
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/904FFA4A89E011F19D4A2A975611F970.roa
File: 904FFA4A89E011F19D4A2A975611F970.roa (raw, json)
Hash identifier: f4w8/RoAlGzHTiWVuDFuDfN0UYQ4NDHr3btTiYDqHLQ=
Subject key identifier: CF:53:D4:04:F4:1B:C2:8C:60:BC:65:FA:2E:24:05:87:88:43:43:EC
Certificate issuer: /CN=A91C7EF2/serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921
Certificate serial: C6
Authority key identifier: 6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/904FFA4A89E011F19D4A2A975611F970.roa
Signing time: Mon 27 Jul 2026 17:28:21 +0000
ROA not before: Mon 27 Jul 2026 17:28:21 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 147314
IP address blocks: 2402:1960:2000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl
rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 17:28:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7EF2, serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921
Validity
Not Before: Jul 27 17:28:21 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a679535-8dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4f:78:15:43:f9:56:db:fe:09:09:bb:0c:de:
37:35:05:9e:b5:22:c7:75:26:c1:8f:1c:8f:4d:77:
c1:bf:83:0f:d5:46:f1:08:f9:b9:13:d3:37:89:dd:
81:89:33:cb:43:b1:d6:d2:aa:dc:fa:2f:b6:14:b5:
f7:ec:61:58:6d:97:e9:c0:9e:93:e6:2e:f0:e6:0a:
23:a3:08:77:00:f9:88:27:16:8e:50:14:46:20:ed:
12:ad:8a:85:1e:42:7a:a7:51:99:ba:64:64:7f:f2:
f6:3c:32:31:c7:c1:42:9c:ce:c1:a7:53:19:d0:c2:
8a:72:f7:0a:61:12:03:73:d1:03:54:58:79:2e:61:
5d:01:54:80:44:17:68:12:8b:e8:f6:45:40:88:d7:
cc:96:1b:ac:b4:20:3f:55:c6:a4:14:ea:ca:d3:41:
a7:38:4d:44:6c:98:f7:16:7d:be:d2:8a:d3:8c:7f:
34:a1:ba:1e:10:06:a0:4a:91:30:fe:7e:4f:ac:12:
96:71:f0:3c:64:b8:25:9d:08:53:68:a4:45:3d:03:
5a:17:b1:f9:1c:04:c0:70:a9:61:bc:0d:aa:39:71:
d5:92:92:20:6b:34:e2:5a:57:b0:ad:7b:3f:a0:2c:
f7:df:29:a2:9f:e4:69:2d:4d:c9:85:64:59:de:58:
5c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:53:D4:04:F4:1B:C2:8C:60:BC:65:FA:2E:24:05:87:88:43:43:EC
X509v3 Authority Key Identifier:
keyid:6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/904FFA4A89E011F19D4A2A975611F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:1960:2000::/35
Signature Algorithm: sha256WithRSAEncryption
19:97:78:ca:27:97:ac:4f:f7:1f:aa:45:cf:a9:62:d0:6e:d8:
b4:ef:00:5d:fd:0a:0f:35:e2:2d:dd:87:6c:5f:f4:a8:7f:5a:
5b:68:19:a2:24:a7:e4:43:3f:a7:f6:61:31:20:78:b4:ce:c6:
39:1e:4e:59:e8:05:b4:61:7f:f8:74:2b:36:da:9b:a0:78:30:
a4:9b:cd:c6:12:92:41:da:ff:8e:83:9c:9f:53:b8:a4:8a:3b:
b9:c5:d1:41:43:a8:47:d7:4b:65:7e:7c:79:2b:c9:f5:53:9c:
18:95:97:44:8e:ed:d8:78:b6:ff:be:c3:53:10:33:ac:2c:c8:
52:d7:4d:4b:1e:c2:3b:38:4b:a2:7b:46:9e:1d:67:00:8c:b2:
b7:45:46:95:50:ab:e0:db:f8:9d:eb:6b:25:bb:23:9d:3d:3d:
38:de:f2:76:9a:7b:10:d8:9b:ad:9c:f8:3b:10:89:c0:8d:a4:
51:63:08:35:48:2d:27:af:96:f5:3f:7a:5a:ec:af:8d:6d:b4:
81:31:fb:82:29:a7:c5:f1:2e:9d:ef:be:81:33:63:fb:c7:1e:
63:b8:47:c6:be:3b:35:77:90:99:93:5f:2d:f1:6d:01:3b:4b:
e5:67:5d:72:b8:97:d9:15:d3:2a:19:6e:7c:51:b5:1e:74:07:
a2:db:f9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:24:28 2026 by rpki-client