
$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/AF6D4D44B73311EC8392922AC4F9AE02.roa
File: AF6D4D44B73311EC8392922AC4F9AE02.roa (raw, json)
Hash identifier: 4oLyl9NCifHRKBU2NyGCAhBn5eVA7LF6waY1+/Z8kf0=
Subject key identifier: D5:B1:30:7D:EA:F6:6E:F2:89:42:10:D8:12:1E:0E:5E:D6:9B:55:D5
Certificate issuer: /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Certificate serial: 317D
Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/AF6D4D44B73311EC8392922AC4F9AE02.roa
Signing time: Sat 02 May 2026 16:18:38 +0000
ROA not before: Sat 02 May 2026 16:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4780
IP address blocks: 180.87.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:27:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12669 (0x317d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Validity
Not Before: May 2 16:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f623de-f49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3a:a4:9f:9d:2f:8f:ce:35:39:7c:52:d0:c1:
8c:d8:93:c4:35:22:4a:30:59:c8:02:66:de:a3:22:
8a:31:e5:80:79:de:12:a2:76:a9:ad:2c:9b:91:36:
12:73:90:1f:f8:2c:0e:b1:77:25:d8:d9:b0:53:0e:
65:fb:af:fa:da:0f:64:aa:b8:bb:61:dc:8b:29:2d:
29:52:9e:1d:a2:66:cf:9d:85:d5:7e:69:54:7b:3b:
9a:67:2d:6d:49:4f:5b:98:e0:fb:9b:13:18:fb:d1:
2c:05:63:dd:b7:49:72:d2:52:c5:75:36:13:a5:15:
5b:ac:5d:09:2a:fe:78:ce:7d:54:cb:01:a0:d6:c6:
e1:77:57:bc:94:ef:b9:09:8b:c2:f5:d1:2e:c8:35:
83:a9:03:51:72:35:20:16:bc:00:3d:d8:0e:e8:0a:
51:41:84:d4:72:cf:2a:23:6f:d9:99:2b:09:85:e7:
ad:dd:1f:ed:4c:29:72:20:15:bf:2b:cc:4d:48:21:
0c:72:cd:39:62:de:12:ff:ea:54:a4:32:19:76:25:
a6:ff:cf:c5:83:7c:15:6e:54:17:e1:43:20:83:a4:
11:7c:25:48:d2:de:1e:cd:67:1b:94:e5:6d:3e:66:
70:98:fd:da:07:6a:0d:ba:64:9f:2b:7e:4e:fb:a9:
fa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B1:30:7D:EA:F6:6E:F2:89:42:10:D8:12:1E:0E:5E:D6:9B:55:D5
X509v3 Authority Key Identifier:
keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/AF6D4D44B73311EC8392922AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
180.87.78.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:1e:8d:4a:14:7d:0d:02:7b:7b:df:8b:c3:dd:45:7f:8d:78:
03:a6:6e:d7:40:f7:33:ce:16:b8:3c:c7:4c:29:76:72:d3:c9:
33:b5:f6:e6:cc:73:e8:cd:50:77:77:f1:05:02:0a:fa:4a:63:
ba:a2:a2:4e:c1:77:65:08:cb:5a:96:61:66:fa:ef:49:37:8b:
3b:25:ef:f3:90:c3:6d:df:1e:e3:21:93:18:f1:5e:8a:fd:ba:
5b:bc:ab:99:a9:0d:1c:77:f7:5d:3d:d9:c4:e2:27:96:08:69:
83:eb:ff:aa:e4:29:63:47:b9:62:33:93:e4:7e:55:74:98:78:
83:e9:56:8b:e7:52:20:93:15:fe:b9:fc:95:12:e0:93:c7:4e:
f0:0f:1e:68:72:b8:88:12:7b:af:78:21:23:9f:a3:7d:c5:79:
ee:3b:dc:c7:91:60:ba:14:06:78:d0:af:56:65:06:92:b9:41:
77:81:c2:65:58:83:dc:4c:1c:1e:51:a9:7c:27:b2:9c:9a:a7:
cd:5a:05:92:8a:c6:54:76:b3:17:d8:5a:88:72:07:de:a7:c1:
d8:7a:4c:ac:af:8f:98:3d:f3:d2:3e:8b:31:4e:10:ae:86:9b:
df:68:1e:34:60:c9:15:3d:eb:6a:06:8d:e9:50:71:78:5b:bc:
34:ce:d4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:17:31 2026 by rpki-client