
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/D2FA5DBE6C1E11EEBB9EAB7AC4F9AE02.roa
File: D2FA5DBE6C1E11EEBB9EAB7AC4F9AE02.roa (raw, json)
Hash identifier: WE4tilJnxMItAtBCT07S2Erl2uxSYSGJMsy+8/FrfsU=
Subject key identifier: 97:B6:1B:07:C6:16:BC:BC:F3:5C:55:71:0C:AF:9D:D9:BE:EE:66:C9
Certificate issuer: /CN=A91BBCAF/serialNumber=27B2E662914822136B0962DBB5BA447C253F521B
Certificate serial: 023C
Authority key identifier: 27:B2:E6:62:91:48:22:13:6B:09:62:DB:B5:BA:44:7C:25:3F:52:1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/D2FA5DBE6C1E11EEBB9EAB7AC4F9AE02.roa
Signing time: Fri 09 Oct 2026 03:52:17 +0000
ROA not before: Fri 09 Oct 2026 03:52:17 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 151960
IP address blocks: 36.50.51.0/24 maxlen: 24
2001:df3:6c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl
rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 03:17:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 572 (0x23c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBCAF, serialNumber=27B2E662914822136B0962DBB5BA447C253F521B
Validity
Not Before: Oct 9 03:52:17 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ac864f0-66e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:24:3b:fc:84:5e:55:bd:d7:60:cd:bc:dc:08:
4b:83:58:dc:d4:13:39:da:db:a1:21:e9:d9:45:7c:
dc:55:24:23:07:47:32:d5:cf:73:4c:da:39:17:aa:
bf:e9:5a:46:6e:dd:63:cb:59:45:f6:d3:c2:16:f5:
0e:f6:ed:8b:dc:32:75:00:3f:b9:89:4d:95:3f:f9:
bd:8e:b2:a1:e0:a4:46:a7:63:f7:00:38:de:9e:40:
bb:03:ab:a6:98:bd:a8:f0:9f:4e:d7:58:7e:dc:4c:
b7:4c:e4:1d:16:a0:49:cf:14:78:69:85:86:91:c6:
9e:c6:7d:d8:ff:ce:bb:e4:8d:8d:98:9d:69:1b:fc:
e0:22:a0:68:e0:bd:d1:b4:50:78:f5:74:95:96:a5:
6b:c2:ed:ee:84:4e:89:f5:ee:27:11:e0:da:5d:17:
4f:fb:23:4b:93:83:a8:01:31:40:ec:d7:ce:cb:f1:
8d:46:d7:b6:31:1a:48:2e:72:9d:67:35:02:3f:ba:
f6:74:94:4a:de:7c:d4:f3:52:0b:f8:39:79:43:58:
e4:49:04:d5:17:ab:bd:5a:4c:f3:76:2b:b7:32:40:
b3:7c:fe:d9:a0:9c:33:4e:5f:8f:30:55:60:63:f9:
ba:96:4f:55:4a:cd:68:8c:f2:96:1d:c7:7a:ec:4d:
e5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B6:1B:07:C6:16:BC:BC:F3:5C:55:71:0C:AF:9D:D9:BE:EE:66:C9
X509v3 Authority Key Identifier:
keyid:27:B2:E6:62:91:48:22:13:6B:09:62:DB:B5:BA:44:7C:25:3F:52:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/D2FA5DBE6C1E11EEBB9EAB7AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
36.50.51.0/24
IPv6:
2001:df3:6c0::/48
Signature Algorithm: sha256WithRSAEncryption
28:0e:9e:3c:48:6e:62:70:bb:52:88:ab:19:0a:b5:6f:87:01:
b5:c3:de:54:48:66:f3:56:48:dc:74:85:9e:54:a3:07:e7:93:
b4:7f:03:c9:91:ba:62:a4:2a:67:61:43:ff:fc:43:ae:95:37:
8c:fc:86:53:45:5a:91:cf:fe:31:1c:34:57:cd:da:6d:b3:88:
96:7d:b0:99:35:03:3d:85:73:da:51:eb:a0:9f:92:a5:e6:dd:
7e:53:bd:c2:6d:3e:0d:17:a0:12:26:7b:93:8e:b4:77:97:73:
c1:76:38:b9:65:1a:9e:1b:41:b0:f4:c7:ce:52:a9:b1:8d:ad:
93:c2:9f:6e:90:b7:22:26:c9:d6:b5:2f:e8:a3:df:6a:ca:7c:
df:5c:a7:53:71:df:9b:1d:5f:88:5c:11:50:ee:ac:0f:e6:8c:
14:00:82:ac:72:57:70:b3:4f:07:b0:d0:5d:06:5d:b2:e5:ae:
6d:1f:75:97:25:60:8d:38:a0:8a:2f:e3:b7:22:c9:69:df:1e:
6e:b5:4a:0d:e7:6c:a2:8f:b9:2e:fa:d3:34:b4:a7:65:a8:63:
6b:8f:40:86:1b:96:b3:e9:f0:2a:43:48:ae:2a:58:e6:d2:52:
3e:1f:88:f1:c8:9d:31:41:90:7c:78:8b:7c:0a:ae:e4:b7:b7:
68:db:43:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:59:56 2026 by rpki-client