
$ rpki-client -vvf rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/3DB131DC86F211F1B8F66003A7EE528E.roa
File: 3DB131DC86F211F1B8F66003A7EE528E.roa (raw, json)
Hash identifier: sUfxM8axC54H/lShffOwTy/FoQUoQiyfwyQ2W0FeNjo=
Subject key identifier: EB:8C:F2:F2:DE:A3:D5:C7:A4:C0:90:CC:05:EE:CA:28:DB:F2:5A:66
Certificate issuer: /CN=A91756B7/serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
Certificate serial: 0840
Authority key identifier: 83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/3DB131DC86F211F1B8F66003A7EE528E.roa
Signing time: Thu 23 Jul 2026 23:57:20 +0000
ROA not before: Thu 23 Jul 2026 23:57:20 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 142045
IP address blocks: 2407:4ac0:1400::/38 maxlen: 40
2407:4ac0:1800::/37 maxlen: 40
2407:4ac0:2000::/35 maxlen: 40
2407:4ac0:6000::/35 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl
rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 01:47:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2112 (0x840)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91756B7, serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
Validity
Not Before: Jul 23 23:57:20 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a62aa60-a37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c5:b9:d0:0f:24:18:57:ce:b1:5e:03:fd:d5:
5a:d0:8c:8e:e3:07:c4:4b:2f:ec:1c:97:0c:e6:17:
ed:c8:3d:5f:2d:31:58:b8:6c:9d:36:88:ba:28:4c:
bf:48:fa:3a:9c:b1:20:c5:ed:90:07:28:0f:51:c0:
49:ad:71:d9:28:72:9f:5b:d5:03:30:df:62:20:1a:
66:12:bf:72:bc:2d:77:c6:ff:e6:c5:70:40:96:0c:
15:20:73:c4:fe:3a:5a:4a:7d:21:4a:b5:2d:9c:d9:
53:65:25:f5:7f:32:b5:55:4c:b4:f0:ec:1d:80:5f:
b2:7e:14:84:d6:27:8e:65:80:8f:f5:2d:18:6e:21:
90:fb:df:7e:ac:99:96:55:19:b1:55:72:11:5a:1d:
74:12:88:37:82:d2:31:58:b0:40:45:11:e2:b5:35:
c6:c5:79:82:84:1a:79:2d:d8:20:f6:11:b8:96:0b:
e8:27:8a:f8:ba:b2:7c:98:05:4b:ef:2b:89:38:64:
e8:33:a2:87:40:51:86:ee:d3:21:6e:27:4d:51:d4:
bd:3a:8d:4f:e2:0d:22:70:48:e5:a0:3d:f5:0f:b0:
4f:4a:4e:d2:33:f1:6e:de:1c:0b:cf:e2:71:47:4a:
28:70:54:2f:36:3b:80:45:50:b8:bf:db:91:ce:10:
ec:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8C:F2:F2:DE:A3:D5:C7:A4:C0:90:CC:05:EE:CA:28:DB:F2:5A:66
X509v3 Authority Key Identifier:
keyid:83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/3DB131DC86F211F1B8F66003A7EE528E.roa
sbgp-ipAddrBlock: critical
IPv6:
2407:4ac0:1400::-2407:4ac0:3fff:ffff:ffff:ffff:ffff:ffff
2407:4ac0:6000::/35
Signature Algorithm: sha256WithRSAEncryption
64:b7:cf:40:49:ca:d6:a4:05:88:9c:a9:ce:c6:75:03:7b:6b:
15:7b:8f:b9:89:30:7b:69:53:37:99:99:cd:03:aa:9b:6c:c2:
a7:8d:a0:2d:5c:8d:fa:70:6f:e9:58:05:e0:67:50:08:3e:13:
bd:0f:0a:97:5e:35:c1:60:18:34:14:dd:fc:0f:e9:67:a2:c3:
a2:88:82:74:77:af:b9:de:0e:ee:73:ff:c3:bd:52:3b:7a:c3:
b1:c0:25:26:18:98:c2:e4:20:59:93:09:23:cb:fb:d1:5c:36:
07:ef:5c:a7:9c:45:5c:2a:e7:b6:f0:1e:1a:a3:07:46:ff:9a:
11:a7:ca:49:c9:cc:1a:05:e0:76:3f:2b:93:6e:92:14:83:a7:
61:f5:ba:d3:e7:88:b0:4e:27:fc:4f:e2:15:11:fe:0c:00:c8:
87:35:17:8d:68:e1:e5:9c:29:7b:3d:31:22:60:9b:a1:eb:d4:
7c:5d:d4:4c:9e:32:7e:85:a6:63:76:0d:40:d9:94:66:c8:9d:
cb:76:c0:b5:ff:35:ad:df:5b:5c:97:82:73:1e:62:e8:c7:01:
9e:4d:09:92:77:07:fd:0c:b1:29:b5:3f:b7:6e:54:d3:79:c9:
3b:f9:9c:a0:ac:ac:c7:13:58:60:72:c1:cd:40:a3:65:f3:bf:
da:3a:ce:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:30:19 2026 by rpki-client