
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/2ADA37E6790F11EE99D7CB43C4F9AE02.roa
File: 2ADA37E6790F11EE99D7CB43C4F9AE02.roa (raw, json)
Hash identifier: Wwr1Eqq/L0YHNdQH3zpO8YtN+8gSRENMy82vCTfRXz8=
Subject key identifier: E6:AF:09:87:E3:47:DC:E4:E0:40:2B:06:15:AC:52:59:21:9C:C1:29
Certificate issuer: /CN=A91D6DBD/serialNumber=272D71AD62645775CCDFBB5770478E5943EA6595
Certificate serial: 01FD
Authority key identifier: 27:2D:71:AD:62:64:57:75:CC:DF:BB:57:70:47:8E:59:43:EA:65:95
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/2ADA37E6790F11EE99D7CB43C4F9AE02.roa
Signing time: Sat 13 Jun 2026 03:32:27 +0000
ROA not before: Sat 13 Jun 2026 03:32:27 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 17559
IP address blocks: 192.160.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl
rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:32:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6DBD, serialNumber=272D71AD62645775CCDFBB5770478E5943EA6595
Validity
Not Before: Jun 13 03:32:27 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a2ccf4b-574f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:21:84:9d:62:ad:62:da:a8:13:9a:ce:e2:
d8:69:9c:a2:85:81:39:59:e0:4b:81:6a:7d:e8:92:
13:98:28:9e:9c:7f:e7:d6:13:cd:be:9c:7e:a8:07:
49:9d:93:ef:2d:40:fc:21:59:e9:e0:5a:54:53:17:
9f:e8:1e:06:f7:48:57:e8:ad:03:d0:d4:e6:32:d9:
37:9e:7e:1d:d6:4a:a5:93:58:08:65:41:c0:de:2d:
3c:a7:f5:95:e3:9e:ca:11:06:01:51:9e:25:36:87:
8c:12:3e:df:41:e2:55:2b:59:49:97:c0:dc:9c:cd:
96:c5:3f:5e:10:ee:05:1f:a2:4b:d7:fb:08:46:0c:
bb:53:71:a1:88:1c:10:f1:c7:34:d0:20:54:43:13:
a2:8e:da:5f:3c:e1:1c:3f:17:09:09:e5:2d:83:48:
19:8e:56:2a:3b:51:c8:08:db:c3:50:a9:0a:70:24:
e7:f8:cb:58:80:80:64:22:fb:ce:0a:b2:1f:f3:c5:
ed:92:ab:ae:ce:75:2b:50:c9:c0:2e:57:9b:99:f9:
a1:e5:36:57:b1:32:d1:e4:64:83:48:a9:4f:4c:28:
ca:57:d3:93:6c:27:b8:51:13:38:da:9c:cf:09:68:
1b:5b:8a:48:33:39:9a:1d:46:57:16:f0:7f:0e:9e:
30:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AF:09:87:E3:47:DC:E4:E0:40:2B:06:15:AC:52:59:21:9C:C1:29
X509v3 Authority Key Identifier:
keyid:27:2D:71:AD:62:64:57:75:CC:DF:BB:57:70:47:8E:59:43:EA:65:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/2ADA37E6790F11EE99D7CB43C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
192.160.171.0/24
Signature Algorithm: sha256WithRSAEncryption
23:5e:7c:91:a3:9d:af:25:6d:dd:72:62:34:25:76:33:5e:96:
53:ca:b1:c8:a8:30:16:f1:9f:b0:31:95:2e:b6:1e:ce:c6:aa:
85:6e:16:61:f3:61:fa:73:69:d3:5c:c3:fd:95:fd:d0:7d:ef:
7c:32:50:ab:b5:98:6e:97:22:28:eb:8b:b7:af:c4:8d:d3:a2:
18:3b:02:2d:ec:2e:de:ff:0a:8c:4d:8e:e4:cf:6c:be:41:e6:
a2:ba:1c:e6:4e:17:a5:c4:42:3a:ed:08:ca:af:cf:d1:2f:70:
eb:d2:46:c3:ea:27:ee:27:4a:c4:1b:27:71:53:a5:62:f7:49:
9d:51:fc:96:95:4d:83:ea:14:32:bb:b0:75:6d:cb:86:74:3f:
c1:4a:03:12:a7:06:d5:37:06:02:d9:74:c7:20:e3:c2:19:0a:
a7:39:86:c2:70:59:f0:30:f2:5f:e9:eb:3d:70:c4:63:72:46:
db:07:bb:87:27:38:1d:7e:46:d6:bf:38:f5:d7:20:45:f5:7e:
47:2b:f7:b1:27:a5:dd:92:5a:89:86:d1:7e:90:be:cb:11:fa:
69:d5:28:9b:17:20:90:ef:9b:d2:b1:8e:1b:bd:82:54:71:6f:
e6:2b:5c:2b:6b:c0:cf:f0:a9:90:d4:1f:8d:36:22:3b:f0:10:
11:b0:4d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:41:09 2026 by rpki-client