
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A68C0/733A3762F0D511F08429E12B3B6F56BC/539136C6F0E511F09202A4D23F6F56BC.roa
File: 539136C6F0E511F09202A4D23F6F56BC.roa (raw, json)
Hash identifier: bv8hAii8IBBcjQIwrMf8GUZWf/VgsIf/dqtlfRtbnHg=
Subject key identifier: C6:0C:6D:03:6F:B2:52:B9:46:DB:C0:5D:8E:F5:FC:33:1B:50:86:B5
Certificate issuer: /CN=A91A68C0/serialNumber=EB1253D12C38FAB47EEDF25B6A641E03C2866F98
Certificate serial: 9F
Authority key identifier: EB:12:53:D1:2C:38:FA:B4:7E:ED:F2:5B:6A:64:1E:03:C2:86:6F:98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xJT0Sw4-rR-7fJbamQeA8KGb5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A68C0/733A3762F0D511F08429E12B3B6F56BC/539136C6F0E511F09202A4D23F6F56BC.roa
Signing time: Thu 05 Nov 2026 08:54:23 +0000
ROA not before: Thu 05 Nov 2026 08:54:23 +0000
ROA not after: Wed 01 Mar 2028 00:00:00 +0000
asID: 147028
IP address blocks: 2001:df6:47c0::/48 maxlen: 49
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A68C0/733A3762F0D511F08429E12B3B6F56BC/6xJT0Sw4-rR-7fJbamQeA8KGb5g.crl
rsync://rpki.apnic.net/member_repository/A91A68C0/733A3762F0D511F08429E12B3B6F56BC/6xJT0Sw4-rR-7fJbamQeA8KGb5g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xJT0Sw4-rR-7fJbamQeA8KGb5g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 07:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A68C0, serialNumber=EB1253D12C38FAB47EEDF25B6A641E03C2866F98
Validity
Not Before: Nov 5 08:54:23 2026 GMT
Not After : Mar 1 00:00:00 2028 GMT
Subject: CN=6aec443f-3370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c1:5c:69:c6:5d:be:1b:31:52:8c:df:b1:9c:
24:43:57:d0:47:9e:50:94:95:11:a4:57:5d:ad:05:
f0:c3:f6:15:e2:a9:63:5c:e0:2f:ed:ea:e4:d1:7c:
1f:b8:a7:55:86:fd:33:8e:95:20:81:a9:55:bb:84:
d9:33:fc:27:a0:bb:83:75:c6:b6:f7:d4:b7:12:0f:
2e:9a:6c:6a:50:bf:c6:65:b2:a8:1a:13:46:b2:b4:
21:f3:7e:c8:e3:73:85:0a:da:ee:ce:89:7f:66:48:
f1:4c:82:67:99:1f:61:0f:ff:c5:70:01:1a:8d:7c:
be:a5:b7:b7:d9:5c:3c:2b:7b:5f:6d:fb:40:8c:3c:
75:18:0b:dd:f3:88:38:d0:f4:ea:63:16:cc:b5:66:
b8:cb:0d:02:61:41:09:5c:dd:6a:50:02:6e:26:9a:
13:8f:30:0e:18:d2:e2:a2:79:96:af:e9:fb:f1:78:
7c:40:42:c6:c2:df:b5:43:4f:f0:d6:e2:d6:60:54:
66:3e:fd:c9:ed:3d:06:64:d1:d0:dc:a7:06:e5:c1:
99:52:27:28:75:71:d5:d9:c9:f2:87:79:e4:60:b8:
86:8a:73:c8:d7:90:76:b3:77:d7:3f:a2:22:c0:86:
ed:07:1f:97:1b:88:3a:1f:60:22:0a:a5:85:1b:5f:
82:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0C:6D:03:6F:B2:52:B9:46:DB:C0:5D:8E:F5:FC:33:1B:50:86:B5
X509v3 Authority Key Identifier:
keyid:EB:12:53:D1:2C:38:FA:B4:7E:ED:F2:5B:6A:64:1E:03:C2:86:6F:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A68C0/733A3762F0D511F08429E12B3B6F56BC/6xJT0Sw4-rR-7fJbamQeA8KGb5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xJT0Sw4-rR-7fJbamQeA8KGb5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A68C0/733A3762F0D511F08429E12B3B6F56BC/539136C6F0E511F09202A4D23F6F56BC.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:47c0::/48
Signature Algorithm: sha256WithRSAEncryption
8e:03:bc:51:fe:ff:b3:00:e8:74:2d:ea:4f:a0:95:71:04:1e:
88:cf:6f:78:b3:6d:b1:71:20:3e:13:3d:8b:84:88:01:c3:b3:
36:e2:8c:ff:22:be:18:ed:0f:46:6b:55:17:c4:c8:e4:45:9b:
40:21:9f:f8:ef:46:f2:8f:7a:cc:89:00:8c:c4:ad:a0:11:34:
61:a9:68:d2:87:f0:29:95:e2:62:f1:40:bd:10:e2:3d:c9:9b:
5e:b9:1b:c3:b3:e6:b6:52:6f:78:e9:20:ef:20:47:f9:d2:3b:
e1:b5:fe:72:ef:e5:59:b0:c1:fd:c4:6e:5d:ff:a0:f7:ca:5f:
e5:7a:66:85:dd:36:ef:c7:0c:21:ac:3d:7f:39:26:42:65:7f:
e6:f5:b2:8e:55:d2:49:d8:f4:80:f2:4b:17:19:e9:40:f0:45:
4d:81:e6:ed:29:01:b0:53:04:20:7e:c8:50:43:75:8d:b7:6e:
9d:c4:5f:82:0a:9b:f2:79:68:fc:9a:be:e3:60:18:d6:76:3c:
2a:05:3d:f9:3d:aa:d1:df:30:17:53:cd:56:3f:7e:0c:5a:68:
07:24:0d:ce:49:e0:2d:63:07:f6:fb:cc:5c:59:6c:96:c1:11:
f7:73:8b:68:57:2e:bd:0e:2e:ce:cb:c9:d6:70:b7:3f:57:15:
c8:f0:2b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:19:42 2026 by rpki-client