
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/901A806E936311F0AFC2992BC4F9AE02.roa
File: 901A806E936311F0AFC2992BC4F9AE02.roa (raw, json)
Hash identifier: +hmqIoxyFlGHGf+MVx7NHUlRN3EVatUM9ul9ZfEVwmE=
Subject key identifier: 02:33:CB:F5:51:1C:42:2A:51:FE:A1:BE:59:65:94:5D:E9:81:82:FC
Certificate issuer: /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial: 0166
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/901A806E936311F0AFC2992BC4F9AE02.roa
Signing time: Sun 04 Oct 2026 20:41:24 +0000
ROA not before: Sun 04 Oct 2026 20:41:24 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 9908
IP address blocks: 72.57.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 20:43:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358 (0x166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Validity
Not Before: Oct 4 20:41:24 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ac2b9f4-cb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0c:df:e5:93:96:41:e5:db:99:df:aa:ac:64:
2a:51:38:39:e1:dd:5d:20:d4:e9:55:b9:81:a2:61:
78:54:a6:63:93:49:ec:55:31:e4:36:82:c6:0f:00:
8d:f7:84:af:6a:c2:fb:c4:4f:2d:24:55:77:8a:35:
fa:f3:09:d5:d3:fe:67:31:3e:b3:f0:0a:22:c5:e9:
59:94:73:63:db:a3:a8:ad:0b:0b:61:34:f9:9a:9f:
c7:43:64:31:cf:8f:72:82:2d:23:0b:97:c3:cd:83:
b1:f8:e4:58:2b:fa:58:ca:81:7a:98:e0:93:e5:7e:
b3:a7:a7:d9:cb:1c:a3:3d:bb:61:94:b2:9c:a5:9a:
61:89:dd:14:51:f6:49:8a:25:ec:8a:be:25:5f:a0:
9e:98:6d:06:68:63:7f:d9:52:be:d7:99:d8:22:ab:
34:02:e6:33:e1:b5:3a:90:90:3c:e5:62:6c:28:5d:
af:1b:51:d3:8a:87:2a:94:35:22:bc:9b:66:17:d8:
99:83:a1:91:9b:fe:92:f3:e8:1c:ad:99:b8:d5:b5:
06:0f:33:ff:36:dc:b3:d7:06:36:98:1f:f4:3e:b2:
f9:24:97:69:5d:a3:eb:27:95:c7:4f:06:96:9c:3c:
76:b5:c1:f3:34:05:00:30:3a:eb:79:fc:f6:ba:db:
f5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:33:CB:F5:51:1C:42:2A:51:FE:A1:BE:59:65:94:5D:E9:81:82:FC
X509v3 Authority Key Identifier:
keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/901A806E936311F0AFC2992BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
72.57.128.0/17
Signature Algorithm: sha256WithRSAEncryption
09:30:c2:e3:c9:07:cb:d9:8f:ef:77:6c:b1:d0:df:ea:c0:2e:
b1:f3:45:e1:38:37:8b:d8:da:c2:42:48:29:ad:bd:4e:f7:33:
de:2f:66:59:34:3c:78:3e:9a:5f:e8:e9:70:cc:b2:e6:aa:52:
92:07:6f:4d:9d:e7:30:a8:20:22:a2:b8:c5:b6:ff:46:62:8f:
81:74:0c:79:14:12:8c:49:d1:d4:1d:cb:e9:7b:32:9e:fc:60:
12:f1:b7:52:84:ad:39:e3:49:ee:82:6f:7f:bb:cc:3a:ee:84:
de:76:bf:82:dc:fb:5a:96:b5:6d:5f:7c:f8:5d:63:f0:a3:f4:
c1:1a:ea:62:4b:a4:6c:cd:18:20:83:12:a0:02:58:33:2f:9f:
39:cf:56:4b:4d:f7:31:56:44:a4:47:19:71:f6:2e:33:6f:48:
7c:e8:5c:cb:27:ea:72:78:df:52:9d:54:1f:75:f8:e5:94:78:
64:e2:bb:3f:ff:28:21:13:96:30:54:38:a4:4a:05:4a:57:d4:
96:64:5e:a5:0c:7e:18:9e:35:86:56:68:3a:78:e3:cd:0b:60:
18:e7:fa:9b:88:9f:0a:56:94:64:af:30:de:eb:7a:7a:67:22:
bf:8c:9b:70:7d:e0:78:f5:18:d8:b0:be:4d:82:26:5e:fc:c8:
8c:63:56:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:54:50 2026 by rpki-client