
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/B57678E8D73711EEAECFA720C4F9AE02.roa
File: B57678E8D73711EEAECFA720C4F9AE02.roa (raw, json)
Hash identifier: qZHkcCPcJFjSvDR0QOW7y19FMhzGuwC1796zfkjvSlo=
Subject key identifier: D3:84:68:2B:6C:4F:43:9A:3A:D0:5A:EA:67:A0:BD:82:05:8F:5A:50
Certificate issuer: /CN=A91AC415/serialNumber=A82E6331EBF44F58FC659986DB0544C6615F26F1
Certificate serial: 01D4
Authority key identifier: A8:2E:63:31:EB:F4:4F:58:FC:65:99:86:DB:05:44:C6:61:5F:26:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/B57678E8D73711EEAECFA720C4F9AE02.roa
Signing time: Mon 27 Jul 2026 10:16:41 +0000
ROA not before: Mon 27 Jul 2026 10:16:41 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 152129
IP address blocks: 210.79.128.0/23 maxlen: 23
210.79.128.0/24 maxlen: 24
210.79.129.0/24 maxlen: 24
2401:5420::/32 maxlen: 32
2401:5420::/48 maxlen: 48
2401:5420:1::/48 maxlen: 48
2401:5420:2::/48 maxlen: 48
2401:5420:3::/48 maxlen: 48
2401:5420:4::/48 maxlen: 48
2401:5420:5::/48 maxlen: 48
2401:5420:6::/48 maxlen: 48
2401:5420:7::/48 maxlen: 48
2401:5420:8::/48 maxlen: 48
2401:5420:9::/48 maxlen: 48
2401:5420:10::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.crl
rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:55:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC415, serialNumber=A82E6331EBF44F58FC659986DB0544C6615F26F1
Validity
Not Before: Jul 27 10:16:41 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a673009-5158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2d:c4:fe:1d:3e:2a:73:1b:6a:c9:7f:4d:c9:
01:f3:3e:40:3d:2a:f9:85:e2:97:43:b9:65:38:37:
e6:f5:b7:2e:f9:3e:86:0c:b2:e5:7e:ea:67:5a:4f:
93:25:68:0a:17:b5:00:c4:6c:5c:1b:8d:e2:5f:14:
3e:0c:8a:49:e2:46:d8:25:2e:e8:87:4c:04:8d:ff:
ef:db:e2:b2:cc:09:53:61:42:8f:d9:cc:27:ba:c6:
6d:1d:3e:0a:a9:d8:24:e1:3b:d8:44:27:6a:35:59:
99:da:e9:4a:82:a4:c7:0d:b5:17:e8:02:76:97:cf:
8a:01:56:b1:42:5a:97:39:3e:1a:d7:f3:cf:52:5a:
ab:bb:e3:3a:72:ca:4e:10:55:b5:6d:33:35:33:9b:
56:4c:c7:6c:25:30:d3:c6:87:51:23:21:b6:76:ac:
75:8c:2c:66:19:1d:9a:ac:98:c4:17:f8:ca:56:af:
39:ec:42:9a:31:50:fe:1f:63:f4:31:73:41:5d:8b:
6e:81:4e:3c:2a:a8:48:e2:6a:12:6b:02:45:49:a2:
ca:4d:f3:b3:96:86:5b:09:7c:9f:7d:79:64:ac:fc:
69:00:ec:82:f9:25:73:1c:b2:ea:7a:f5:0c:06:b6:
77:68:21:3d:60:6a:b4:b1:7d:c3:84:b1:37:6b:00:
e2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:84:68:2B:6C:4F:43:9A:3A:D0:5A:EA:67:A0:BD:82:05:8F:5A:50
X509v3 Authority Key Identifier:
keyid:A8:2E:63:31:EB:F4:4F:58:FC:65:99:86:DB:05:44:C6:61:5F:26:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/B57678E8D73711EEAECFA720C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.79.128.0/23
IPv6:
2401:5420::/32
Signature Algorithm: sha256WithRSAEncryption
8c:3d:af:f3:25:0c:87:6b:e9:be:e5:28:61:4a:27:54:b5:dc:
44:bd:fe:e1:ac:ef:10:72:37:d5:97:1d:e0:eb:0f:47:37:fa:
aa:f6:46:43:59:b6:0d:4f:55:4b:4a:6c:6e:3d:84:53:ac:4d:
46:95:2f:fc:4d:dd:ac:33:a0:90:a1:8c:32:33:04:4d:60:c4:
9d:7a:b9:96:2b:ab:04:8f:9e:d0:d5:ad:85:98:c3:fa:2d:ee:
19:c9:ae:db:d4:e5:32:2a:0e:90:53:2d:7f:f0:84:7f:a3:7b:
8d:82:be:c3:2f:80:4f:6a:e4:a9:e9:61:9f:db:d2:84:33:90:
8c:14:c8:fb:46:01:32:29:91:e3:f6:ec:70:df:5c:09:c5:18:
ae:c9:3b:7c:1a:d4:17:87:c2:46:6e:4c:1d:59:7b:3c:d2:a4:
35:61:09:32:e8:3d:28:c4:0b:c1:3b:58:7b:2d:86:f9:ec:c5:
39:f6:8d:b5:fe:74:c3:77:79:2a:5a:5a:9c:e6:b5:2b:2e:77:
36:fe:f9:05:55:58:ff:66:0e:aa:ce:09:4c:18:da:ac:94:50:
cb:16:f6:5f:de:d4:1c:71:a1:e2:91:c0:1b:5a:2a:71:73:d1:
ce:67:66:4f:75:6c:34:66:5a:65:26:2c:e7:65:97:2c:86:04:
34:c2:ed:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:22:04 2026 by rpki-client