
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/12300E80ECD911EEB21F7B7FC4F9AE02.roa
File: 12300E80ECD911EEB21F7B7FC4F9AE02.roa (raw, json)
Hash identifier: o4HBq1xgFGnSG/Ii6CzGWaOkXzqOYR+uaeJex6SII34=
Subject key identifier: 94:C8:C7:AF:64:FB:0F:92:C0:25:14:74:25:41:51:76:BD:6D:2F:7F
Certificate issuer: /CN=A91E5D61/serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD
Certificate serial: 13D4
Authority key identifier: 5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/12300E80ECD911EEB21F7B7FC4F9AE02.roa
Signing time: Wed 26 Aug 2026 15:10:36 +0000
ROA not before: Wed 26 Aug 2026 15:10:36 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 38272
IP address blocks: 2001:253::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl
rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 14:21:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5076 (0x13d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D61, serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD
Validity
Not Before: Aug 26 15:10:36 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a8f01ec-d8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:ac:62:03:1b:6f:ef:3a:7d:57:ab:c2:c5:
05:c5:95:40:18:f5:2d:96:32:5c:e7:d4:34:7d:dc:
93:90:a9:a4:40:77:14:7b:af:90:42:22:27:1a:36:
4f:b0:dc:eb:20:77:ad:b5:a3:5d:e1:50:48:77:3e:
b5:3c:7e:6d:a8:a6:6a:7b:3b:d6:e9:ec:36:65:e2:
35:ad:28:1c:f7:23:66:04:7f:fc:bf:c3:bd:15:35:
17:fe:65:66:11:a7:77:f4:0f:95:ce:a4:34:d8:94:
c6:ce:16:12:c2:e2:ad:55:0b:61:6c:6e:eb:d0:3f:
00:86:0b:73:e7:08:c4:1f:23:2c:22:57:df:4d:81:
89:c1:a0:5f:42:b5:15:c0:5d:ba:13:eb:7b:55:76:
6e:49:79:8e:7d:31:11:60:8a:4b:cb:f2:28:78:67:
83:66:83:83:0c:f4:76:37:ed:1a:d8:56:6a:7f:90:
e6:66:bc:94:64:17:68:36:e8:40:c1:1c:5d:bf:7b:
13:10:25:bb:72:b8:07:6a:b5:97:37:d5:43:d0:bb:
b4:73:e4:20:13:31:89:52:36:db:0d:4c:84:4b:f8:
5f:52:da:63:57:8b:2f:dd:5b:f4:f9:57:03:27:f3:
2c:7d:0b:16:2c:8f:f9:bb:03:0c:df:6e:cf:24:f8:
95:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C8:C7:AF:64:FB:0F:92:C0:25:14:74:25:41:51:76:BD:6D:2F:7F
X509v3 Authority Key Identifier:
keyid:5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/12300E80ECD911EEB21F7B7FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:253::/32
Signature Algorithm: sha256WithRSAEncryption
6a:54:f4:9d:f8:01:ba:32:69:18:ee:3a:c1:9b:43:c7:c2:43:
0a:d5:7b:1f:21:26:01:2b:d4:86:5e:f6:b1:7e:5a:cc:2a:4c:
8e:71:9c:bb:bb:68:4e:ab:5a:e4:7a:c8:25:7d:a5:01:86:77:
4d:55:e5:f2:dc:4b:84:16:fa:5d:87:b2:bc:09:53:8d:1a:fc:
d3:5a:40:fc:b5:ee:85:49:04:bc:b9:fc:4f:e2:86:7c:27:4a:
2c:f5:99:89:43:0b:9d:c8:ed:93:22:3a:65:e4:79:a4:97:57:
08:33:f9:a3:9d:f3:9c:4d:88:67:89:4c:64:80:5c:74:3d:59:
27:64:0a:5c:17:03:96:8f:5d:b3:bd:2f:ce:a3:aa:1c:7b:d5:
60:a8:76:46:8a:51:8a:d1:3c:cb:f2:44:99:2e:bc:f2:2e:d9:
77:42:b5:9a:d5:ad:fd:c7:59:e4:07:95:7e:41:97:aa:40:3f:
1a:ca:a5:d5:14:72:75:ce:2d:e0:c0:68:5b:e4:2e:79:d5:75:
37:0c:3d:de:26:0a:1d:44:d7:70:1e:50:a6:60:91:1f:e3:19:
26:bd:50:b3:a6:a3:3d:0e:e6:1e:4c:7f:d7:02:2c:1d:cb:e6:
30:fb:3c:c1:5d:5e:c9:f9:3a:e3:3b:a2:79:8c:1a:69:b6:f3:
96:7f:51:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:52:34 2026 by rpki-client