
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/2EC0243A89E011F1B81BDF965611F970.roa
File: 2EC0243A89E011F1B81BDF965611F970.roa (raw, json)
Hash identifier: HlbEiXYQGYnUzE77dTv3Dl0fdaZ53XIDvfT5r88Cggw=
Subject key identifier: F9:15:B5:84:73:72:C5:00:C9:AD:B6:D0:05:E0:17:66:45:D5:E4:28
Certificate issuer: /CN=A91C7EF2/serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921
Certificate serial: C4
Authority key identifier: 6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/2EC0243A89E011F1B81BDF965611F970.roa
Signing time: Mon 27 Jul 2026 17:25:38 +0000
ROA not before: Mon 27 Jul 2026 17:25:38 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 135045
IP address blocks: 2402:1960::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl
rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 17:28:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7EF2, serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921
Validity
Not Before: Jul 27 17:25:38 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a679491-f57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:00:13:45:42:c0:64:40:a5:34:93:4b:74:15:
48:cf:56:34:0c:62:00:2e:b4:47:04:12:0d:83:e4:
5c:25:77:3a:4c:56:00:03:bf:62:4b:cc:4f:ad:4b:
51:a1:f3:fe:a8:80:64:ac:e9:72:36:e4:0e:e7:63:
a8:3c:eb:df:56:b0:3b:49:ec:15:29:f1:3b:dc:e1:
3d:55:87:9c:d7:c2:4c:0f:3b:b9:24:f4:97:ca:d0:
9e:2d:7a:6e:af:78:f4:4d:20:e0:c7:3d:d9:b2:55:
5b:82:da:89:39:57:6f:aa:f7:b6:0e:59:90:03:1c:
bd:3f:fb:21:46:ed:e3:ef:a1:b7:40:51:fa:64:1f:
98:0c:6d:a3:4f:e0:9b:88:f6:7b:36:3c:d5:e6:aa:
64:ab:16:71:c9:4e:c6:73:ef:bf:cf:0c:d0:ee:13:
f0:60:5e:4b:5c:69:60:4e:2f:4f:36:4e:0c:ed:4e:
d0:44:9e:26:16:c8:0e:11:06:75:91:70:19:bf:26:
ab:e7:42:71:ef:47:59:48:cd:87:a4:fe:ac:e8:61:
61:66:f2:40:d7:8b:ee:ef:e6:42:36:7c:5e:f2:be:
f3:af:a1:be:68:6a:8a:6a:59:b8:51:c8:37:92:41:
40:97:07:19:85:fb:95:db:92:32:0d:fd:29:60:30:
04:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:15:B5:84:73:72:C5:00:C9:AD:B6:D0:05:E0:17:66:45:D5:E4:28
X509v3 Authority Key Identifier:
keyid:6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/2EC0243A89E011F1B81BDF965611F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:1960::/35
Signature Algorithm: sha256WithRSAEncryption
04:d5:86:36:33:84:b5:aa:5e:9b:0c:eb:bf:a9:08:57:f0:20:
2b:57:b0:ba:40:ee:c3:ec:b5:2c:0c:04:97:b2:68:c5:1a:57:
e7:ef:3a:7f:69:07:60:ed:a9:5e:d1:b9:69:41:72:4d:95:bd:
1d:aa:6b:a5:c0:22:49:5d:4c:d0:ab:ed:cc:1a:23:d1:42:15:
db:51:91:52:00:87:4e:a4:b4:b4:fd:72:41:18:e4:26:81:d1:
7b:93:fb:16:1e:02:dd:2c:88:07:88:de:bd:99:93:65:20:38:
4f:5a:c1:81:69:55:52:29:ba:2a:88:df:83:0c:a3:f8:68:79:
20:fd:b1:b5:98:1b:f1:c8:81:e0:23:1a:27:92:39:ec:05:41:
bf:97:2c:23:42:f0:24:a6:69:58:2c:6c:80:62:b0:65:93:f9:
f2:23:da:74:7c:bf:0c:2c:c2:e7:a6:e7:07:a2:52:b5:1e:54:
e2:bd:ff:c4:1d:18:56:26:c7:17:8b:57:42:94:a0:75:c4:fe:
57:6a:f9:7c:49:87:33:79:91:bf:a9:01:c4:6b:5b:56:4c:40:
23:83:4d:5c:bf:a0:70:09:6f:7d:1e:a2:9d:66:ec:65:f6:c3:
e4:4b:10:bc:09:eb:3c:7c:27:ad:5e:f6:1f:b0:9d:65:27:67:
11:31:59:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:25:12 2026 by rpki-client