
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/48A5FCA4A0A211EF81FA6876C4F9AE02.roa
File: 48A5FCA4A0A211EF81FA6876C4F9AE02.roa (raw, json)
Hash identifier: eZlsZmk8/ekeyqy6I3i3ZeeEd5v4ZHZyH6nwRwpqrDc=
Subject key identifier: F4:95:21:C7:A3:88:35:F7:28:29:C9:36:F7:2E:7C:DF:2D:46:CE:09
Certificate issuer: /CN=A91BA941/serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113
Certificate serial: 014B
Authority key identifier: 73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/48A5FCA4A0A211EF81FA6876C4F9AE02.roa
Signing time: Thu 23 Jul 2026 07:32:41 +0000
ROA not before: Thu 23 Jul 2026 07:32:41 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 135426
IP address blocks: 2401:bd60::/32 maxlen: 32
2401:bd60:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl
rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:32:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331 (0x14b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA941, serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113
Validity
Not Before: Jul 23 07:32:41 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a61c399-82d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5b:ca:43:ff:a5:8c:c9:a7:cb:94:a4:12:a3:
a5:0c:2f:82:72:5a:69:be:e2:b9:a1:75:e4:c0:f9:
80:ca:89:ec:d5:01:16:9a:03:8f:f7:65:25:d2:86:
53:ed:04:53:54:5b:aa:87:f5:17:f8:96:43:f5:c6:
2c:e4:39:91:61:5d:f8:ec:de:5d:d9:a1:c9:f0:ef:
2c:cc:c1:92:5e:dd:78:38:1c:e5:84:f8:50:04:92:
b6:2c:4f:c1:fe:c9:0f:f2:62:c4:13:09:f5:49:df:
41:60:c5:a7:14:ca:20:7c:8f:7a:f3:8f:3a:44:fa:
3f:24:15:85:fb:15:50:52:4a:3e:23:a5:05:4b:48:
c5:d0:6a:a3:42:ad:69:77:cf:2a:69:38:39:75:8b:
d5:77:34:4a:11:1b:56:28:60:c6:be:cc:b4:9f:39:
d7:0f:8b:ef:93:30:50:a9:f5:46:7e:41:ee:58:ab:
c9:b0:71:f3:38:a8:c8:a9:e8:a7:ff:7e:30:87:c1:
5d:fd:fb:21:c7:14:bc:58:b8:0e:a2:71:81:57:b8:
7e:ba:4e:c0:3a:d3:1f:4d:77:30:0a:88:96:05:9a:
7e:a7:88:aa:4d:c3:1f:f6:6a:44:7a:e6:39:b4:c9:
ac:2b:09:13:b4:6b:55:81:54:f4:26:de:a2:07:f5:
39:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:95:21:C7:A3:88:35:F7:28:29:C9:36:F7:2E:7C:DF:2D:46:CE:09
X509v3 Authority Key Identifier:
keyid:73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/48A5FCA4A0A211EF81FA6876C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:bd60::/32
Signature Algorithm: sha256WithRSAEncryption
90:57:c4:06:e5:12:19:27:c3:db:f6:a5:66:c0:cf:70:26:d7:
56:68:81:76:5c:e4:54:77:4e:a4:ef:ef:5f:14:b1:9f:ed:d3:
d4:57:be:5f:7b:d2:56:24:0e:5e:e6:7c:fb:bd:ae:88:9e:6d:
dc:96:4a:3e:93:1d:b2:d3:d6:d5:30:cd:0e:2f:05:41:55:a1:
99:13:ae:c3:54:cd:8b:84:d6:64:1c:16:64:ad:c3:9c:74:15:
7e:af:a1:fb:45:ec:63:8f:3f:ac:8a:ae:a4:88:2b:85:37:04:
ae:0c:b0:b6:1f:a9:67:a5:76:6a:00:66:06:0a:5f:8f:1a:f6:
89:5b:58:f0:f3:99:63:d5:3a:57:8b:fd:e8:e6:e8:82:f5:54:
80:b4:3d:24:55:0a:ec:83:1a:b9:03:6d:e0:78:12:71:35:de:
7a:ee:a6:63:83:da:92:49:e5:f7:c9:0f:6d:bb:f9:e7:3a:cf:
7d:ec:02:5d:a5:24:ce:06:70:0a:59:22:3d:bc:49:3e:29:59:
2e:d2:86:76:9a:e8:31:d9:29:0a:59:de:53:e6:da:10:47:f6:
4d:b5:5c:38:0c:b3:eb:89:5d:f1:4e:2c:ef:0f:70:5d:01:cc:
f9:7e:9e:6f:9f:83:63:84:40:7a:e5:cd:76:6f:0c:8a:12:f8:
f0:a9:86:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:07:30 2026 by rpki-client