
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/A210E7309CAB11EBAB87D43AC4F9AE02.roa
File: A210E7309CAB11EBAB87D43AC4F9AE02.roa (raw, json)
Hash identifier: kHXF86tdewpNJA/xCfmRwP67zL3UJRra5DoNu6Nu6SI=
Subject key identifier: 06:95:3E:CE:14:B1:75:0F:75:66:BE:CA:BE:F7:55:B4:2E:8D:EB:44
Certificate issuer: /CN=A91A6CD6/serialNumber=CC56157C72DCC69733636743DB500875932DA41F
Certificate serial: 0712
Authority key identifier: CC:56:15:7C:72:DC:C6:97:33:63:67:43:DB:50:08:75:93:2D:A4:1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYVfHLcxpczY2dD21AIdZMtpB8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/A210E7309CAB11EBAB87D43AC4F9AE02.roa
Signing time: Thu 20 Aug 2026 22:43:45 +0000
ROA not before: Thu 20 Aug 2026 22:43:45 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 45937
IP address blocks: 202.4.175.0/24 maxlen: 24
2001:df6:5d80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.crl
rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYVfHLcxpczY2dD21AIdZMtpB8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 21:47:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1810 (0x712)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6CD6, serialNumber=CC56157C72DCC69733636743DB500875932DA41F
Validity
Not Before: Aug 20 22:43:45 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a878321-6ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:db:62:05:1c:b7:71:6e:da:de:70:58:21:48:
72:3f:c9:fd:34:b8:46:c5:38:ee:79:3e:ad:de:d8:
4a:2b:fa:91:5c:02:d6:cf:42:e4:82:6d:94:67:13:
70:2f:c9:f9:9f:48:d0:43:e8:a0:f8:a0:71:13:70:
0a:db:a2:68:a0:93:4f:6b:43:e2:33:de:ce:32:8e:
61:fa:04:65:96:93:4e:81:7f:e5:a5:2a:36:7b:1b:
8f:ca:8c:27:60:df:a9:33:33:ce:5c:2b:4c:7c:f5:
37:6b:55:c0:86:24:d3:2c:94:d2:e7:9f:33:60:af:
3a:19:e7:a3:d6:88:05:62:41:7d:99:d5:48:8f:01:
92:e2:2f:69:7a:02:be:b8:e9:b9:91:7e:fe:b4:86:
1c:ea:9d:8c:5b:75:ce:11:68:fd:f4:64:4e:21:e7:
29:04:80:ba:a4:f6:aa:b0:e9:e5:53:e9:ef:fe:3c:
5a:ea:09:da:9e:06:9a:5b:d9:6e:32:08:71:7b:c4:
ed:b7:30:a6:05:69:b1:c7:0b:10:9d:df:59:7e:d6:
7a:23:4d:4e:b2:2a:17:23:78:09:88:37:70:c1:99:
6a:61:a4:f4:29:9a:00:4a:c6:98:ff:ec:ef:ad:da:
c1:a3:82:2c:10:2e:6c:0b:55:7d:21:b7:b1:86:bc:
a8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:95:3E:CE:14:B1:75:0F:75:66:BE:CA:BE:F7:55:B4:2E:8D:EB:44
X509v3 Authority Key Identifier:
keyid:CC:56:15:7C:72:DC:C6:97:33:63:67:43:DB:50:08:75:93:2D:A4:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYVfHLcxpczY2dD21AIdZMtpB8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/A210E7309CAB11EBAB87D43AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.4.175.0/24
IPv6:
2001:df6:5d80::/48
Signature Algorithm: sha256WithRSAEncryption
46:f8:1b:1c:e6:d2:1b:0e:e5:ad:42:93:7f:ee:4d:ed:ca:f3:
ca:76:2b:80:84:65:b8:ce:ee:94:ae:84:dc:66:2b:99:6e:4c:
1a:7b:58:3d:eb:fb:2e:6b:f1:3d:e4:c5:d3:ae:34:da:09:10:
21:7c:ec:55:ce:b2:64:ce:06:d4:b2:42:e7:f4:5c:14:20:7c:
fd:f9:1f:8b:89:ab:8c:c9:95:5a:9d:b8:fd:aa:db:b3:f5:95:
2b:cf:b7:73:89:28:20:07:17:e6:8f:69:68:86:8c:31:f0:c7:
91:85:fe:0a:95:48:14:90:5d:3f:d6:67:3f:50:fa:2b:bf:c0:
6c:44:17:76:55:6d:1d:ea:c1:0c:5b:ae:47:d6:40:2c:92:0c:
ec:df:10:b2:d2:e1:d4:d6:8f:d5:c5:01:99:4f:c1:6f:b2:92:
e7:48:bd:1a:97:f6:17:4a:2d:af:cc:db:6c:5f:01:b8:ad:ca:
25:a8:0d:ab:28:db:1e:56:ba:47:2a:66:aa:fa:b9:b0:c5:da:
bb:32:b5:6e:55:a2:c2:42:b3:8f:c3:a2:9e:4c:86:30:f6:48:
aa:1a:5d:bc:2f:ee:dd:9d:0b:a5:3c:ac:45:9b:9a:81:c2:cb:
e5:ce:e3:2a:7e:74:37:a6:30:d5:d7:71:d5:f9:00:16:cc:d5:
d6:91:3d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:35:26 2026 by rpki-client