
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/5E4EF73E409011F0986B1F68C4F9AE02.roa
File: 5E4EF73E409011F0986B1F68C4F9AE02.roa (raw, json)
Hash identifier: 1WHv+TkV2LE9j58jQN6HoRvbl9s/+GT559gmESgjHR4=
Subject key identifier: D9:1F:CF:9D:81:17:64:05:A5:9B:FC:CB:15:E7:CF:E5:6D:DF:A9:53
Certificate issuer: /CN=A91A7B36/serialNumber=34F0F8CD87B88C4F520E46FB95D2DB84FA043362
Certificate serial: D3
Authority key identifier: 34:F0:F8:CD:87:B8:8C:4F:52:0E:46:FB:95:D2:DB:84:FA:04:33:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/5E4EF73E409011F0986B1F68C4F9AE02.roa
Signing time: Tue 07 Jul 2026 08:34:02 +0000
ROA not before: Tue 07 Jul 2026 08:34:02 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 153908
IP address blocks: 2402:ce0::/32 maxlen: 32
2402:ce0::/36 maxlen: 36
2402:ce0:1000::/36 maxlen: 36
2402:ce0:2000::/36 maxlen: 36
2402:ce0:3000::/36 maxlen: 36
2402:ce0:4000::/36 maxlen: 36
2402:ce0:5000::/36 maxlen: 36
2402:ce0:6000::/36 maxlen: 36
2402:ce0:7000::/36 maxlen: 36
2402:ce0:8000::/36 maxlen: 36
2402:ce0:9000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.crl
rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7B36, serialNumber=34F0F8CD87B88C4F520E46FB95D2DB84FA043362
Validity
Not Before: Jul 7 08:34:02 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a4cb9fa-829f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b7:0e:b8:12:9f:95:5f:31:e8:80:ea:23:08:
da:40:3f:f3:01:6c:e0:39:66:4e:6d:3a:a5:c1:d8:
b7:62:79:8a:f6:42:41:df:42:ed:5a:ba:97:3e:4b:
e3:1a:79:c8:7f:22:e3:7c:8b:61:cf:1c:aa:1f:5e:
b9:ec:3f:63:62:80:56:d4:f7:d8:36:fb:75:1e:00:
41:dc:d8:35:4e:07:7e:03:20:ab:63:28:62:13:55:
a1:32:77:ac:95:a7:c7:2b:86:8e:2a:6d:77:55:79:
88:11:74:1f:f7:66:58:57:81:ae:6b:78:82:2d:8e:
1f:c9:7d:ff:44:43:e9:fa:41:c1:10:f7:15:48:b5:
d0:08:ad:67:27:53:ad:f6:11:b7:b8:34:be:b6:fe:
df:36:9d:54:22:60:6c:8f:65:d3:06:11:54:7d:a5:
c8:6e:ab:6d:02:bf:cb:98:c4:21:63:75:d8:a2:e5:
6a:78:de:27:0e:f7:27:8c:9c:7c:cf:06:ea:89:64:
05:c6:74:f3:6b:bf:65:17:12:e7:79:b1:e6:81:82:
f9:1c:ac:f8:87:79:7e:bd:7a:34:de:31:d7:e7:9e:
a6:46:07:1d:17:06:7d:44:a8:6d:4c:b2:12:ae:8a:
b7:f8:02:0a:64:68:9e:9c:2e:24:5a:93:b3:eb:86:
80:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1F:CF:9D:81:17:64:05:A5:9B:FC:CB:15:E7:CF:E5:6D:DF:A9:53
X509v3 Authority Key Identifier:
keyid:34:F0:F8:CD:87:B8:8C:4F:52:0E:46:FB:95:D2:DB:84:FA:04:33:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/5E4EF73E409011F0986B1F68C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:ce0::/32
Signature Algorithm: sha256WithRSAEncryption
78:1c:bf:b7:fa:7e:71:a6:6a:9a:be:11:e3:c5:63:7c:3e:ca:
07:65:73:c8:2b:11:4f:85:10:c9:2c:84:b2:bb:47:bd:7e:79:
37:38:a7:21:4a:10:6a:c7:5e:be:80:6b:3e:07:bc:76:dc:d5:
35:a8:05:e2:8a:a4:cd:39:ea:ab:17:c1:52:ab:34:2a:d6:cf:
8a:3b:85:7d:d0:fa:ca:2a:3c:c3:6a:a2:56:bd:b8:2a:0b:93:
f1:dc:8a:d2:33:a8:ae:4e:fb:99:9c:49:e2:ef:52:d5:f6:30:
05:45:98:82:17:92:ab:f4:13:91:ad:f2:72:5c:ae:c7:5b:66:
97:a6:d7:09:71:f2:5c:04:be:b8:1d:a1:11:86:b9:c2:48:36:
4c:29:ef:39:0e:a3:a4:ff:40:79:ff:89:1b:7e:7d:f7:49:a5:
39:d7:83:8f:cb:30:5e:68:67:49:eb:3b:66:b0:db:c3:04:44:
ab:a6:94:c8:21:09:bb:c0:f1:5d:4f:00:9a:fb:96:20:2f:c7:
54:ae:98:57:e4:37:49:95:e8:b8:d4:13:cc:fb:c2:18:58:55:
32:82:0c:7e:4c:0d:96:a2:b8:f7:97:73:f2:b6:bb:be:0b:06:
c6:04:55:3a:7d:e1:3f:5a:c0:61:44:ab:6a:99:44:85:0e:a9:
a7:16:eb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:39:48 2026 by rpki-client