
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/D9D5455006AD11F1A15422A90B3D8C67.roa
File: D9D5455006AD11F1A15422A90B3D8C67.roa (raw, json)
Hash identifier: dDJLmsT6mCgZl2ards1bhCoMOym6cbSGTZ2B9OcwQzE=
Subject key identifier: B3:17:B7:7E:78:A0:A4:27:46:83:85:84:DF:2C:CE:F6:45:0E:EA:FD
Certificate issuer: /CN=A91EA0F7/serialNumber=82CA104DC5F2AFF533FBF68CF298F40FBD481F04
Certificate serial: 0102
Authority key identifier: 82:CA:10:4D:C5:F2:AF:F5:33:FB:F6:8C:F2:98:F4:0F:BD:48:1F:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/D9D5455006AD11F1A15422A90B3D8C67.roa
Signing time: Sat 05 Sep 2026 06:56:59 +0000
ROA not before: Sat 05 Sep 2026 06:56:59 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 154131
IP address blocks: 2001:df5:f640::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl
rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA0F7, serialNumber=82CA104DC5F2AFF533FBF68CF298F40FBD481F04
Validity
Not Before: Sep 5 06:56:59 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a9bbd3b-2048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e6:2f:fe:9f:f2:04:12:d9:d8:dd:06:e8:fa:
53:1a:e6:6b:33:df:96:ff:d2:e0:3a:cf:0f:36:49:
ba:52:63:61:af:02:44:bc:e9:6f:fe:f4:84:6f:2e:
b8:1a:e2:32:02:75:6b:af:d9:d0:a6:61:71:ef:68:
3a:18:2d:69:50:f4:7f:48:99:d1:42:64:d5:38:27:
b7:ff:b0:85:bc:c5:21:11:51:5a:6e:f0:f9:ad:d0:
4e:4f:9a:9c:16:b2:22:26:8b:15:d9:13:a6:6c:b7:
d6:7e:00:74:8f:d0:c4:26:ce:86:03:82:a0:5a:ec:
e1:27:7b:35:06:ea:f5:6f:72:22:2e:26:96:b7:87:
01:72:0c:a6:4e:67:a6:04:ca:9a:32:ee:90:a7:6e:
fa:92:45:f7:7b:fe:86:74:42:a5:f0:34:39:06:82:
f8:5a:17:f8:71:ef:07:74:d8:42:d5:b9:6a:3e:11:
d9:d8:ab:ec:ad:a2:04:66:a9:0b:d2:51:fc:d1:b0:
72:29:29:2d:9d:23:91:d9:d4:93:65:df:27:7a:fb:
3a:7a:59:76:6d:31:8b:9a:38:cd:7b:a0:c8:dd:5e:
42:14:91:54:62:28:e1:ee:70:96:19:53:35:a5:c0:
90:e1:7d:73:0f:ae:59:9a:45:c4:2f:d5:01:37:90:
28:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:17:B7:7E:78:A0:A4:27:46:83:85:84:DF:2C:CE:F6:45:0E:EA:FD
X509v3 Authority Key Identifier:
keyid:82:CA:10:4D:C5:F2:AF:F5:33:FB:F6:8C:F2:98:F4:0F:BD:48:1F:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/D9D5455006AD11F1A15422A90B3D8C67.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:f640::/48
Signature Algorithm: sha256WithRSAEncryption
eb:39:55:d9:e8:72:85:99:f2:41:5f:9c:e3:66:4c:6e:e1:44:
bd:1c:0c:4c:b2:17:3d:62:99:a7:6f:a7:a4:0f:50:8e:75:e8:
34:72:84:69:3d:30:5a:42:19:eb:d1:0c:dd:3e:9f:07:98:5f:
bc:e7:f1:28:e3:f2:70:29:8e:83:8a:92:8b:41:9b:59:5d:1e:
d2:d0:e5:bf:57:fe:2d:d7:6b:64:b2:36:a6:32:0d:45:e2:35:
a7:89:c5:6b:43:32:7e:47:93:56:e2:70:0a:3a:0c:24:d4:75:
54:21:6a:cb:70:e3:a6:d2:1d:e2:53:4d:65:0f:23:3b:30:29:
e3:66:ae:a4:a3:a6:98:b9:bc:63:53:51:4d:b1:1b:9e:9b:4c:
48:06:0d:19:f2:e0:93:49:6a:45:e6:18:7a:ea:ad:d4:a1:a7:
9a:5c:2d:2a:31:9d:e6:e9:18:d9:da:13:6d:90:00:76:93:e5:
6b:64:fb:3d:e6:17:aa:c1:49:a8:0c:93:9b:d0:6e:fa:2f:af:
77:9e:1b:1f:d8:4b:0c:bf:6b:4f:d0:65:a1:37:c1:f9:26:d1:
dc:b6:39:2c:3e:ef:da:6e:fc:ec:22:82:91:42:35:64:b6:bb:
7c:3c:80:c2:ed:4e:a3:a2:11:6f:67:9c:c0:9b:48:e0:03:87:
2e:bb:06:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:37:06 2026 by rpki-client