
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/8AAF803A1C8A11EABAA73A62C4F9AE02.roa
File: 8AAF803A1C8A11EABAA73A62C4F9AE02.roa (raw, json)
Hash identifier: 9brcnHryI3Y4I0qze8pkKOj7kUBQ8kANoxfoueYgUMM=
Subject key identifier: 3E:48:BE:B4:C8:43:38:AA:60:C9:3F:34:DD:04:53:24:CF:9B:94:24
Certificate issuer: /CN=A91A865F/serialNumber=161E022AE8975112EE7589D49B31660CA90A0410
Certificate serial: 0CC5
Authority key identifier: 16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/8AAF803A1C8A11EABAA73A62C4F9AE02.roa
Signing time: Wed 26 Aug 2026 18:37:07 +0000
ROA not before: Wed 26 Aug 2026 18:37:07 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 131270
IP address blocks: 2403:4e80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl
rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 18:45:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3269 (0xcc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A865F, serialNumber=161E022AE8975112EE7589D49B31660CA90A0410
Validity
Not Before: Aug 26 18:37:07 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a8f3253-e00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b4:3e:f5:43:b5:95:be:df:ab:54:ac:af:a2:
e4:b2:2d:3a:59:51:0a:6a:59:0b:26:56:fe:f1:50:
11:8d:23:33:c5:49:69:2d:f5:0d:ed:a6:16:92:7a:
dc:ae:b7:f5:ee:f7:92:66:ef:2d:5a:35:57:32:ab:
38:ac:5a:39:bc:49:1a:7a:3d:79:64:28:e5:7d:c8:
16:69:bb:b1:16:33:3b:cc:be:65:aa:f1:c0:d6:18:
e8:c8:71:23:9c:51:27:43:ef:c1:dd:cc:d2:58:a5:
ce:66:9e:5b:db:94:32:5b:43:ff:62:99:79:ea:7c:
46:38:e9:63:46:5e:60:20:79:12:fa:07:df:65:eb:
32:ff:d6:c4:b5:c5:b4:bd:05:d6:78:1c:62:72:ea:
b0:c4:d3:01:6c:87:5e:60:76:b3:5f:90:30:8f:ef:
29:4b:89:ca:8a:61:ce:76:ee:1e:6e:61:9f:0a:6e:
d7:1c:7d:35:50:0c:90:c7:34:90:9a:42:14:2a:f2:
50:50:a6:a7:48:b9:c4:22:09:4b:1e:28:da:87:72:
8c:fa:d6:60:3c:5d:41:29:5e:b3:06:83:22:06:bf:
21:77:ba:58:e3:73:ac:7e:51:13:5d:aa:02:f0:67:
a3:87:e3:98:7c:58:5d:87:1a:ec:2f:35:2a:a6:2c:
d0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:48:BE:B4:C8:43:38:AA:60:C9:3F:34:DD:04:53:24:CF:9B:94:24
X509v3 Authority Key Identifier:
keyid:16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/8AAF803A1C8A11EABAA73A62C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2403:4e80::/32
Signature Algorithm: sha256WithRSAEncryption
4f:4f:65:2b:c5:f4:c8:ad:64:91:81:ac:5f:d7:ca:54:9d:bf:
db:bb:7c:16:4f:43:8a:15:d1:b5:70:f4:bd:61:f5:30:d7:f4:
0c:cf:39:55:32:61:04:cc:18:38:ba:27:3f:fc:34:95:62:3c:
bf:92:d9:28:1e:31:3d:30:98:38:dd:85:2b:3a:53:d0:32:ea:
f3:ff:6c:00:93:3c:cd:32:63:23:bc:57:fb:f6:82:4d:a7:ac:
ad:8b:80:73:e7:6c:1b:05:fb:6a:5c:2a:96:15:55:be:1e:42:
77:32:be:c6:68:02:a9:ea:3b:75:3c:1c:08:14:c2:93:4a:e9:
d8:a5:a3:c7:ee:12:4b:e5:60:cb:ae:28:95:0d:ec:aa:72:a1:
11:8d:04:a9:f2:7f:41:71:9f:cf:85:c8:9b:7e:86:92:d8:ab:
7b:fd:bb:bd:b2:ca:27:9d:5b:1c:f0:cd:07:0b:ad:05:b3:c9:
c4:83:66:88:57:71:bd:ce:c8:18:26:f7:6f:14:51:cc:78:7a:
cf:cd:ab:fd:60:09:b0:d5:15:9d:f5:59:06:28:59:b2:e9:8d:
b4:cd:75:ca:18:d8:f4:41:7e:bd:bd:1e:51:27:84:b2:75:5e:
31:11:0b:74:ea:5e:83:5e:61:2c:ab:2f:18:14:e8:95:f4:46:
ef:fe:3d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 22:40:52 2026 by rpki-client