
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/FFD36784600111F19064A2768247A888.roa
File: FFD36784600111F19064A2768247A888.roa (raw, json)
Hash identifier: V3bllZSRhm3+TX1SYEI07qXQ37w5NHGT/3GcjZvebcg=
Subject key identifier: 6D:F3:C1:CC:44:DE:D6:00:0B:0D:95:30:E4:20:23:9B:E1:39:DF:E3
Certificate issuer: /CN=A91CE5A6/serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286
Certificate serial: 020D
Authority key identifier: 62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/FFD36784600111F19064A2768247A888.roa
Signing time: Thu 04 Jun 2026 10:41:53 +0000
ROA not before: Thu 04 Jun 2026 10:41:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53813
IP address blocks: 129.127.226.0/24 maxlen: 24
129.127.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl
rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:09:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 525 (0x20d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE5A6, serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286
Validity
Not Before: Jun 4 10:41:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a215671-136c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:c7:3a:5d:fb:1d:1a:c7:69:c4:a7:6f:70:
43:e8:bc:f3:b3:9b:82:b4:21:82:a2:83:46:88:b6:
6e:c0:f2:53:f2:26:b6:36:a5:4c:96:70:41:44:9a:
13:4a:58:5f:e2:15:70:24:34:3a:85:98:bb:ad:45:
e7:12:a4:47:a2:33:52:48:7b:87:6f:30:39:35:28:
ae:a8:d1:aa:b0:8b:c2:47:5c:b2:24:20:21:f5:d4:
7e:99:1f:8d:fa:22:78:16:75:a3:d2:03:41:4a:1f:
0e:82:0c:55:48:83:ef:d7:14:76:c5:7d:4c:89:70:
64:92:23:7d:c7:f5:fc:ba:37:b6:8a:1a:ed:ae:a4:
8b:1c:d7:01:a6:64:af:74:4c:37:9c:20:79:f8:06:
8e:9e:9b:af:4c:cc:41:70:96:20:ef:0f:75:9a:31:
35:17:c5:34:92:b8:6d:44:d7:0d:2f:b1:83:d0:cd:
ee:45:40:18:ff:ad:4b:f2:d2:eb:93:76:ca:33:a0:
1b:e8:62:41:d9:70:d9:6a:35:0b:1a:a1:ac:b1:f2:
06:e2:24:11:0f:0d:88:55:45:6d:91:71:8c:d4:4d:
49:fb:46:32:a4:58:73:cd:9e:85:95:f8:57:f8:f8:
4f:75:f6:03:d4:f8:4d:4f:4d:09:23:89:25:58:7c:
6d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F3:C1:CC:44:DE:D6:00:0B:0D:95:30:E4:20:23:9B:E1:39:DF:E3
X509v3 Authority Key Identifier:
keyid:62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/FFD36784600111F19064A2768247A888.roa
sbgp-ipAddrBlock: critical
IPv4:
129.127.226.0/23
Signature Algorithm: sha256WithRSAEncryption
af:3b:a9:6b:dc:63:71:07:86:a6:b7:72:18:82:ea:ad:bf:7d:
95:7b:b7:8e:56:09:3e:2e:ea:dc:fa:d7:fb:86:3a:5c:90:23:
35:21:54:33:86:04:5a:fe:35:a2:d1:7a:e5:05:ab:20:d6:60:
56:82:9e:74:fd:98:19:8b:87:38:20:47:c5:3b:5c:b4:12:11:
2b:fb:fc:f7:f6:ab:0f:29:11:17:d0:54:ea:d7:4e:c7:4c:f8:
d4:e1:05:16:dd:27:ef:16:46:65:2e:8e:b0:57:fa:16:86:39:
2c:49:20:46:c3:79:d7:06:2b:f0:a4:be:f3:5a:74:8a:c5:2a:
62:d5:76:bd:22:23:a0:34:5c:9c:46:fb:b2:d2:b4:e0:f8:39:
c4:59:1c:bf:c0:ec:2e:0c:38:52:04:4f:24:78:14:7d:01:3d:
16:86:04:9e:5f:f9:59:bb:cb:ed:0f:b1:b9:43:1c:e1:ac:cb:
0d:55:1b:2c:5a:f2:fb:bf:4e:c3:a3:0e:cf:af:83:82:10:09:
ee:b1:81:69:51:18:a2:60:a7:8f:3d:f0:ef:ab:fe:b4:99:4c:
71:95:9e:c5:32:2a:e6:9b:78:7d:31:fe:3a:f2:04:bc:0f:c9:
44:79:a7:96:9f:fc:0c:db:1e:5c:db:c1:06:e4:79:21:9a:01:
5a:6a:de:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:03:45 2026 by rpki-client