
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/854D2E98B73E11F180636EBF3711F970.roa
File: 854D2E98B73E11F180636EBF3711F970.roa (raw, json)
Hash identifier: HQtlb2V3nIX90poa83Ikw5eFvg7jAOPZVR+dozSxCc4=
Subject key identifier: 04:47:B5:A3:37:D0:2D:BB:26:FD:45:8F:D9:48:18:87:C5:4A:AD:CF
Certificate issuer: /CN=A91F1B61/serialNumber=728A824092E5741254BB92D597723361A04BF292
Certificate serial: 0E09
Authority key identifier: 72:8A:82:40:92:E5:74:12:54:BB:92:D5:97:72:33:61:A0:4B:F2:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/854D2E98B73E11F180636EBF3711F970.roa
Signing time: Wed 23 Sep 2026 11:04:18 +0000
ROA not before: Wed 23 Sep 2026 11:04:18 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 138417
IP address blocks: 2407:e7c0:109::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.crl
rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 17:48:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3593 (0xe09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1B61, serialNumber=728A824092E5741254BB92D597723361A04BF292
Validity
Not Before: Sep 23 11:04:18 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6ab3b232-ca57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ef:4c:f8:a2:43:6c:6b:f1:48:f9:16:4c:ee:
f8:80:e9:e4:85:89:45:a7:00:98:15:ce:1c:06:c7:
cc:6b:c7:4d:2d:dd:c6:14:b8:b6:0c:11:87:8e:50:
bb:1e:ea:28:68:3b:0e:e4:fa:ef:0c:90:17:49:62:
fc:b0:85:4b:20:af:96:f7:9a:1b:45:ae:70:37:15:
a6:f1:51:d1:4b:da:62:db:e4:b2:8f:14:58:e0:b4:
d1:7e:9e:0e:ca:df:b9:5a:50:00:7c:64:12:2d:7c:
51:af:df:5c:07:81:5d:dc:84:7e:5f:2b:35:5c:74:
82:60:f9:be:48:ab:c0:ef:c2:d9:72:f5:15:c4:b0:
5a:15:de:f8:6e:e7:60:d7:00:a8:a9:bb:23:c0:0c:
83:a2:cc:67:2e:43:34:a7:d9:40:07:2b:e2:c5:fb:
5e:36:89:95:77:23:31:cb:02:4f:0a:b1:4f:58:27:
9a:ae:0f:df:07:dd:fa:53:a8:2f:79:39:2d:ed:48:
68:25:49:10:e7:5e:8b:33:3d:aa:db:1e:36:2c:94:
6f:3b:fa:a0:dd:5f:5a:ce:cd:03:16:8f:09:af:7b:
1d:96:95:db:7e:e7:6a:3c:76:2b:37:23:86:78:8b:
12:55:e1:c3:aa:b3:14:ee:59:15:ab:55:34:8a:56:
98:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:47:B5:A3:37:D0:2D:BB:26:FD:45:8F:D9:48:18:87:C5:4A:AD:CF
X509v3 Authority Key Identifier:
keyid:72:8A:82:40:92:E5:74:12:54:BB:92:D5:97:72:33:61:A0:4B:F2:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/854D2E98B73E11F180636EBF3711F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2407:e7c0:109::/48
Signature Algorithm: sha256WithRSAEncryption
8a:5b:58:c9:dc:7b:64:39:cd:1e:81:57:e9:ab:6d:2e:ef:67:
7c:1a:cd:41:28:06:78:2b:73:6f:de:2d:ec:9b:5b:4c:ed:27:
dd:d0:50:26:fc:29:59:b7:d3:1f:c7:63:9e:4a:a8:3b:d2:65:
75:c6:71:5d:a0:b4:bc:6a:f1:0d:c7:4e:49:6e:ce:b5:6e:ec:
c5:0d:9c:c1:7e:bd:13:70:ab:88:67:39:36:a6:60:0f:bd:e3:
3c:ee:35:ab:17:5f:bf:e1:d5:04:43:8c:bc:e5:b9:59:91:c8:
f5:18:d2:3b:25:68:61:53:b4:63:27:d5:f8:74:eb:06:2b:37:
d5:fd:88:76:e4:b0:f9:42:5e:cd:b7:a8:43:bb:20:b5:d1:59:
44:9a:ff:d4:f1:ae:3c:0b:59:2d:af:8f:4a:f2:17:13:02:d6:
cc:18:1b:50:13:33:c5:05:59:17:f4:ed:0c:68:31:73:7a:0b:
0d:6d:79:55:97:55:1b:a2:21:24:a3:a7:cb:50:38:0b:04:a2:
a2:3d:47:3c:a7:b0:6e:2a:1a:a7:2b:81:00:d9:0c:a8:ca:9b:
1b:61:16:28:b2:a2:5e:42:a2:27:bd:d1:69:e1:ba:00:2f:7d:
77:0d:00:a3:be:c2:59:52:3a:46:1f:73:22:40:12:b2:86:4c:
c5:91:f3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:42:53 2026 by rpki-client