
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/A6AB9D38335211F1960FCBDEC6833773.roa
File: A6AB9D38335211F1960FCBDEC6833773.roa (raw, json)
Hash identifier: eG1rXAv4jMKCrlbQtbORygCy+fkyzHgWlfJRFVNGgZI=
Subject key identifier: B7:49:DF:B1:1D:59:D2:F4:4E:B3:DD:5F:D9:07:55:54:1B:B7:CF:7E
Certificate issuer: /CN=A91A4849/serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
Certificate serial: 01B4
Authority key identifier: B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/A6AB9D38335211F1960FCBDEC6833773.roa
Signing time: Wed 08 Apr 2026 13:56:37 +0000
ROA not before: Wed 08 Apr 2026 13:56:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153473
IP address blocks: 2401:8ea0:1000::/36 maxlen: 36
2401:8ea0:2000::/35 maxlen: 35
2401:8ea0:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl
rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:12:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436 (0x1b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4849, serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
Validity
Not Before: Apr 8 13:56:37 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69d65e95-792f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7e:11:08:62:e3:9e:86:c1:81:14:b6:b5:e6:
83:79:af:1d:fd:84:15:54:2b:c6:1a:c6:1f:e6:89:
d4:b5:97:67:78:14:d0:24:ec:02:20:bc:27:db:17:
0a:df:ca:fa:be:bf:c2:7b:3e:bc:e5:6a:2c:60:eb:
e0:5b:d0:cc:88:0a:7f:50:72:d4:7f:f2:8d:e9:1a:
b7:69:b9:25:33:e0:af:c8:3b:27:3f:cf:18:4f:ae:
33:26:5b:21:3f:51:84:c9:ac:0d:b8:74:9e:c9:96:
a9:9e:22:a4:bb:4b:a2:ed:89:e8:f9:18:8d:1f:0d:
97:93:8f:4d:82:ec:df:ce:29:09:4e:1f:c8:6c:29:
06:56:6f:a3:a1:4d:a2:a1:3a:34:e5:af:28:5d:16:
f2:12:35:24:5b:7a:cf:2c:81:5a:03:2c:23:9d:ec:
6f:78:11:d0:86:eb:8a:5f:83:24:41:83:01:cb:e5:
80:7d:73:0e:01:81:17:dd:70:6e:9c:1d:8c:1f:b1:
8a:ad:e9:cc:05:0a:8d:eb:1f:5f:84:59:94:e5:eb:
17:24:a9:73:39:af:74:fd:bc:e2:98:d7:10:e4:78:
05:e0:51:e4:7e:65:96:95:78:ea:20:de:0f:ce:c1:
df:5f:2c:fb:db:ff:22:6b:9c:66:40:8b:e6:f1:2e:
21:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:49:DF:B1:1D:59:D2:F4:4E:B3:DD:5F:D9:07:55:54:1B:B7:CF:7E
X509v3 Authority Key Identifier:
keyid:B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/A6AB9D38335211F1960FCBDEC6833773.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:8ea0:1000::-2401:8ea0:3fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8e:47:02:d5:13:fb:69:22:ed:ba:31:60:a0:9d:13:4f:c8:7a:
54:98:b3:1d:f1:7d:8d:58:28:63:ca:b8:f7:dc:35:82:c1:35:
01:08:7b:9e:b5:5c:c9:de:04:18:5f:19:e8:eb:fd:07:85:92:
aa:e9:7a:d4:fe:14:6d:52:b5:f4:9d:33:a9:74:cc:ad:14:f3:
31:25:47:9b:00:d0:ea:cf:61:3e:79:1a:41:08:96:e2:f0:96:
32:3a:9d:5f:09:0c:7f:2d:5e:f7:b0:95:64:0c:73:ee:07:18:
0d:19:8d:34:b3:2d:e4:ce:93:67:b4:cf:db:5a:2c:28:3a:a8:
44:1a:54:2e:80:e1:55:de:44:a3:e6:67:d4:0b:dd:61:9d:d3:
8f:93:68:c5:f8:5d:cf:4a:e3:db:3b:b2:73:3a:85:7f:67:55:
2f:74:db:dc:4a:9b:17:8a:45:ff:5f:4d:50:89:d7:10:ab:fa:
01:f4:aa:1e:2b:47:91:9d:76:92:0f:d0:4d:d0:c8:a3:53:01:
5d:8c:5d:03:d4:1f:b4:35:3f:10:e1:1f:d5:ec:67:c4:2a:f6:
49:96:6b:0f:ed:97:cf:8d:9b:7e:74:58:ac:5c:31:0c:60:06:
2b:dd:51:87:36:4b:12:03:d8:27:5d:e3:cb:9d:fd:3d:0f:99:
e1:1d:1b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:46 2026 by rpki-client