
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/A242BED45E1511EFBBFB911EC4F9AE02.roa
File: A242BED45E1511EFBBFB911EC4F9AE02.roa (raw, json)
Hash identifier: m94ejFy3KdwSThtWwkwsF3c7v325vWdrkv6tpZwcmRw=
Subject key identifier: 0B:15:51:83:0B:19:99:7F:9B:BE:C1:56:4C:3C:B0:16:55:D5:F8:1B
Certificate issuer: /CN=A91B673B/serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C
Certificate serial: 018C
Authority key identifier: 15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/A242BED45E1511EFBBFB911EC4F9AE02.roa
Signing time: Mon 07 Sep 2026 04:55:39 +0000
ROA not before: Mon 07 Sep 2026 04:55:39 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 153166
IP address blocks: 2001:df4:1040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl
rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 04:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 396 (0x18c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B673B, serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C
Validity
Not Before: Sep 7 04:55:39 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a9e43cb-cae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:0e:8f:06:84:ed:cb:b5:27:4e:6b:27:84:
e4:6e:04:c6:96:68:5b:2c:92:ee:46:f0:48:bd:67:
fe:5b:50:5b:ee:7d:5b:65:9b:25:8a:f9:d1:9b:8c:
ec:4b:87:c5:27:83:3c:52:40:fd:aa:4e:b1:14:f7:
2e:64:56:42:8d:76:35:36:2b:7c:13:e3:fd:ad:64:
91:2d:4b:b8:55:be:b0:83:80:69:e5:ca:92:09:45:
ed:12:ca:0d:5a:34:d5:35:fb:cf:50:ba:a3:4f:56:
e5:98:f9:2a:b7:ad:fb:a2:eb:6b:06:07:19:21:60:
a4:f1:01:c0:24:3a:8f:fc:73:01:bb:da:bb:17:9b:
a7:07:11:df:7d:d5:40:68:fe:17:e8:8c:3d:37:2c:
22:7b:76:72:d3:f9:32:f0:72:08:73:4b:22:7b:dd:
39:d1:71:9f:bf:ae:92:5c:02:dc:a6:db:35:dc:76:
0b:ba:70:33:7a:9b:0f:1c:b6:a8:0b:6d:00:2b:2f:
a3:6d:74:5b:31:00:91:d8:1c:b6:d1:70:9d:a3:1c:
d5:63:69:2f:97:d2:50:a9:a9:64:00:ad:51:59:e1:
55:a0:57:40:2c:55:b5:32:f1:fd:e4:b6:62:a3:bf:
09:7c:94:3d:70:17:19:9a:b2:82:f6:68:4a:2e:4d:
e7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:15:51:83:0B:19:99:7F:9B:BE:C1:56:4C:3C:B0:16:55:D5:F8:1B
X509v3 Authority Key Identifier:
keyid:15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/A242BED45E1511EFBBFB911EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:1040::/48
Signature Algorithm: sha256WithRSAEncryption
a1:5f:e6:d7:f5:7d:96:13:56:7d:04:5c:2e:95:45:09:3d:ed:
34:81:7b:7d:ab:21:db:1d:58:18:8f:18:2d:ce:df:7b:6d:ad:
86:96:88:4a:fe:de:f0:8e:8e:94:5e:df:8f:86:db:9a:6c:c0:
8f:5d:cb:2d:e4:d8:a4:1f:d3:54:de:de:45:66:d9:22:44:3f:
6f:2a:84:aa:3b:8c:69:51:fd:37:3c:15:99:0b:de:47:be:32:
df:6c:33:32:b3:88:f8:8d:d4:43:ad:1e:ea:b5:e6:f5:f2:66:
3f:cc:79:af:30:ef:87:d8:37:8c:a2:19:a9:a0:e1:8a:0b:7c:
f8:aa:ea:51:dc:b5:50:14:7a:ae:ff:17:e2:c8:78:af:9c:d2:
b9:95:91:ef:c7:d5:9c:fd:64:f2:e6:40:42:00:22:c8:3e:d7:
77:05:6a:71:08:fa:3f:15:57:f5:5e:dd:66:f2:3f:06:49:63:
d7:1e:a5:0c:a1:54:47:58:93:5b:61:ad:ec:70:ea:01:93:b1:
4f:2e:6c:3e:93:97:f4:e4:33:d9:21:6b:d7:5d:15:49:0c:ef:
c7:87:4e:77:f0:99:54:b4:e1:f0:3a:87:b4:51:c6:d6:7f:67:
ec:d5:54:57:88:1c:35:64:74:bb:6f:6d:4e:2f:93:56:b3:59:
1e:a8:0d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:46:45 2026 by rpki-client