
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/02BA60CCDADF11F08398647877D3641D.roa
File: 02BA60CCDADF11F08398647877D3641D.roa (raw, json)
Hash identifier: VTqipcXUO8c22f+xXYM6JyBDiLleZ9VVpmvmijuhsTw=
Subject key identifier: AE:EC:21:96:94:D1:E9:60:85:0B:BC:C1:66:16:E8:82:3D:25:A2:9C
Certificate issuer: /CN=A91CE9D6/serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74
Certificate serial: 0AF1
Authority key identifier: 13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/02BA60CCDADF11F08398647877D3641D.roa
Signing time: Tue 28 Jul 2026 20:39:20 +0000
ROA not before: Tue 28 Jul 2026 20:39:20 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 138398
IP address blocks: 2001:df0:c480::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl
rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 20:39:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2801 (0xaf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE9D6, serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74
Validity
Not Before: Jul 28 20:39:20 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a691378-2c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2b:a5:44:0a:e0:60:ae:7d:0b:22:33:1f:f6:
3e:76:ca:b9:61:a4:1a:1d:40:6d:4e:70:bc:d2:34:
58:6e:59:97:94:d5:3a:41:ef:12:f0:ad:63:1c:85:
6f:f0:b2:8d:f7:1d:c5:11:2d:a5:58:6c:ff:0c:72:
2d:f9:fb:e1:da:93:67:e4:2c:a9:0b:06:0c:fc:45:
d1:73:d9:f3:ca:a6:59:73:ac:31:78:aa:8f:74:2e:
1a:72:5f:61:57:5c:b4:cf:b2:40:50:a3:54:0c:3a:
fb:be:45:75:56:d0:3f:ec:13:68:fa:84:2b:16:38:
77:5b:f4:2f:a6:ba:10:e6:5e:46:63:99:64:7c:f2:
18:66:1b:3b:86:a8:25:9d:54:0f:88:a6:58:72:5e:
a6:6f:95:e1:2b:77:d3:4d:aa:ad:f5:69:2d:f4:61:
79:43:2b:7d:b8:7e:50:e5:bc:82:a2:41:57:1f:a4:
fb:69:41:ff:1a:5e:43:1e:02:00:27:c5:92:d3:d9:
ba:12:24:18:f4:1f:99:99:bb:05:df:9a:bd:37:ad:
9d:9b:eb:23:b4:4b:e8:62:da:09:06:3e:c3:89:25:
3b:67:3c:c0:25:2f:b0:53:ad:57:d6:d4:bb:a5:3c:
68:e7:51:1a:60:6d:39:46:54:98:7b:a2:d6:f0:18:
b7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EC:21:96:94:D1:E9:60:85:0B:BC:C1:66:16:E8:82:3D:25:A2:9C
X509v3 Authority Key Identifier:
keyid:13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/02BA60CCDADF11F08398647877D3641D.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:c480::/48
Signature Algorithm: sha256WithRSAEncryption
32:a3:1a:b4:aa:76:dc:98:4b:37:33:ad:d1:8e:a0:c6:b7:57:
bc:57:ec:f7:90:e7:c1:2a:38:0e:df:74:4f:46:e1:54:3b:7c:
77:50:1f:37:2e:fc:65:61:ee:2c:db:33:42:fb:5c:bc:b1:2f:
cc:5e:a6:a7:66:5a:04:4b:df:73:47:a4:a8:82:4f:87:64:71:
7f:ae:c5:5b:3f:bc:5a:4c:da:82:aa:7c:76:2b:37:8f:b4:29:
b1:a1:3a:2d:7b:f6:48:33:ab:95:0c:15:23:5e:f5:06:a9:6e:
cc:42:22:b4:b5:63:11:83:2d:f6:7c:61:aa:25:fe:e5:9e:1b:
ce:71:8a:f8:e4:cb:27:8e:fd:3d:62:9b:77:cd:93:53:65:8b:
b9:b6:ce:28:b1:f7:f1:d9:4f:a7:94:10:b5:c2:96:54:4b:2c:
78:48:3d:18:a8:98:bd:13:4c:f9:6e:2e:32:07:34:e2:35:54:
a3:3e:13:ac:9b:fc:f9:6e:c3:a0:61:38:44:0e:53:3d:b6:08:
82:e5:32:01:95:b6:d5:74:7e:06:10:ed:67:6d:b8:bf:03:f4:
56:03:36:df:9c:a3:3b:4b:da:15:26:a6:25:a5:c6:8d:2f:f2:
44:fb:7f:91:d5:52:55:74:54:57:24:80:d8:d3:8f:80:a0:77:
2b:50:e2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:09:56 2026 by rpki-client