
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/A41A30BE866011F191F4B56496A30FBC.roa
File: A41A30BE866011F191F4B56496A30FBC.roa (raw, json)
Hash identifier: AJVM8QB8v9wW9C2GIwYSkWw279MNg5CiJGgU0E7i/bE=
Subject key identifier: E3:CB:14:C4:89:43:FC:DD:5E:AF:8C:55:16:23:39:03:7B:7D:F0:08
Certificate issuer: /CN=A91DCF4D/serialNumber=A8420E0E206EB4E90C58728DD43F750DCFC3CC86
Certificate serial: 03
Authority key identifier: A8:42:0E:0E:20:6E:B4:E9:0C:58:72:8D:D4:3F:75:0D:CF:C3:CC:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEIODiButOkMWHKN1D91Dc_DzIY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/A41A30BE866011F191F4B56496A30FBC.roa
Signing time: Thu 23 Jul 2026 06:35:06 +0000
ROA not before: Thu 23 Jul 2026 06:35:05 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 9723
IP address blocks: 2001:df7:3540::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.crl
rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEIODiButOkMWHKN1D91Dc_DzIY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:20:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCF4D, serialNumber=A8420E0E206EB4E90C58728DD43F750DCFC3CC86
Validity
Not Before: Jul 23 06:35:05 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a61b619-0f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:22:11:41:51:76:5c:37:44:2e:a0:8f:7c:01:
53:f6:7b:3d:7a:f7:eb:15:cf:0c:b9:d0:8c:23:72:
1d:2a:9f:16:55:1b:61:69:41:e3:13:97:93:83:a1:
0e:07:49:92:36:b0:c1:85:4a:64:4d:b5:4c:8b:b3:
68:dd:29:fe:f6:f8:fa:85:76:a5:b9:b2:ce:eb:f9:
80:d2:4b:e5:80:ca:d3:54:41:0a:30:f6:45:2d:bc:
14:6c:c7:5d:bb:ae:90:ea:8e:1f:ea:55:93:67:9d:
46:26:32:33:8d:57:11:d4:bb:7b:f6:9e:6d:ac:ba:
35:cc:6e:0f:20:ce:c0:9b:0d:89:02:01:34:5d:58:
f5:87:d4:48:64:9b:7d:46:fc:2e:5b:b6:29:ef:6a:
b1:48:42:de:ac:bd:0a:41:2f:59:d2:fd:02:39:8b:
9b:c8:0e:d2:d5:63:0c:e4:af:1f:42:48:b4:97:64:
cd:26:ea:ec:89:13:0c:cd:0d:cc:ab:74:99:b6:49:
48:81:63:7c:4a:cc:a1:94:68:47:18:cd:91:3e:97:
f1:71:d6:2d:9d:50:08:58:7c:ed:b0:89:2c:19:a4:
0e:ee:93:4c:d2:b2:fd:b1:e5:53:ae:05:e0:93:99:
f7:4b:5e:ba:74:fd:65:58:ea:39:df:e0:12:98:d8:
f7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CB:14:C4:89:43:FC:DD:5E:AF:8C:55:16:23:39:03:7B:7D:F0:08
X509v3 Authority Key Identifier:
keyid:A8:42:0E:0E:20:6E:B4:E9:0C:58:72:8D:D4:3F:75:0D:CF:C3:CC:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEIODiButOkMWHKN1D91Dc_DzIY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/A41A30BE866011F191F4B56496A30FBC.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:3540::/48
Signature Algorithm: sha256WithRSAEncryption
19:4f:50:ec:cc:a2:54:ab:18:dc:cf:00:58:97:f0:81:e3:54:
13:c7:1a:81:72:26:b2:29:f5:c8:d4:0f:fc:ce:c4:ae:fc:d1:
00:af:0f:40:40:45:11:a3:f5:56:3b:cc:f8:16:96:47:95:7d:
2b:36:38:64:08:57:51:8f:97:76:24:a1:15:9d:c1:16:5f:ce:
5f:43:16:2e:0e:15:57:ef:82:9d:19:e5:5e:19:69:df:11:72:
5d:e0:cf:47:7a:4f:3f:0e:1b:18:35:0c:00:3f:46:1f:4e:56:
27:9f:d1:54:a9:8e:45:01:b7:70:b7:aa:e0:95:4b:5f:9f:f1:
3b:04:78:95:20:dc:63:fa:99:1f:29:5a:cb:a2:04:d8:36:30:
20:87:6e:6a:e0:9d:22:84:d9:11:0d:ee:bb:ad:0b:e4:ee:f5:
66:5f:5a:51:fb:45:3e:03:b0:6b:97:37:81:81:45:1f:dd:ce:
9a:a2:f3:f2:f3:d4:92:7f:22:37:f9:d8:3b:00:9d:bc:fe:06:
46:ed:71:c7:77:9a:81:bf:80:67:16:52:64:67:b2:05:95:43:
48:22:14:f1:45:40:00:7e:10:04:17:67:57:59:b6:76:28:25:
5c:80:71:48:34:b9:4d:89:c3:22:8c:1c:75:3d:51:ab:06:99:
4d:4e:dc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:33:51 2026 by rpki-client