
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/ABC3DCD0DE4D11F1A1E793670566CEF9.roa
File: ABC3DCD0DE4D11F1A1E793670566CEF9.roa (raw, json)
Hash identifier: TB5/LIly9DVwXlTzlYMAKP6cB/Kq062C8yIoudPiouE=
Subject key identifier: A9:24:C3:5E:7E:69:6B:DE:32:91:93:59:C2:C9:13:C0:3E:06:A1:45
Certificate issuer: /CN=A91AC70D/serialNumber=1D144CE260195E8CB35F8F288731E2EA08800661
Certificate serial: 40
Authority key identifier: 1D:14:4C:E2:60:19:5E:8C:B3:5F:8F:28:87:31:E2:EA:08:80:06:61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRRM4mAZXoyzX48ohzHi6giABmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/ABC3DCD0DE4D11F1A1E793670566CEF9.roa
Signing time: Thu 12 Nov 2026 04:01:00 +0000
ROA not before: Thu 12 Nov 2026 04:01:00 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 24429
IP address blocks: 2404:8d02:28c8::/48 maxlen: 48
2404:8d02:4881::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/HRRM4mAZXoyzX48ohzHi6giABmE.crl
rsync://rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/HRRM4mAZXoyzX48ohzHi6giABmE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRRM4mAZXoyzX48ohzHi6giABmE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 09:12:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC70D, serialNumber=1D144CE260195E8CB35F8F288731E2EA08800661
Validity
Not Before: Nov 12 04:01:00 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6af539fc-8ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:de:de:34:83:68:3d:87:94:d0:2e:82:58:
85:cc:a3:82:0f:f2:f0:5a:39:f7:87:1e:cf:9f:96:
e7:c8:b3:68:df:81:d4:33:bb:5e:9b:b2:72:19:37:
af:a4:94:00:9c:c2:6e:af:fb:22:19:fe:1f:26:f0:
60:f9:0e:4f:93:23:43:88:c8:77:ea:f8:9e:f4:01:
71:e3:23:ac:35:7f:96:a8:78:36:72:fd:1d:71:f7:
1e:61:71:62:fa:8f:26:07:ad:ca:d0:76:61:13:29:
d2:57:ef:60:e3:5c:db:84:a0:4b:6a:d9:2f:c3:9b:
65:3d:b1:f3:c1:36:27:3d:c0:09:9f:cf:a0:81:07:
57:43:88:09:03:3e:59:34:d1:b9:e8:1a:50:a8:fd:
98:61:c1:4b:65:9e:29:ff:a7:0c:3b:fc:83:3b:8e:
83:a6:c0:39:74:0b:36:ac:90:fe:52:4c:70:5f:91:
54:98:0c:d3:0a:c0:ba:fa:fe:56:ad:57:43:83:27:
66:4b:fb:12:74:60:8f:ab:5a:e1:bb:9e:dc:34:b5:
15:e6:7e:e1:29:4b:f5:6b:f1:4d:24:7e:0e:4d:27:
dc:ed:b0:0a:d2:40:1d:76:90:7d:fc:26:c1:65:b1:
2f:93:fb:6a:ed:85:b0:81:3d:21:48:81:a4:8a:a2:
b2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:24:C3:5E:7E:69:6B:DE:32:91:93:59:C2:C9:13:C0:3E:06:A1:45
X509v3 Authority Key Identifier:
keyid:1D:14:4C:E2:60:19:5E:8C:B3:5F:8F:28:87:31:E2:EA:08:80:06:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/HRRM4mAZXoyzX48ohzHi6giABmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRRM4mAZXoyzX48ohzHi6giABmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/ABC3DCD0DE4D11F1A1E793670566CEF9.roa
sbgp-ipAddrBlock: critical
IPv6:
2404:8d02:28c8::/48
2404:8d02:4881::/48
Signature Algorithm: sha256WithRSAEncryption
1f:6b:40:7b:f9:9b:bf:1a:1c:e0:19:0d:70:a1:fa:14:80:1b:
11:a8:f2:9d:4c:ab:49:90:35:42:66:04:10:73:f5:e1:07:2e:
3d:73:fe:58:1c:27:1b:7d:02:b5:e4:26:4f:23:3f:58:2e:b5:
ac:16:0d:2b:f5:54:2a:7a:82:7e:c5:a4:a2:4d:c9:ff:de:61:
6b:ef:4a:ba:fc:35:99:ac:ed:de:59:5c:49:b7:e8:a7:7d:fb:
52:40:09:3d:bd:89:40:60:b5:c5:28:db:79:89:f0:82:94:8a:
6a:ea:85:cb:a9:a5:54:84:cd:a6:33:ab:da:3f:3b:ef:1b:17:
4c:89:29:d3:bd:57:a8:88:a6:f2:df:aa:e1:2b:34:44:c0:69:
d4:17:73:00:06:a2:10:a6:c4:e2:a9:f0:36:d0:aa:c2:87:39:
a3:8d:cd:fb:b7:ee:d0:5d:57:45:75:f5:9d:7d:6d:4d:65:53:
21:86:e2:0d:f9:98:e5:d5:38:f9:1f:cf:f1:d1:d7:b3:a8:e1:
d4:3c:a3:0b:cf:5a:20:1a:e6:89:17:49:cf:f1:ff:bb:6a:06:
d0:03:73:c8:8d:55:8e:46:42:ca:40:a8:77:61:72:27:12:c1:
af:30:07:3c:b5:7f:d1:b3:fe:e0:11:63:f3:5a:fd:12:18:03:
29:4e:2a:a7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
QzcwRDExMC8GA1UEBRMoMUQxNDRDRTI2MDE5NUU4Q0IzNUY4RjI4ODczMUUyRUEw
ODgwMDY2MTAeFw0yNjExMTIwNDAxMDBaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhZjUzOWZjLThlZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCmld7eNINoPYeU0C6CWIXMo4IP8vBaOfeHHs+flufIs2jfgdQzu16bsnIZN6+k
lACcwm6v+yIZ/h8m8GD5Dk+TI0OIyHfq+J70AXHjI6w1f5aoeDZy/R1x9x5hcWL6
jyYHrcrQdmETKdJX72DjXNuEoEtq2S/Dm2U9sfPBNic9wAmfz6CBB1dDiAkDPlk0
0bnoGlCo/ZhhwUtlnin/pww7/IM7joOmwDl0CzaskP5STHBfkVSYDNMKwLr6/lat
V0ODJ2ZL+xJ0YI+rWuG7ntw0tRXmfuEpS/Vr8U0kfg5NJ9ztsArSQB12kH38JsFl
sS+T+2rthbCBPSFIgaSKorI9AgMBAAGjggJsMIICaDAdBgNVHQ4EFgQUqSTDXn5p
a94ykZNZwskTwD4GoUUwHwYDVR0jBBgwFoAUHRRM4mAZXoyzX48ohzHi6giABmEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNzBELzkyREYzOTc0QzA4
QjExRjFCMTQwOEMwMDU0MTFGOTcwL0hSUk00bUFaWG95elg0OG9oekhpNmdpQUJt
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSFJSTTRtQVpYb3l6WDQ4b2h6SGk2Z2lBQm1FLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QzcwRC85MkRGMzk3NEMwOEIxMUYxQjE0MDhDMDA1NDExRjk3MC9BQkMzRENEMERF
NEQxMUYxQTFFNzkzNjcwNTY2Q0VGOS5yb2EwKwYIKwYBBQUHAQcBAf8EHDAaMBgE
AgACMBIDBwAkBI0CKMgDBwAkBI0CSIEwDQYJKoZIhvcNAQELBQADggEBAB9rQHv5
m78aHOAZDXCh+hSAGxGo8p1Mq0mQNUJmBBBz9eEHLj1z/lgcJxt9ArXkJk8jP1gu
tawWDSv1VCp6gn7FpKJNyf/eYWvvSrr8NZms7d5ZXEm36Kd9+1JACT29iUBgtcUo
23mJ8IKUimrqhcuppVSEzaYzq9o/O+8bF0yJKdO9V6iIpvLfquErNETAadQXcwAG
ohCmxOKp8DbQqsKHOaONzfu37tBdV0V19Z19bU1lUyGG4g35mOXVOPkfz/HR17Oo
4dQ8owvPWiAa5okXSc/x/7tqBtADc8iNVY5GQspAqHdhcicSwa8wBzy1f9Gz/uAR
Y/Na/RIYAylOKqc=
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:56:46 2026 by rpki-client