
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/A39294F2B31911F1AD8137FA6511F970.roa
File: A39294F2B31911F1AD8137FA6511F970.roa (raw, json)
Hash identifier: Zma4t38tztu49pqbn5EJV9Y/LliEvIBeR5nXDKoUMC8=
Subject key identifier: B0:78:32:D3:4F:F8:59:2D:DF:7C:8E:C7:F4:BD:00:B8:7A:4D:EA:90
Certificate issuer: /CN=A91B4E1D/serialNumber=DDDC7102AD92D9D81A60C43A4F6B42934D511BA2
Certificate serial: 03
Authority key identifier: DD:DC:71:02:AD:92:D9:D8:1A:60:C4:3A:4F:6B:42:93:4D:51:1B:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dxxAq2S2dgaYMQ6T2tCk01RG6I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/A39294F2B31911F1AD8137FA6511F970.roa
Signing time: Fri 18 Sep 2026 04:30:13 +0000
ROA not before: Fri 18 Sep 2026 04:30:13 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 154796
IP address blocks: 2001:df7:5040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/3dxxAq2S2dgaYMQ6T2tCk01RG6I.crl
rsync://rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/3dxxAq2S2dgaYMQ6T2tCk01RG6I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dxxAq2S2dgaYMQ6T2tCk01RG6I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 09:26:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4E1D, serialNumber=DDDC7102AD92D9D81A60C43A4F6B42934D511BA2
Validity
Not Before: Sep 18 04:30:13 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6aacbe54-0efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3c:84:6c:55:f2:7a:d9:bb:f6:b7:b2:3d:3a:
cd:39:77:23:86:41:31:1c:51:8c:d4:59:9d:ce:f6:
ed:48:ca:1e:ac:00:de:f5:5c:5e:f9:7d:32:fb:9d:
97:34:29:3b:e9:3d:0d:a3:70:80:6b:5e:31:c2:85:
4f:6d:41:2c:aa:a8:b5:df:01:4a:6d:3e:af:24:57:
4d:cc:3b:32:4f:5a:be:c2:98:ba:42:0e:ca:68:1d:
69:f6:91:77:d7:5b:4f:f8:98:85:e4:27:0b:80:c8:
8e:6a:fe:c5:06:ee:fd:25:44:22:61:d8:ea:d2:df:
2b:c3:4e:13:df:ad:bc:67:9d:21:97:b0:19:96:60:
fe:f5:7e:41:86:f7:f8:6b:25:7a:28:d9:38:a4:e5:
d2:17:a7:17:54:03:22:ba:7c:94:df:8e:9e:6a:60:
c0:92:91:27:b2:fd:55:b6:10:e3:fa:9b:aa:20:a4:
6b:6f:30:99:74:c7:ce:b7:27:8f:a9:d0:1b:5f:91:
4b:bf:cd:5f:9d:e1:8b:c8:cd:e5:52:18:22:4f:bd:
14:cf:59:de:a7:36:fb:17:c1:79:b1:80:69:08:b4:
fb:d0:0d:0e:8d:6c:be:1c:f9:14:16:c8:3b:f7:e8:
4d:9f:42:6d:92:f7:45:11:24:91:02:09:0d:10:71:
9a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:78:32:D3:4F:F8:59:2D:DF:7C:8E:C7:F4:BD:00:B8:7A:4D:EA:90
X509v3 Authority Key Identifier:
keyid:DD:DC:71:02:AD:92:D9:D8:1A:60:C4:3A:4F:6B:42:93:4D:51:1B:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/3dxxAq2S2dgaYMQ6T2tCk01RG6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dxxAq2S2dgaYMQ6T2tCk01RG6I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/A39294F2B31911F1AD8137FA6511F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:5040::/48
Signature Algorithm: sha256WithRSAEncryption
18:f1:40:ba:65:13:3a:d4:b4:4a:aa:e6:cd:e3:a0:55:d1:67:
b0:88:37:06:b8:bb:3d:1d:d8:74:ca:ff:82:38:41:ba:83:cc:
31:36:4a:01:24:5a:20:f8:10:2f:f1:bb:42:09:5a:ad:ad:fc:
bb:fd:b5:28:b9:8b:e5:3e:22:80:c2:8b:19:f8:33:49:b8:81:
4c:00:91:d5:d6:45:0f:90:af:13:fe:7e:d9:b9:e7:0d:45:c8:
e3:82:d7:16:62:ca:25:d8:43:bd:1a:6a:94:94:f1:2d:03:9b:
63:a9:ec:72:ed:9c:e1:63:f7:68:f3:39:b2:d8:56:c5:bd:cf:
cf:ea:d6:f9:e2:7a:ad:9d:78:df:5b:44:9d:90:15:56:91:97:
a3:14:1c:ee:e4:71:3b:51:52:d7:50:83:7f:71:60:ca:ff:30:
ea:18:aa:41:3d:fe:63:60:53:fe:05:1a:c3:3f:4d:c3:7c:da:
ba:7c:17:c1:f9:cd:4e:e1:1b:89:47:f3:b1:0c:c0:e3:87:a7:
e2:68:79:b5:56:1a:91:a3:87:57:be:9b:6c:b9:87:65:f8:71:
ae:56:c7:96:d1:5a:80:8c:cb:df:4d:a4:60:d6:55:71:07:b6:
cf:b3:45:f8:c4:f4:9c:40:6c:23:81:29:d9:4f:88:a5:6f:b2:
12:d4:af:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:46:05 2026 by rpki-client