
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/CF7CE212796211F08A60430EC4F9AE02.roa
File: CF7CE212796211F08A60430EC4F9AE02.roa (raw, json)
Hash identifier: 8NUsjBgxRhNje9zApXvCK7u78zAIRo+GALt3u4/DFBc=
Subject key identifier: EA:BC:FC:6D:CE:BC:30:39:63:48:C5:0F:3D:7B:62:37:4F:AE:7F:42
Certificate issuer: /CN=A91A7169/serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
Certificate serial: 0289
Authority key identifier: E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/CF7CE212796211F08A60430EC4F9AE02.roa
Signing time: Thu 09 Jul 2026 06:32:04 +0000
ROA not before: Thu 09 Jul 2026 06:32:04 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 396982
IP address blocks: 2400:7aa0:2a01::/48 maxlen: 48
2400:7aa0:2a02::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl
rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:23:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 649 (0x289)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7169, serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
Validity
Not Before: Jul 9 06:32:04 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a4f4064-839e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f9:a8:8b:1b:38:02:f4:4a:c5:7c:85:29:46:
e4:6c:29:86:d2:d5:37:18:1b:03:03:6f:0a:63:ac:
36:dc:f5:27:99:c3:09:0c:23:28:95:ab:d8:6b:cd:
8b:f2:64:6d:72:0c:5a:f8:fb:e7:83:3d:e9:18:d7:
25:0f:fa:05:b5:5e:fd:70:ca:7b:83:49:5e:39:50:
f8:fc:d7:00:91:e9:2a:45:a4:47:34:39:db:26:d0:
61:c0:33:8f:7f:a3:3c:0c:d9:00:55:f9:f5:4d:3f:
27:0f:8b:d9:15:17:38:c5:50:bf:a1:bb:38:f7:96:
8b:9c:06:13:7f:3e:8d:09:93:6e:ca:95:c1:04:77:
9b:4b:8f:53:60:a0:08:8a:3c:7b:a0:50:b4:da:1e:
20:83:82:b3:98:87:3e:9b:d6:17:62:da:27:55:9e:
91:56:bf:0d:b9:91:c6:1b:72:c7:1e:7c:e7:39:aa:
f1:1d:5a:e6:fa:83:d7:e9:98:ee:04:92:57:e7:29:
d2:d8:44:2a:fb:83:09:d5:d8:2f:17:68:f6:06:73:
da:62:39:81:da:22:27:e8:72:ec:c5:70:c2:b0:57:
b0:f0:0c:72:a5:6b:f2:2e:85:7c:4e:c9:a9:65:f5:
e2:c0:06:d9:ab:88:b2:2e:a3:e1:ab:33:39:00:da:
b9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BC:FC:6D:CE:BC:30:39:63:48:C5:0F:3D:7B:62:37:4F:AE:7F:42
X509v3 Authority Key Identifier:
keyid:E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/CF7CE212796211F08A60430EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:7aa0:2a01::-2400:7aa0:2a02:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b7:a0:93:7b:70:53:0d:c0:2e:9c:99:05:a7:1a:ba:31:f2:5a:
5e:8c:cc:f4:39:8b:b8:c8:80:63:8f:49:eb:d4:5e:ea:6a:d0:
e3:20:af:59:f5:b9:39:ca:01:93:86:28:b5:77:49:3f:4c:a6:
03:82:4e:6c:e6:4e:13:cc:f0:40:9e:d9:b3:71:d7:60:3e:7f:
2b:67:0d:a1:94:d3:34:ff:28:81:ac:7e:ed:33:ca:ca:e0:ca:
a9:d4:b4:55:e4:0b:c9:8a:91:47:98:d1:2d:6c:7f:42:4f:c0:
6e:9e:1a:13:e0:0e:73:c8:4e:2d:3a:28:f4:47:a0:6f:73:8d:
31:40:81:0f:f8:3c:43:b3:8d:91:b9:0a:56:2e:a2:d4:b1:b6:
d6:2d:72:d8:b8:95:df:76:44:fc:9b:87:f9:c0:6d:20:48:e0:
45:45:be:ef:e4:53:a1:49:e1:b5:b3:7d:11:ec:c5:9b:9b:dc:
4e:f8:ca:c3:b9:00:91:a4:a7:7a:5e:64:21:cc:c1:27:32:76:
f9:58:56:4a:99:f0:30:87:16:01:f9:a5:ff:23:1e:1f:db:53:
6e:6d:6b:c7:f7:36:38:1e:e7:5a:e6:43:13:10:a6:c3:ab:ad:
d6:4b:93:d2:bb:75:6b:4e:0d:41:4c:7c:64:f9:33:da:dc:93:
30:48:81:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:41:31 2026 by rpki-client