
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/6D3C9D30195F11F08408FA45C4F9AE02.roa
File: 6D3C9D30195F11F08408FA45C4F9AE02.roa (raw, json)
Hash identifier: 5sXZmYnyKRamMIM1TpFMCcTJVL+lG30Xxz2REpS04A4=
Subject key identifier: A5:83:FF:FB:87:55:A4:64:DB:B0:93:EC:BD:F4:FF:A0:04:DB:D9:BD
Certificate issuer: /CN=A91A7169/serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
Certificate serial: 0288
Authority key identifier: E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/6D3C9D30195F11F08408FA45C4F9AE02.roa
Signing time: Thu 09 Jul 2026 06:32:02 +0000
ROA not before: Thu 09 Jul 2026 06:32:02 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 16509
IP address blocks: 2400:7aa0:2701::/48 maxlen: 48
2400:7aa0:2702::/48 maxlen: 48
2400:7aa0:2703::/48 maxlen: 48
2400:7aa0:2704::/48 maxlen: 48
2400:7aa0:2705::/48 maxlen: 48
2400:7aa0:2706::/48 maxlen: 48
2400:7aa0:2707::/48 maxlen: 48
2400:7aa0:2708::/48 maxlen: 48
2400:7aa0:2709::/48 maxlen: 48
2400:7aa0:270a::/48 maxlen: 48
2400:7aa0:270b::/48 maxlen: 48
2400:7aa0:270c::/48 maxlen: 48
2400:7aa0:270d::/48 maxlen: 48
2400:7aa0:270e::/48 maxlen: 48
2400:7aa0:270f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl
rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 08:42:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 648 (0x288)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7169, serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
Validity
Not Before: Jul 9 06:32:02 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a4f4062-1059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:85:aa:b6:e6:76:f2:c5:e9:a0:e4:2a:0f:59:
21:71:f8:bf:be:60:b5:97:4b:57:99:3b:93:01:af:
02:b4:c8:61:14:4c:d9:43:6f:7a:93:11:e5:9f:76:
f1:fd:52:7c:df:16:18:33:d9:d5:24:ac:30:f9:3d:
27:39:01:b2:cb:be:75:e9:41:9d:7b:38:b3:49:d6:
44:5a:90:b7:66:09:22:a3:c2:68:b1:78:31:63:d9:
aa:15:a9:9e:3e:d6:10:b9:c5:09:02:c3:68:42:78:
f1:b1:97:14:48:2d:6a:40:52:04:76:0a:29:34:0f:
29:39:49:65:c3:70:68:39:6f:d9:89:9c:75:40:84:
f9:1c:8e:5f:ce:73:4f:10:76:32:15:f5:37:c2:9d:
a9:d3:43:b1:02:2b:4e:d1:c3:18:1a:03:6f:a7:b1:
ba:f2:27:8f:bf:41:2b:b2:3d:ef:9b:97:62:75:89:
ca:08:f2:f7:03:5d:43:90:af:5a:90:df:57:bf:0a:
4b:88:9e:7c:99:65:91:bd:ba:87:ac:76:6e:9b:25:
d6:6f:a5:65:65:56:d7:bb:9c:36:c4:01:65:48:bf:
17:9f:72:07:0f:ab:9f:44:5a:dd:aa:75:2a:65:e0:
41:e3:87:fe:f3:2e:87:88:de:e8:ae:6f:78:54:ae:
ab:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:83:FF:FB:87:55:A4:64:DB:B0:93:EC:BD:F4:FF:A0:04:DB:D9:BD
X509v3 Authority Key Identifier:
keyid:E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/6D3C9D30195F11F08408FA45C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:7aa0:2701::-2400:7aa0:270f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0e:2d:04:48:27:47:bc:8d:fd:11:05:22:b7:f4:c5:2c:b4:98:
07:f7:ad:c8:c6:0c:71:3b:c8:1f:04:15:2a:60:2c:73:0e:25:
20:6d:ad:7e:fb:39:7a:4c:69:3c:df:32:7d:4e:2a:94:91:fb:
09:b6:e0:9b:e0:c7:33:82:6e:31:45:9c:e7:85:6e:aa:89:27:
bb:f0:0e:44:91:71:8f:35:6f:ee:ff:da:a9:fe:3e:b5:d5:6d:
5f:b3:db:f1:38:24:12:fa:dc:c2:af:22:bc:e4:03:db:a0:76:
89:c2:ac:9b:6e:69:9f:29:6c:b6:26:99:be:f0:5f:e6:fe:6e:
66:11:f3:60:6c:c3:34:6b:12:b0:d7:f7:7d:7e:d7:71:e4:a1:
33:80:a6:a0:5b:98:5f:34:1a:69:dc:54:5d:2b:b0:7b:9e:d4:
34:7b:2e:df:eb:9e:73:37:b2:c6:9b:f5:39:0b:fd:3f:a2:98:
8c:ea:4e:08:f0:a1:34:a2:6e:97:81:a8:ff:ce:bf:bf:02:10:
e4:ea:1b:1b:1b:49:c1:ef:8a:92:94:77:b2:e7:f6:db:e6:6a:
8e:9a:95:c3:41:88:0a:21:94:ae:6e:be:e1:2a:f2:94:2c:80:
77:07:93:d5:d3:e8:1b:a3:4f:1f:83:96:8d:f3:04:d2:70:fb:
86:4b:79:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:45:42 2026 by rpki-client