
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/64E2B628BE4911EE897F291BC4F9AE02.roa
File: 64E2B628BE4911EE897F291BC4F9AE02.roa (raw, json)
Hash identifier: mK73bfSEN6zR8+iXpbDtVPOlbDMpY+j7LIX++cafcEE=
Subject key identifier: 23:08:EF:FE:49:27:32:6F:83:40:15:3C:69:EE:E4:20:BE:A6:B9:6F
Certificate issuer: /CN=A91CE978/serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE
Certificate serial: 3607
Authority key identifier: 6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/64E2B628BE4911EE897F291BC4F9AE02.roa
Signing time: Tue 12 May 2026 15:13:09 +0000
ROA not before: Tue 12 May 2026 15:13:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38719
IP address blocks: 2404:3800:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl
rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:13:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13831 (0x3607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE978, serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE
Validity
Not Before: May 12 15:13:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a034384-0a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:15:6b:04:d3:27:0c:22:97:97:46:09:7f:31:
0c:4b:dc:cb:6e:46:f7:2a:c3:59:71:a6:45:21:6e:
69:8d:b9:2e:c6:84:7c:a3:64:d6:bf:7e:5c:e3:21:
1a:69:8c:00:e2:a1:d5:76:56:09:42:f3:72:52:b4:
02:b1:c0:cc:00:9d:57:39:bc:fd:6a:0a:d4:f8:4a:
e1:ad:95:d6:a5:11:1b:b2:32:c9:5a:e6:c2:fe:51:
a4:ae:46:25:6c:cb:26:6a:58:d1:5b:42:01:f8:12:
b2:fc:89:0c:86:8e:27:ea:74:3d:e9:65:6f:e9:09:
fe:07:0f:3a:35:00:06:6b:13:6c:c8:82:21:a0:bc:
36:74:39:f9:84:d8:58:d9:28:71:b1:80:f3:ef:c9:
8c:41:19:63:4e:03:12:40:39:ca:64:62:49:d3:6e:
46:2b:5e:d3:5b:22:b8:7b:fa:e1:e9:87:28:8e:8d:
02:e2:e5:2b:4b:db:a3:ab:da:9d:e8:1e:d6:ae:89:
bb:35:40:42:47:6b:a9:7f:cc:a2:0a:e6:24:d2:93:
4a:6f:b8:95:7f:86:49:ed:f0:8d:94:66:94:ad:8a:
77:5d:7d:ec:3e:11:ef:8f:ef:cd:3a:09:71:6d:28:
b2:31:84:df:bb:5f:ac:c5:e2:74:f9:f3:2b:cc:83:
37:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:08:EF:FE:49:27:32:6F:83:40:15:3C:69:EE:E4:20:BE:A6:B9:6F
X509v3 Authority Key Identifier:
keyid:6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/64E2B628BE4911EE897F291BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2404:3800:f::/48
Signature Algorithm: sha256WithRSAEncryption
a5:6c:33:7b:d1:d3:8b:a2:31:2f:de:41:c3:0c:65:f8:09:b3:
90:4a:a7:9f:f2:a6:8e:82:56:9a:eb:ae:15:21:e8:b1:3a:a7:
a0:c7:bb:32:44:44:96:21:71:f0:0c:9f:20:bd:72:8c:58:49:
f6:34:c2:41:d5:08:3a:f9:78:39:40:62:47:f6:f9:65:ee:5e:
3c:be:89:5d:73:ad:20:5c:7e:05:50:13:c1:27:30:9e:9d:81:
b5:93:e3:46:40:3c:07:8c:82:a7:62:b2:25:50:c4:2e:92:6e:
73:3d:11:9f:fc:77:9b:a3:bf:64:43:0e:55:3d:a3:09:53:49:
2f:54:bf:80:15:e3:71:1c:4b:d8:9a:09:ac:8a:87:d2:93:eb:
51:d9:68:95:33:bd:25:e7:4f:02:88:02:d7:12:a3:64:6d:24:
74:d6:c8:ce:a9:e2:cc:c2:9e:04:07:8e:83:90:1c:8b:3b:01:
a4:81:a1:05:3a:fd:5d:45:eb:5d:6c:6f:e2:5f:fa:89:b3:87:
df:ec:5c:a4:02:93:28:88:72:89:b6:dc:a0:b6:62:43:42:df:
aa:db:d6:98:1d:9e:34:ac:79:0e:3b:e2:3a:0b:69:d8:44:1b:
b5:70:26:fe:d3:37:a9:14:a6:6b:19:43:5d:65:b6:1e:58:01:
b9:94:85:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:07:37 2026 by rpki-client