
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF9CA/7EA33706B23C11F1AB3B015E6111F970/C6EF2736B23C11F196D963B56111F970.roa
File: C6EF2736B23C11F196D963B56111F970.roa (raw, json)
Hash identifier: 7Vzu1+cRluQVIi2fLurDSzXT17iGox+kdq/tblSQ6nk=
Subject key identifier: C5:4A:AB:FF:2C:AD:3C:23:F1:E8:50:17:E4:F9:57:17:1B:8A:EE:D6
Certificate issuer: /CN=A91DF9CA/serialNumber=96D954841E8577A8DF81CF5798242B20715EA399
Certificate serial: 02
Authority key identifier: 96:D9:54:84:1E:85:77:A8:DF:81:CF:57:98:24:2B:20:71:5E:A3:99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF9CA/7EA33706B23C11F1AB3B015E6111F970/C6EF2736B23C11F196D963B56111F970.roa
Signing time: Thu 17 Sep 2026 02:09:13 +0000
ROA not before: Thu 17 Sep 2026 02:09:13 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 154149
IP address blocks: 163.52.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF9CA/7EA33706B23C11F1AB3B015E6111F970/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.crl
rsync://rpki.apnic.net/member_repository/A91DF9CA/7EA33706B23C11F1AB3B015E6111F970/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 04:12:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF9CA, serialNumber=96D954841E8577A8DF81CF5798242B20715EA399
Validity
Not Before: Sep 17 02:09:13 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aab4bc9-4afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:77:91:4e:c0:c5:95:3f:6a:1b:96:71:d4:d9:
31:02:e8:56:4b:43:54:46:94:07:2c:4e:b1:2c:90:
c8:96:29:45:06:c4:d4:93:dd:d1:b5:e5:9e:55:65:
64:c4:d3:c7:10:e5:ad:79:b4:65:40:ef:55:23:ef:
33:09:a7:16:65:99:5d:4a:66:75:50:49:bd:cf:ed:
01:9c:40:b1:79:47:6a:fb:63:02:05:61:18:ad:52:
60:b2:33:e5:5c:9c:07:df:d4:5d:01:dc:04:ae:0a:
69:8e:5d:2e:d3:57:b1:3c:66:89:7c:9a:71:b2:da:
1c:59:a2:ec:6b:37:fe:e1:97:26:b1:35:c9:63:cd:
41:3f:b5:7e:6a:6d:60:23:2c:8a:51:eb:6c:5d:54:
ba:9a:5e:59:a1:35:f4:7f:d1:12:79:c7:36:91:1e:
1e:cf:43:38:34:4f:be:a3:3f:32:3f:ea:6a:c6:76:
66:6e:f0:97:6a:5a:b8:f1:67:25:ae:15:6f:12:96:
97:6a:03:f2:3a:fa:e0:6c:e7:fd:3e:d1:77:06:21:
c9:32:52:f0:4a:48:1a:90:bb:b9:02:4f:50:0b:5d:
82:8c:5d:40:cc:32:25:5a:b6:a2:09:25:6d:e6:48:
71:64:79:e0:72:d3:3a:f7:e5:b2:84:21:b2:7e:f6:
09:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4A:AB:FF:2C:AD:3C:23:F1:E8:50:17:E4:F9:57:17:1B:8A:EE:D6
X509v3 Authority Key Identifier:
keyid:96:D9:54:84:1E:85:77:A8:DF:81:CF:57:98:24:2B:20:71:5E:A3:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF9CA/7EA33706B23C11F1AB3B015E6111F970/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF9CA/7EA33706B23C11F1AB3B015E6111F970/C6EF2736B23C11F196D963B56111F970.roa
sbgp-ipAddrBlock: critical
IPv4:
163.52.19.0/24
Signature Algorithm: sha256WithRSAEncryption
80:2b:83:65:b0:ad:26:3e:64:73:a8:9e:a6:53:94:5f:13:6a:
64:bb:c6:d1:bd:6f:1a:7a:24:f2:17:86:a7:3c:e0:df:67:a5:
3d:a3:49:c5:4c:97:4d:37:ce:24:11:ba:46:7b:ff:e6:f0:2d:
0b:56:23:b1:27:66:c5:06:8c:c7:62:bc:c4:c4:e8:e3:a4:4b:
89:9a:06:0a:ac:87:a6:45:34:fb:d9:57:8c:1a:28:e1:ca:b3:
67:04:e8:9c:03:9c:0b:a8:62:46:a5:b4:34:c4:60:c6:e9:df:
c7:d1:6c:c8:c8:99:fa:f9:ca:6b:19:83:7d:2d:cf:a3:fb:f6:
d0:7c:a2:41:87:23:de:3c:c3:e1:7b:31:e0:f4:c3:b5:c8:ec:
89:e1:2f:10:74:76:09:72:05:c1:74:ba:68:ce:8f:80:5e:29:
88:d1:e1:d2:8f:58:67:ee:37:ff:82:7a:11:5e:c9:1e:46:43:
4c:bd:36:ac:0a:e5:49:01:9a:a1:24:3e:1b:d7:59:48:6d:e0:
03:50:d6:f7:2b:07:43:5f:59:63:35:9d:6d:9b:38:96:9b:74:
ab:d2:51:26:72:1d:56:2f:e1:c4:94:84:66:d2:ee:e5:48:6f:
b4:3c:15:8f:e1:2e:a6:ec:7d:2a:94:a0:cb:30:ff:5b:db:a9:
e1:06:43:b5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:38:07 2026 by rpki-client