
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/F3CE961064A311F1A97DC0998B47A888.roa
File: F3CE961064A311F1A97DC0998B47A888.roa (raw, json)
Hash identifier: pejeTtYSguLZu0BW6m0RkH55kNdbMRCqIXu4V/iuKnc=
Subject key identifier: F7:B9:B0:B7:89:F0:A0:8F:58:E8:C7:66:7C:74:5B:27:F0:60:9E:85
Certificate issuer: /CN=A91C8A07/serialNumber=DA7EED89F853A050AA78F86681908C99C3510670
Certificate serial: 0A
Authority key identifier: DA:7E:ED:89:F8:53:A0:50:AA:78:F8:66:81:90:8C:99:C3:51:06:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2n7tifhToFCqePhmgZCMmcNRBnA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/F3CE961064A311F1A97DC0998B47A888.roa
Signing time: Wed 10 Jun 2026 08:11:16 +0000
ROA not before: Wed 10 Jun 2026 08:11:16 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 4846
IP address blocks: 2402:49e0::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/2n7tifhToFCqePhmgZCMmcNRBnA.crl
rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/2n7tifhToFCqePhmgZCMmcNRBnA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2n7tifhToFCqePhmgZCMmcNRBnA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 09:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8A07, serialNumber=DA7EED89F853A050AA78F86681908C99C3510670
Validity
Not Before: Jun 10 08:11:16 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a291c24-ad93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:aa:0c:ed:80:3a:ac:9f:9e:69:ae:d0:81:b3:
72:f5:b4:6e:64:67:ac:19:ca:b3:5c:6f:9b:d0:35:
47:fa:8d:a3:e4:1a:3b:cf:a2:e2:10:8f:b4:2c:42:
63:ad:d8:c1:03:46:9f:9b:84:1d:08:4a:2f:62:40:
0b:19:04:f8:e4:24:7d:97:32:65:cb:56:70:74:fa:
0f:49:22:ef:98:4b:72:84:a1:03:df:8a:02:fe:99:
e5:3c:c4:10:e9:e5:cd:13:e9:3e:cd:4a:d6:48:51:
b3:00:c7:00:e3:f1:9e:29:f3:01:a2:01:03:39:7c:
69:89:66:3a:16:b4:5c:11:24:6b:ec:47:84:3b:fd:
b9:70:7b:dc:e2:43:05:cb:63:ce:d9:8a:c0:9f:6f:
7d:57:40:bc:8c:bb:a6:0c:fa:c6:49:0d:85:40:24:
30:78:ce:8e:3e:7f:8e:6e:b0:fe:39:21:46:51:ce:
c7:0f:54:e0:bf:f1:3b:d3:b8:fc:c4:6e:bb:0f:fc:
5e:5e:8a:ce:0e:3e:3d:83:36:1a:c4:1f:ac:49:2a:
f4:2c:3b:2a:2c:ff:c6:0c:5c:65:b1:98:24:12:77:
46:7b:8c:b9:6c:ac:17:f6:8e:1f:89:96:fc:59:16:
d2:e4:32:b2:48:92:08:2b:17:6d:eb:10:18:71:3a:
3c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B9:B0:B7:89:F0:A0:8F:58:E8:C7:66:7C:74:5B:27:F0:60:9E:85
X509v3 Authority Key Identifier:
keyid:DA:7E:ED:89:F8:53:A0:50:AA:78:F8:66:81:90:8C:99:C3:51:06:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/2n7tifhToFCqePhmgZCMmcNRBnA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2n7tifhToFCqePhmgZCMmcNRBnA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/F3CE961064A311F1A97DC0998B47A888.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:49e0::/32
Signature Algorithm: sha256WithRSAEncryption
3c:ad:3a:ed:c2:b8:94:09:97:05:a9:b3:f8:4b:1a:c3:1b:3b:
73:c7:95:0b:0d:c2:45:89:be:14:29:86:d0:c7:17:69:2a:ce:
80:3b:b2:ed:12:6e:5e:20:89:1a:27:bb:aa:1b:8c:2c:8c:3f:
db:68:72:fa:f0:a4:d1:f7:94:81:51:61:20:66:f9:80:28:b0:
cf:88:cb:86:5f:e1:d8:8f:e5:bf:07:82:f5:03:7c:de:17:58:
47:9c:70:8b:82:08:a0:5b:6d:14:2a:05:b3:21:6c:e3:df:2f:
14:40:f7:9b:8b:63:44:7a:66:08:c2:3e:ad:43:9e:3d:e5:72:
8e:c1:13:fe:68:b2:a8:4d:4d:fd:27:f4:b6:52:58:93:85:2b:
1b:6d:3b:4f:dc:c6:92:42:5b:ef:ec:8d:4a:1c:cf:41:f9:18:
9a:37:92:58:25:bb:2e:47:75:d4:30:26:2e:9f:9c:b4:57:b0:
9b:67:32:da:2a:e8:e7:51:6d:cc:ff:2a:b1:55:e6:98:75:b6:
4b:05:99:b7:b3:f6:7a:7c:30:24:06:3d:0a:fb:81:cd:c2:83:
06:05:e2:36:13:8b:2a:78:28:e5:62:75:dd:da:eb:04:b7:c2:
e2:9b:3c:2d:ef:52:27:15:77:a1:0c:a0:ec:3f:a2:b5:c4:4e:
74:07:9b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:55:55 2026 by rpki-client