
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/1FAB542C7B9111F197DD75D86DA30FBC.roa
File: 1FAB542C7B9111F197DD75D86DA30FBC.roa (raw, json)
Hash identifier: 8nCW0K+J+Bsvg1/2PwSsppDlZOJWCuRAsgjP5bgTE1c=
Subject key identifier: 17:3E:5B:65:D2:F9:80:27:08:1D:D5:F3:DF:2A:85:B2:73:D2:1D:90
Certificate issuer: /CN=A91A4DBF/serialNumber=0CA3162124EE64629643FF29EB311072D9128533
Certificate serial: BE
Authority key identifier: 0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/1FAB542C7B9111F197DD75D86DA30FBC.roa
Signing time: Thu 09 Jul 2026 12:24:26 +0000
ROA not before: Thu 09 Jul 2026 12:24:26 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 154173
IP address blocks: 2001:df6:90c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl
rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4DBF, serialNumber=0CA3162124EE64629643FF29EB311072D9128533
Validity
Not Before: Jul 9 12:24:26 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a4f92fa-150e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a9:1a:ec:e7:a1:3e:9d:4f:38:6e:b8:f3:f7:
42:49:38:7a:8c:ec:d2:17:e0:67:17:c5:c1:d9:8e:
57:98:34:f8:15:95:13:60:c7:8b:41:61:10:98:fd:
70:e3:3a:4f:bd:7d:6d:7d:60:55:00:45:1e:8f:ad:
74:6c:ec:25:e2:36:60:15:1d:6d:49:9a:30:06:59:
8c:da:7c:6a:03:47:50:6e:66:5b:72:96:d5:0b:2b:
10:c9:24:61:1a:57:92:df:ff:3f:e5:5b:79:78:23:
be:3a:9a:d0:70:3f:3d:e3:c1:62:17:f2:da:34:f9:
d1:76:77:1c:72:f0:e0:b3:df:2a:35:fa:d2:c3:f7:
6a:b3:8a:b8:0e:47:e8:ba:24:c9:72:6a:38:a2:cd:
30:43:1f:a4:f7:dd:15:a3:36:d1:96:9b:5a:08:4a:
bc:3c:9d:51:8e:f1:d0:e9:42:3e:60:0d:d9:0e:1f:
32:c6:99:03:d2:ec:8c:57:9f:44:c0:b9:13:ff:0c:
e3:5d:49:52:f0:a1:35:af:98:24:89:cc:54:3c:01:
50:13:6a:cb:f8:a2:3d:10:aa:90:8d:72:9e:b6:53:
c0:97:06:fe:a6:50:d2:60:93:27:8b:28:62:90:bf:
d9:a7:c1:4e:b1:cc:4a:a2:82:e9:16:fc:7b:a6:24:
de:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3E:5B:65:D2:F9:80:27:08:1D:D5:F3:DF:2A:85:B2:73:D2:1D:90
X509v3 Authority Key Identifier:
keyid:0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/1FAB542C7B9111F197DD75D86DA30FBC.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:90c0::/48
Signature Algorithm: sha256WithRSAEncryption
a7:8a:ac:40:92:37:73:61:87:b9:ed:7a:66:a4:38:c1:80:c1:
c5:1a:c2:50:1d:41:e9:f4:18:19:b0:33:55:cd:56:87:eb:c6:
fe:81:c3:3f:02:c5:25:7f:ac:13:25:57:37:f5:12:16:bd:de:
f8:79:55:8b:3f:4a:a2:6e:d9:35:65:e6:33:06:c7:87:3a:df:
46:e1:f1:c7:00:da:8d:2d:45:81:e1:d4:d6:d8:83:13:67:b6:
a7:2d:ff:6d:7d:d1:02:1a:42:ee:1b:32:27:d4:aa:4d:c4:02:
cd:44:95:8a:19:f0:53:13:36:9e:99:04:33:a7:93:50:f2:b7:
1f:7e:5e:72:ef:c2:d3:24:8e:77:13:03:ee:20:2b:80:6c:c9:
01:76:fd:b8:4d:46:77:3e:aa:07:0f:7a:61:3c:5d:94:c3:dd:
e5:fd:dc:00:b0:42:1b:f4:3f:87:03:28:cc:62:0e:db:95:c4:
10:11:a1:92:fe:e4:55:80:f6:8d:f2:09:78:64:67:f3:47:01:
9d:82:5b:3e:de:f6:92:d0:39:dc:67:42:b2:14:f0:7b:4e:27:
51:c0:bb:8b:d9:4e:4a:67:1f:e8:fe:2d:37:1e:69:ec:c4:87:
af:03:a6:c2:6e:a4:c7:6c:87:33:fa:70:a4:1e:4d:26:8b:17:
ab:90:d1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:53:43 2026 by rpki-client