
$ rpki-client -vvf rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/8F5856362E9511E9896EFA1DC4F9AE02.roa
File: 8F5856362E9511E9896EFA1DC4F9AE02.roa (raw, json)
Hash identifier: fzVldj66k6KXtgIRLEaGb66ZtwgbJga1awvd7qMV8+I=
Subject key identifier: ED:0B:36:76:11:0F:AD:AA:71:8A:65:ED:1E:BD:F4:B5:00:C0:14:22
Certificate issuer: /CN=A91709BC/serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F
Certificate serial: 11D7
Authority key identifier: 36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/8F5856362E9511E9896EFA1DC4F9AE02.roa
Signing time: Tue 26 May 2026 17:26:35 +0000
ROA not before: Tue 26 May 2026 17:26:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59348
IP address blocks: 202.78.64.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl
rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:11:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4567 (0x11d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91709BC, serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F
Validity
Not Before: May 26 17:26:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a15d7cb-8a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:84:41:16:ac:72:2c:5c:fb:0e:e5:dc:00:93:
e5:32:fe:74:9c:22:2f:27:9b:20:86:87:c1:87:fa:
7b:9b:d2:61:91:77:78:d0:b2:21:dd:fd:cf:6a:df:
18:66:7c:bf:a1:58:56:c4:63:4b:81:dd:ff:89:68:
a3:68:8d:6a:f6:ff:3e:d1:dd:a5:8a:ef:a8:7e:b4:
4f:6c:53:2f:b4:ea:09:24:9a:ba:72:07:c6:7e:fa:
af:c8:7d:ab:d4:50:40:44:a4:4f:e7:36:80:1f:56:
97:a3:f4:e2:03:75:d2:ab:55:30:f6:97:a2:1d:22:
0e:ea:42:5c:0b:f8:5b:5f:bf:94:e7:c6:e9:50:7a:
37:64:51:d9:9d:e3:32:30:1b:99:59:a8:12:c9:ff:
6b:21:6f:7f:89:b6:ae:76:58:47:6c:16:3a:68:25:
4a:2d:e5:f7:39:db:68:c3:e6:ff:5d:55:4a:1c:96:
28:4a:98:e6:0c:53:19:cf:09:6a:46:c2:07:c8:e6:
8c:77:fa:8e:57:32:34:8d:ce:a3:a9:3d:d4:28:8f:
40:7a:0c:5d:2b:8b:85:0d:fe:33:6c:2c:f3:f4:2f:
e6:97:d3:97:8d:a7:8a:8c:68:38:f5:a7:0f:4a:6f:
9e:dd:5e:97:87:7c:02:91:21:2d:a0:9b:60:e0:57:
22:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0B:36:76:11:0F:AD:AA:71:8A:65:ED:1E:BD:F4:B5:00:C0:14:22
X509v3 Authority Key Identifier:
keyid:36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/8F5856362E9511E9896EFA1DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.78.64.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:ff:84:5b:6b:35:e4:9e:59:2a:18:71:00:d6:97:66:a0:8a:
d4:66:91:11:62:36:f3:90:d0:23:26:77:95:f5:2b:2f:9b:1d:
6a:69:e6:cc:ad:a9:27:39:d8:66:a6:c4:82:12:9a:ac:10:c1:
71:1e:3e:b4:65:16:f5:d9:a3:db:34:44:0d:23:e0:25:71:ca:
2e:27:9b:5b:91:7d:84:d2:82:67:90:3c:7b:1e:cc:b6:80:74:
52:54:1a:14:a4:92:20:ab:8b:29:75:4e:14:48:0f:eb:de:e5:
cc:c4:e0:f8:df:94:bb:f6:c2:df:4c:04:db:c2:58:b8:b7:03:
ea:e1:67:bc:80:ab:05:61:5c:e0:21:fa:9f:2c:cf:b7:d1:15:
ea:72:d8:84:cb:7a:bb:86:85:28:4d:6e:68:4b:34:67:5f:96:
de:a3:76:c2:56:a9:8e:66:d4:45:3a:01:17:a2:02:09:77:72:
87:23:04:7b:5f:a1:bf:a8:11:5c:52:09:89:aa:93:3f:27:b4:
fb:0d:00:47:00:ce:56:a1:de:3b:27:1e:0f:49:e6:71:3c:87:
99:64:e4:7e:76:a3:c3:94:e6:73:3e:ad:95:cf:3a:a5:12:0b:
34:82:91:bb:66:75:23:60:6d:fa:08:11:bb:05:3e:ae:cd:63:
36:97:20:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:53:57 2026 by rpki-client