:89:d1:03:19:b2:a0:ff:7a:85:
7f:72:25:4c:ac:d0:9f:3c:bc:af:ac:ac:d6:f1:b7:
2e:32:57:36:9e:ab:00:d4:c9:5d:15:d1:5e:9b:ea:
1f:89:d8:48:23:f6:41:34:09:23:2a:88:bf:be:ca:
70:25:2f:0d:75:f6:4c:50:35:a0:70:01:60:36:7c:
ef:9b:05:45:33:d8:41:be:7c:51:50:5d:a2:ba:48:
c9:7b:3a:29:3e:c0:43:4b:80:28:12:12:9c:a7:74:
f9:4e:d1:b6:6a:1c:c9:6f:53:58:de:0a:68:d7:67:
39:6a:85:f9:60:18:07:ca:6d:aa:b6:cd:63:40:26:
f3:95:8f:79:68:41:dc:35:5c:6d:a1:78:bb:d7:95:
ef:ad:97:90:07:e7:1f:90:04:50:30:d7:91:78:e1:
55:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F1:7C:E7:BF:99:0C:DF:40:92:C7:4B:CC:16:02:B5:00:07:98:E0
X509v3 Authority Key Identifier:
keyid:D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/500DFDA8578611EA8CC3B124C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2407:6200::/32
Signature Algorithm: sha256WithRSAEncryption
5d:14:70:60:fc:f5:85:ca:94:1c:db:d5:4a:04:84:10:7b:92:
50:95:26:e0:0a:12:ea:a7:90:91:f3:c4:47:be:6b:2e:f2:cb:
b9:d4:c1:47:e6:fe:94:d8:1d:e2:61:63:97:12:e2:ce:d2:00:
31:bc:83:32:b9:f1:20:f4:02:f1:89:e6:1d:39:de:fd:83:32:
e1:ee:0c:27:ab:60:50:9a:34:e8:19:3d:b9:44:33:8f:2d:d1:
ec:df:62:68:22:35:0d:07:ab:ce:8f:5f:be:ae:a0:a9:d0:73:
ab:6e:2b:66:43:9b:d8:95:c0:bf:9d:61:7f:8f:6e:44:5a:e8:
f1:e8:96:4c:44:65:2a:f7:c7:06:82:14:26:67:3b:53:63:ea:
bc:7b:65:64:c4:65:b0:8e:c4:79:38:0c:05:5e:ad:ee:da:d9:
86:a6:dd:2d:3c:ac:f3:b2:a5:fe:1d:a9:8c:5a:e1:bf:1c:29:
dc:73:7e:c5:70:f0:68:7e:67:2f:b8:9f:6b:61:bf:9f:a9:37:
f1:5f:76:5a:f1:2c:b6:63:d9:6b:f5:bd:5f:de:71:34:78:6d:
a4:36:8f:14:c9:80:40:e5:53:5b:1f:e0:8d:05:65:be:19:93:
81:10:d1:53:52:ed:2c:2f:36:2a:fd:1e:67:b5:7d:3c:8e:f1:
ee:50:55:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:44:52 2026 by rpki-client