
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/808D8B4AB40211F0AD5B7354C4F9AE02.roa
File: 808D8B4AB40211F0AD5B7354C4F9AE02.roa (raw, json)
Hash identifier: K1UTUb7anKdBiS5H6cyi3Qvilb7AAyufcdHnMSB1SCA=
Subject key identifier: E0:CA:A6:E4:AD:E9:E8:E5:E7:10:58:5A:67:A8:C7:14:1B:04:86:C4
Certificate issuer: /CN=A91A5BCD/serialNumber=859D184F41C34898B7298C991075CCCF51679AF1
Certificate serial: 0AB4
Authority key identifier: 85:9D:18:4F:41:C3:48:98:B7:29:8C:99:10:75:CC:CF:51:67:9A:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/808D8B4AB40211F0AD5B7354C4F9AE02.roa
Signing time: Sun 10 May 2026 20:23:59 +0000
ROA not before: Sun 10 May 2026 20:23:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138471
IP address blocks: 2001:df3:5c80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.crl
rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:34:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2740 (0xab4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5BCD, serialNumber=859D184F41C34898B7298C991075CCCF51679AF1
Validity
Not Before: May 10 20:23:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a00e95f-9ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9e:a7:c4:4b:05:78:61:21:d1:8a:ca:cd:dd:
33:20:a5:22:f6:ca:32:a8:ee:ce:b7:53:44:96:32:
44:91:b2:2f:05:ca:f0:9d:1f:6b:46:0b:2f:de:1e:
b9:3c:d6:a5:1e:87:e4:e5:69:45:3b:63:f8:64:4f:
e4:83:8d:91:60:bf:95:ff:86:6b:8d:14:02:1a:b9:
18:cc:0d:82:03:f2:2e:39:06:58:0e:9f:7b:09:93:
2b:b0:21:05:3c:e8:61:9f:e3:aa:28:45:ed:e7:01:
06:99:b8:00:42:83:6a:a4:89:a5:9a:3b:b4:a9:96:
6d:88:44:ff:dd:fa:e5:8e:fb:3c:a1:2f:fc:fe:28:
98:ce:97:37:a1:c3:1f:fe:f5:cc:17:4c:95:b5:17:
0c:8e:7b:eb:5a:2d:4b:8c:66:65:b4:88:52:de:59:
36:24:2d:b2:40:b2:5a:b6:75:1e:44:5a:66:8e:98:
ac:3d:3d:78:a5:7e:e3:c7:f5:bd:ad:f5:65:a6:53:
b0:9d:28:29:75:77:1a:69:21:74:be:07:8f:57:f6:
73:30:20:ce:09:ae:b7:fa:53:32:c2:94:d2:ab:f9:
a7:48:03:5d:c5:5f:63:87:06:ad:fc:3e:13:80:44:
b3:62:a1:ff:fb:87:52:c8:81:e7:c0:0f:ba:f6:4d:
3e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CA:A6:E4:AD:E9:E8:E5:E7:10:58:5A:67:A8:C7:14:1B:04:86:C4
X509v3 Authority Key Identifier:
keyid:85:9D:18:4F:41:C3:48:98:B7:29:8C:99:10:75:CC:CF:51:67:9A:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/808D8B4AB40211F0AD5B7354C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:5c80::/48
Signature Algorithm: sha256WithRSAEncryption
6e:21:3f:ed:bb:b2:69:d2:02:98:f6:d9:fa:a6:73:08:6d:4f:
bd:cf:23:4a:e1:3d:f8:b2:c7:3e:ec:56:eb:a3:9a:d4:fe:ba:
76:46:4e:ba:16:fc:f0:ef:37:6a:c0:cc:fb:a7:d3:7d:f4:19:
e3:21:c0:82:7c:37:7c:d3:88:ef:3f:d0:f8:b6:56:c2:05:bb:
4b:71:9a:b7:d7:2a:26:43:49:47:28:cf:21:6a:ae:12:0f:1d:
6d:26:49:c1:d5:4d:5b:3f:ed:d7:17:e2:a6:1d:be:00:3e:38:
49:ec:e7:e3:f6:ae:5a:49:75:20:e7:41:8e:ea:46:79:82:45:
62:12:1e:76:08:75:8c:ff:71:d6:85:bf:cb:af:42:b9:f2:30:
3a:1a:51:12:d3:b1:66:f5:48:13:9e:1d:6a:18:0d:6b:07:99:
f1:68:a5:35:57:68:b7:fc:a5:70:4a:57:38:59:07:b7:86:97:
ee:b6:d0:4b:74:24:4f:78:29:9d:32:d4:03:40:88:3f:c8:b9:
f1:cd:63:b3:e7:1b:59:8f:b3:2e:2f:0e:ea:e4:00:26:fe:68:
48:46:a0:12:a2:5d:fc:ad:8c:03:ac:88:38:74:4c:7d:1b:44:
da:16:17:12:fe:6d:52:b9:03:25:da:57:a2:d5:72:d7:10:1d:
08:eb:0c:ab
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICCrQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTVCQ0QxMTAvBgNVBAUTKDg1OUQxODRGNDFDMzQ4OThCNzI5OEM5OTEwNzVDQ0NG
NTE2NzlBRjEwHhcNMjYwNTEwMjAyMzU5WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTAwZTk1Zi05YWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAup6nxEsFeGEh0YrKzd0zIKUi9soyqO7Ot1NEljJEkbIvBcrwnR9rRgsv3h65
PNalHofk5WlFO2P4ZE/kg42RYL+V/4ZrjRQCGrkYzA2CA/IuOQZYDp97CZMrsCEF
POhhn+OqKEXt5wEGmbgAQoNqpImlmju0qZZtiET/3frljvs8oS/8/iiYzpc3ocMf
/vXMF0yVtRcMjnvrWi1LjGZltIhS3lk2JC2yQLJatnUeRFpmjpisPT14pX7jx/W9
rfVlplOwnSgpdXcaaSF0vgePV/ZzMCDOCa63+lMywpTSq/mnSANdxV9jhwat/D4T
gESzYqH/+4dSyIHnwA+69k0+dQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFODKpuSt
6ejl5xBYWmeoxxQbBIbEMB8GA1UdIwQYMBaAFIWdGE9Bw0iYtymMmRB1zM9RZ5rx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUJDRC82MUQwQzQ4NjdB
M0ExMUVBQkY4QjU4MjZDNEY5QUUwMi9oWjBZVDBIRFNKaTNLWXlaRUhYTXoxRm5t
dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2haMFlUMEhEU0ppM0tZeVpFSFhNejFGbm12RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTVCQ0QvNjFEMEM0ODY3QTNBMTFFQUJGOEI1ODI2QzRGOUFFMDIvODA4RDhCNEFC
NDAyMTFGMEFENUI3MzU0QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN81yAMA0GCSqGSIb3DQEBCwUAA4IBAQBuIT/tu7Jp0gKY9tn6
pnMIbU+9zyNK4T34ssc+7Fbro5rU/rp2Rk66Fvzw7zdqwMz7p9N99BnjIcCCfDd8
04jvP9D4tlbCBbtLcZq31yomQ0lHKM8haq4SDx1tJknB1U1bP+3XF+KmHb4APjhJ
7Ofj9q5aSXUg50GO6kZ5gkViEh52CHWM/3HWhb/Lr0K58jA6GlES07Fm9UgTnh1q
GA1rB5nxaKU1V2i3/KVwSlc4WQe3hpfuttBLdCRPeCmdMtQDQIg/yLnxzWOz5xtZ
j7MuLw7q5AAm/mhIRqASol38rYwDrIg4dEx9G0TaFhcS/m1SuQMl2lei1XLXEB0I
6wyr
-----END CERTIFICATE-----
Generated at Wed May 13 13:39:15 2026 by rpki-client