
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A944A/C1B02FB6745911F1AD6BC85471A30FBC/4A1DDCFE745A11F19A94FBE371A30FBC.roa
File: 4A1DDCFE745A11F19A94FBE371A30FBC.roa (raw, json)
Hash identifier: wxDp7QQv0o/XYRhug2yQvsBtwLXyenDR4hEs1yuyn9s=
Subject key identifier: AF:A8:61:6B:BF:8B:86:6C:F3:00:79:09:C0:BB:15:52:CA:D5:2D:B5
Certificate issuer: /CN=A91A944A/serialNumber=D6915581CF53AC689938F72DA8BF35BDACEB381D
Certificate serial: 02
Authority key identifier: D6:91:55:81:CF:53:AC:68:99:38:F7:2D:A8:BF:35:BD:AC:EB:38:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pFVgc9TrGiZOPctqL81vazrOB0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A944A/C1B02FB6745911F1AD6BC85471A30FBC/4A1DDCFE745A11F19A94FBE371A30FBC.roa
Signing time: Tue 30 Jun 2026 08:04:16 +0000
ROA not before: Tue 30 Jun 2026 08:04:16 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 150183
IP address blocks: 2001:df1:6001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A944A/C1B02FB6745911F1AD6BC85471A30FBC/1pFVgc9TrGiZOPctqL81vazrOB0.crl
rsync://rpki.apnic.net/member_repository/A91A944A/C1B02FB6745911F1AD6BC85471A30FBC/1pFVgc9TrGiZOPctqL81vazrOB0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pFVgc9TrGiZOPctqL81vazrOB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A944A, serialNumber=D6915581CF53AC689938F72DA8BF35BDACEB381D
Validity
Not Before: Jun 30 08:04:16 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a437880-5477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7a:20:84:67:f1:39:72:6c:53:48:ee:66:ad:
58:f5:4e:f0:d8:c7:a9:bd:b8:b0:aa:4b:ca:3d:f2:
e3:3e:64:04:36:95:80:e8:f0:4a:f6:ee:da:0a:bb:
4d:8b:f2:83:65:63:ae:56:91:cb:85:91:38:3d:ec:
7f:97:9a:01:1d:36:92:a6:da:60:66:96:fa:c7:ec:
d7:bc:0f:e4:a1:ab:f0:c9:94:01:7a:ea:1c:ce:92:
be:f0:a3:dd:40:ac:54:a9:8e:10:e8:09:8b:97:9c:
39:a1:93:af:96:71:8a:99:f4:40:d9:63:92:5c:dd:
f5:f6:9c:39:72:3d:54:80:ac:7a:57:72:3b:f3:69:
80:8d:ee:ea:ca:c5:30:a8:93:43:4c:43:81:b3:de:
1e:49:50:b3:34:1a:bb:32:f2:2b:62:aa:f3:79:e1:
24:02:3e:92:d6:d3:0f:b2:3e:e1:d3:a5:97:ef:0d:
ea:23:b4:a1:74:f6:c4:7f:50:dc:1d:aa:3d:12:c9:
11:7a:97:ff:fb:61:2c:3f:40:a7:8a:6c:42:18:39:
77:21:fe:c0:20:9c:17:82:ac:fa:d5:88:2b:c1:a1:
ad:a6:00:e7:48:ca:7f:45:ed:2f:06:cd:2f:a8:22:
33:d2:c5:6d:67:e5:8c:35:13:c4:9d:42:18:39:d9:
1b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A8:61:6B:BF:8B:86:6C:F3:00:79:09:C0:BB:15:52:CA:D5:2D:B5
X509v3 Authority Key Identifier:
keyid:D6:91:55:81:CF:53:AC:68:99:38:F7:2D:A8:BF:35:BD:AC:EB:38:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A944A/C1B02FB6745911F1AD6BC85471A30FBC/1pFVgc9TrGiZOPctqL81vazrOB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pFVgc9TrGiZOPctqL81vazrOB0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A944A/C1B02FB6745911F1AD6BC85471A30FBC/4A1DDCFE745A11F19A94FBE371A30FBC.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df1:6001::/48
Signature Algorithm: sha256WithRSAEncryption
83:3d:6d:af:98:74:c1:60:fa:5b:a1:42:66:b1:94:9f:dd:00:
36:97:e8:3a:81:20:7d:6c:b4:dd:41:9a:9e:a2:6d:3f:c8:6f:
63:36:13:31:c8:11:0e:66:4c:b2:02:21:4b:54:4e:cf:8c:08:
d2:f4:c2:26:11:25:9e:80:5e:ac:f2:f4:db:b6:f7:b7:d4:c2:
20:1e:4f:d0:d1:7d:be:eb:02:25:91:da:2b:94:f2:db:69:39:
83:68:b6:d3:12:7c:b9:3d:e8:b2:63:17:db:42:3f:89:6f:39:
c2:3e:e1:f4:f2:d4:12:21:45:7f:ba:85:86:93:b7:a4:0e:ef:
46:38:9a:c5:f7:8f:bb:d3:33:37:e4:9c:dd:81:92:81:ed:c1:
bd:c5:3f:91:a2:7d:40:51:14:17:93:11:65:b6:3d:2a:41:d8:
51:5a:f5:59:41:f3:05:4c:e5:02:47:be:39:eb:06:7e:49:ef:
dd:e9:b8:5f:cb:98:a5:a5:5b:5a:65:4f:59:58:f2:7e:66:a7:
07:1c:21:25:e0:8d:08:44:87:93:ed:26:15:be:3f:a1:ca:78:
89:39:f4:ce:fb:ac:26:63:75:98:aa:92:c6:45:2d:64:38:f8:
48:4d:ed:bb:9e:10:90:48:85:2e:90:d6:90:74:15:62:36:07:
82:31:7c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:06:25 2026 by rpki-client