
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/E6FD5EBCBA3A11EBA9482F5AC4F9AE02.roa
File: E6FD5EBCBA3A11EBA9482F5AC4F9AE02.roa (raw, json)
Hash identifier: +4O58+8Be0EvFE4iAXiTAOaPh0BL/Et1xJp3uENJQz8=
Subject key identifier: 5F:0B:49:CC:0A:E4:3D:03:AC:8F:D5:0B:7C:57:31:01:1E:11:CC:0A
Certificate issuer: /CN=A91E1D77/serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119
Certificate serial: 09AB
Authority key identifier: 86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/E6FD5EBCBA3A11EBA9482F5AC4F9AE02.roa
Signing time: Wed 06 May 2026 20:24:38 +0000
ROA not before: Wed 06 May 2026 20:24:38 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 9221
IP address blocks: 2406:dc0:232c::/47 maxlen: 48
2406:dc0:235e::/47 maxlen: 48
2406:dc0:23e4::/47 maxlen: 48
2406:dc0:883e::/47 maxlen: 48
2406:dc0:8850::/47 maxlen: 48
2406:dc0:88bc::/47 maxlen: 48
2406:dc0:88ca::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl
rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2475 (0x9ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1D77, serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119
Validity
Not Before: May 6 20:24:38 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69fba386-6b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:40:79:42:7e:57:cf:27:6e:18:90:71:00:8a:
b5:7d:34:05:85:c8:aa:cc:c0:84:f5:ba:58:46:b6:
6a:26:ea:07:7d:14:56:3d:83:41:a0:09:db:f7:a8:
0d:d9:51:2d:40:ca:d5:97:a8:f1:a1:d9:a5:12:6d:
d5:d9:87:1b:6c:72:f1:96:2a:ff:42:66:67:94:30:
55:06:93:1f:96:2f:f1:89:05:6b:10:0e:ad:2c:33:
06:72:d7:7d:91:0f:85:21:33:02:9d:5b:81:09:f5:
35:72:d1:d8:0f:b3:e3:ae:5d:5f:72:20:57:26:ab:
69:22:35:78:d0:d1:b9:7c:a6:57:61:ac:4e:00:68:
67:c6:40:0e:df:a6:ed:64:37:4e:83:d6:cd:4c:49:
c8:70:d6:b1:63:8c:ae:af:be:fd:01:85:22:42:eb:
89:84:61:e6:64:74:20:7e:2d:0f:ac:9d:7e:41:cf:
15:aa:df:1b:b2:8c:6a:50:74:29:b0:f4:ae:1b:3f:
e1:f0:3a:47:24:dd:be:8c:b6:7b:09:79:33:37:36:
57:ec:3e:b9:2d:37:5b:b5:ca:ef:11:a7:99:0a:3c:
09:43:ad:2a:3f:d0:92:b6:63:53:92:cf:ac:05:c4:
a3:3a:f3:e3:35:b8:55:be:b1:22:48:60:95:e7:59:
c1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0B:49:CC:0A:E4:3D:03:AC:8F:D5:0B:7C:57:31:01:1E:11:CC:0A
X509v3 Authority Key Identifier:
keyid:86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/E6FD5EBCBA3A11EBA9482F5AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:dc0:232c::/47
2406:dc0:235e::/47
2406:dc0:23e4::/47
2406:dc0:883e::/47
2406:dc0:8850::/47
2406:dc0:88bc::/47
2406:dc0:88ca::/47
Signature Algorithm: sha256WithRSAEncryption
15:b2:25:6a:19:36:8e:1a:5f:6c:6c:ed:50:d3:b1:41:85:e4:
ad:f8:4c:e1:4d:fe:91:90:ac:cb:7f:3c:1a:2a:13:a3:77:0b:
fc:13:60:95:aa:94:2b:ea:7d:c6:30:bb:4b:25:ff:84:b1:75:
49:8b:99:45:c1:ae:8c:8c:1a:01:1e:e5:d7:00:fd:00:73:6e:
07:08:fb:13:be:94:f5:bc:70:30:be:fd:b2:3d:27:b5:74:6c:
3f:2d:37:a4:cd:bc:21:68:ac:ad:e1:c8:7a:44:5a:f7:fa:2b:
70:7c:83:3f:51:74:c8:05:00:6d:63:f5:f8:c7:cd:ff:36:02:
07:a1:88:33:92:3e:e5:33:f3:be:6d:68:53:9e:00:8c:d0:22:
b0:e9:5a:1f:e0:c0:4d:bb:fe:27:5e:28:03:9b:11:5d:ec:16:
e2:cb:b5:0e:5e:b0:be:82:fb:5b:f6:e8:31:7b:3e:0f:10:19:
00:04:7b:40:25:b2:4d:fd:d5:39:37:30:8a:bc:82:7c:97:cd:
c4:12:7f:05:72:fe:e5:98:5a:b4:b4:f4:a0:13:34:cb:da:51:
d8:82:16:e2:02:50:a9:8d:ca:ca:c4:ca:69:a8:0d:41:e0:7f:
c3:29:f2:22:67:a8:4d:ec:f6:26:02:bc:e1:ae:2c:49:21:cc:
c1:9c:d0:c4
-----BEGIN CERTIFICATE-----
MIIFdTCCBF2gAwIBAgICCaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTFENzcxMTAvBgNVBAUTKDg2QzIzQzE3QkM0RDIwRUUxNkYwOTJEMzVBMkNGNjU1
NEZFQzcxMTkwHhcNMjYwNTA2MjAyNDM4WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWZiYTM4Ni02YjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw0B5Qn5XzyduGJBxAIq1fTQFhciqzMCE9bpYRrZqJuoHfRRWPYNBoAnb96gN
2VEtQMrVl6jxodmlEm3V2YcbbHLxlir/QmZnlDBVBpMfli/xiQVrEA6tLDMGctd9
kQ+FITMCnVuBCfU1ctHYD7Pjrl1fciBXJqtpIjV40NG5fKZXYaxOAGhnxkAO36bt
ZDdOg9bNTEnIcNaxY4yur779AYUiQuuJhGHmZHQgfi0PrJ1+Qc8Vqt8bsoxqUHQp
sPSuGz/h8DpHJN2+jLZ7CXkzNzZX7D65LTdbtcrvEaeZCjwJQ60qP9CStmNTks+s
BcSjOvPjNbhVvrEiSGCV51nBewIDAQABo4ICmTCCApUwHQYDVR0OBBYEFF8LScwK
5D0DrI/VC3xXMQEeEcwKMB8GA1UdIwQYMBaAFIbCPBe8TSDuFvCS01os9lVP7HEZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUQ3Ny80QjY0MjdFMkFC
RjkxMUVBODhBQUUzMkNDNEY5QUUwMi9oc0k4Rjd4TklPNFc4SkxUV2l6MlZVX3Nj
UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hzSThGN3hOSU80VzhKTFRXaXoyVlVfc2NSay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTFENzcvNEI2NDI3RTJBQkY5MTFFQTg4QUFFMzJDQzRGOUFFMDIvRTZGRDVFQkNC
QTNBMTFFQkE5NDgyRjVBQzRGOUFFMDIucm9hMFgGCCsGAQUFBwEHAQH/BEkwRzBF
BAIAAjA/AwcBJAYNwCMsAwcBJAYNwCNeAwcBJAYNwCPkAwcBJAYNwIg+AwcBJAYN
wIhQAwcBJAYNwIi8AwcBJAYNwIjKMA0GCSqGSIb3DQEBCwUAA4IBAQAVsiVqGTaO
Gl9sbO1Q07FBheSt+EzhTf6RkKzLfzwaKhOjdwv8E2CVqpQr6n3GMLtLJf+EsXVJ
i5lFwa6MjBoBHuXXAP0Ac24HCPsTvpT1vHAwvv2yPSe1dGw/LTekzbwhaKyt4ch6
RFr3+itwfIM/UXTIBQBtY/X4x83/NgIHoYgzkj7lM/O+bWhTngCM0CKw6Vof4MBN
u/4nXigDmxFd7Bbiy7UOXrC+gvtb9ugxez4PEBkABHtAJbJN/dU5NzCKvIJ8l83E
En8Fcv7lmFq0tPSgEzTL2lHYghbiAlCpjcrKxMppqA1B4H/DKfIiZ6hN7PYmArzh
rixJIczBnNDE
-----END CERTIFICATE-----
Generated at Wed May 13 04:30:51 2026 by rpki-client