
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/9D1F08CEDCCE11F1B5E1217D1066CEF9.roa
File: 9D1F08CEDCCE11F1B5E1217D1066CEF9.roa (raw, json)
Hash identifier: RfnIQvOkAsg7Z8CkgwWwwnHXEZvYMg5j7e9h59sNa1Q=
Subject key identifier: A9:ED:F7:DB:85:FE:EB:F9:44:C9:71:0F:8B:5C:F7:34:55:3B:F1:FA
Certificate issuer: /CN=A91E8DF5/serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B
Certificate serial: 016C
Authority key identifier: C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/9D1F08CEDCCE11F1B5E1217D1066CEF9.roa
Signing time: Tue 10 Nov 2026 06:18:58 +0000
ROA not before: Tue 10 Nov 2026 06:18:58 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 32595
IP address blocks: 2001:df2:45c0::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl
rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 05:41:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364 (0x16c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8DF5, serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B
Validity
Not Before: Nov 10 06:18:58 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6af2b752-d4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b1:5c:c7:8e:00:c0:41:e0:c4:fe:9e:5b:b2:
2d:3c:b2:b5:0d:9a:c3:9e:61:7c:ab:4d:91:dd:3d:
a0:ea:f5:61:4b:1d:0d:6d:2f:46:0d:8e:5d:e2:ac:
16:26:e0:70:74:7a:b6:16:a7:fa:a7:cd:95:28:7a:
24:63:27:b2:af:cc:44:d6:e4:4c:c9:4a:3d:db:b7:
2e:5d:68:9d:53:cc:18:16:e2:58:63:82:b9:7d:09:
b6:85:fc:cb:91:de:38:f3:aa:eb:41:88:0d:ba:c6:
71:2a:06:88:98:09:3b:f5:3f:20:b2:15:79:d5:27:
5c:58:0c:f8:56:fa:f4:f9:15:4d:29:71:98:6a:42:
45:3d:02:5a:c6:55:4b:97:dd:e9:76:3d:0b:46:10:
7d:ee:bd:33:c2:5a:d3:75:6a:f1:5a:cd:1a:b5:18:
12:14:52:5a:64:3f:a9:95:75:a2:67:24:5a:d2:b4:
08:5e:b6:b9:1c:16:58:7c:7c:eb:be:e5:ce:c2:55:
32:b6:81:38:43:43:0b:67:4b:3b:6a:2e:6f:f1:c9:
e8:28:c7:47:b8:16:13:c6:8a:4f:e7:82:8f:09:72:
46:89:5d:cc:39:95:d5:43:1a:fc:6e:05:c5:81:fd:
7c:33:04:4e:ed:6c:36:1c:aa:63:c8:e8:28:bd:13:
b4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:ED:F7:DB:85:FE:EB:F9:44:C9:71:0F:8B:5C:F7:34:55:3B:F1:FA
X509v3 Authority Key Identifier:
keyid:C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/9D1F08CEDCCE11F1B5E1217D1066CEF9.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df2:45c0::/47
Signature Algorithm: sha256WithRSAEncryption
5b:35:62:71:34:6b:05:0f:20:35:3f:ab:77:be:a8:27:74:76:
c4:32:33:61:be:90:19:e2:b6:44:17:c1:8c:18:66:b2:8b:bc:
d8:2c:e6:20:4b:08:e6:f4:1e:09:eb:fe:68:e6:80:89:45:d6:
17:06:de:9b:ab:74:7e:07:fd:72:35:8e:3c:43:bd:29:50:41:
aa:2b:77:c2:27:e8:85:d8:2e:d1:5c:a4:bb:09:d8:6b:a8:63:
7d:62:91:c7:89:3a:ba:56:bd:48:98:15:90:6b:e1:75:01:c0:
47:ee:1e:d6:e7:26:17:08:ac:0f:94:82:5a:cc:31:11:84:e6:
e0:04:e8:86:e3:bb:9f:d5:bc:5f:01:5f:25:f5:3d:2b:83:ee:
6c:cd:d7:ad:b5:6c:98:9c:bb:2d:9a:53:5f:bd:91:17:a2:9a:
6b:5d:08:fd:cf:04:65:14:4a:55:2d:29:fe:fc:2f:82:47:4d:
9c:24:20:87:a9:41:f8:06:2b:d7:d5:b9:5a:14:68:16:d2:6c:
93:73:70:a7:e3:d7:ff:e0:a1:0e:c0:a3:c2:c3:63:a9:bf:c2:
02:0e:e0:1c:ba:2f:82:1f:f3:72:07:dc:75:23:93:4a:01:a5:
74:b4:c9:4a:5c:ee:86:5f:bd:0e:fa:66:b6:c7:24:52:f2:b1:
ce:24:71:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:47:49 2026 by rpki-client