
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/00CBB37ED79B11F18B0D6AE90266CEF9.roa
File: 00CBB37ED79B11F18B0D6AE90266CEF9.roa (raw, json)
Hash identifier: IkwE8NQ64eeIqYCveE1+irFp4Cnx6SxuclXiSQ5UiFg=
Subject key identifier: 0A:E3:A8:05:BD:7A:7C:0B:81:BC:48:84:40:EF:BD:DD:35:A3:4F:84
Certificate issuer: /CN=A91B80C2/serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322
Certificate serial: 0214
Authority key identifier: CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/00CBB37ED79B11F18B0D6AE90266CEF9.roa
Signing time: Tue 03 Nov 2026 15:26:56 +0000
ROA not before: Tue 03 Nov 2026 15:26:56 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 152726
IP address blocks: 2001:df3:bec0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl
rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 03:45:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 532 (0x214)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B80C2, serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322
Validity
Not Before: Nov 3 15:26:56 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6ae9fd40-dec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:62:0d:c3:eb:b9:35:31:13:67:7d:89:cc:63:
22:d5:d8:ab:42:a3:c3:bf:17:f5:bb:2c:a5:9f:88:
09:2e:38:1e:b4:32:f4:a0:f5:c0:ff:c9:96:53:95:
17:e5:d5:20:dd:f6:f0:57:8a:2a:94:21:fa:de:8f:
c2:dd:a2:98:a2:11:02:8e:55:41:bc:96:f0:a6:cf:
58:bb:80:47:3e:09:31:04:61:eb:85:47:50:d0:b3:
b0:56:24:4a:c4:04:7a:c7:64:97:ae:88:a9:57:d7:
8a:fa:13:82:5b:15:e7:ca:63:31:43:44:6e:2f:a2:
11:16:d5:f5:2a:c5:84:fa:1f:8f:ee:b7:83:49:e7:
d9:f5:39:71:6a:0e:4a:71:3d:fe:dc:3e:bd:a0:9c:
56:a9:83:0b:0f:5d:6d:2f:54:ba:b8:20:5b:8b:c2:
c3:ad:1f:4c:2d:6f:07:27:de:42:cf:e4:6f:3a:60:
2e:6f:00:55:f1:b0:bf:46:df:f4:2c:df:76:1d:72:
f1:03:f6:2e:cb:34:4f:5f:4e:25:eb:dd:e4:54:92:
09:e5:38:05:50:fe:79:7c:63:ad:4c:f1:36:b4:98:
26:e3:79:6e:55:61:78:ea:f5:dc:ef:4f:d6:79:20:
36:ce:0c:d1:cd:45:e3:08:cc:6c:f5:3b:d1:ef:cb:
05:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E3:A8:05:BD:7A:7C:0B:81:BC:48:84:40:EF:BD:DD:35:A3:4F:84
X509v3 Authority Key Identifier:
keyid:CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/00CBB37ED79B11F18B0D6AE90266CEF9.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:bec0::/48
Signature Algorithm: sha256WithRSAEncryption
21:ea:d5:15:c5:75:6d:af:ab:c8:15:18:da:fc:fa:c7:d7:d6:
46:15:26:90:82:18:0f:ec:f6:ac:c0:bf:20:e3:06:b4:ee:a0:
c8:49:34:31:1b:5d:76:1c:67:b6:25:5e:5b:4a:85:93:aa:1a:
82:62:46:b4:35:66:af:72:4f:0c:c0:67:32:f5:42:6d:dc:ce:
cd:76:02:d8:58:dc:7b:2c:d2:97:81:e2:87:f8:86:86:fd:a8:
36:ae:f5:df:87:9f:83:3a:cd:91:75:5a:40:e0:ae:17:97:c4:
94:17:3c:a2:9f:f2:b7:76:1d:59:d7:76:be:1d:93:fa:20:59:
0f:0f:ee:05:c9:67:74:1a:9f:a1:5d:e1:ed:01:c7:b0:d8:d5:
6a:62:7e:fa:c5:f5:e2:62:b8:75:4d:b6:d5:02:8d:2d:4a:e0:
4c:c2:02:84:48:67:f7:af:9e:06:78:3e:57:05:9b:ae:46:f1:
48:20:4b:ba:7e:ec:85:24:4d:d0:96:ca:64:21:1a:c2:c2:18:
10:77:94:19:6d:7b:88:e3:ff:4d:f4:8b:b0:fa:28:40:ca:f3:
24:7f:20:4d:e4:9e:06:70:59:a0:02:b6:81:6f:f7:b6:8b:b2:
10:e1:e0:48:3a:68:00:6b:d8:9c:18:ae:a4:95:16:00:f4:72:
5d:bb:28:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:55:21 2026 by rpki-client