
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/8F6A0892437611EC9E067020C4F9AE02.roa
File: 8F6A0892437611EC9E067020C4F9AE02.roa (raw, json)
Hash identifier: y7JlO2eVn5CGG014i1w2l8zlQaUpGUw0Z7qDmj0ckcI=
Subject key identifier: BA:84:4F:A0:BA:BB:D9:BF:73:A5:39:1E:D1:12:9B:0B:43:89:15:64
Certificate issuer: /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
Certificate serial: 09AA
Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/8F6A0892437611EC9E067020C4F9AE02.roa
Signing time: Fri 12 Jun 2026 20:24:03 +0000
ROA not before: Fri 12 Jun 2026 20:24:03 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 57401
IP address blocks: 2404:c140:956e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl
rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:24:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2474 (0x9aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEDFD, serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
Validity
Not Before: Jun 12 20:24:03 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a2c6ae3-64cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:21:2b:cf:68:01:fd:d5:d8:5f:86:25:32:b4:
98:4d:22:9a:74:af:68:eb:f8:bb:1e:4b:5c:87:d9:
7b:73:29:65:40:b9:22:15:6f:9a:b4:b3:17:e7:80:
0a:3b:39:24:70:28:6c:c0:cc:e9:12:21:ca:b2:a7:
96:b3:52:24:96:e0:70:2c:0c:24:a3:03:fd:1d:a7:
bd:f4:33:20:a5:a3:d7:55:22:b9:52:db:c5:df:72:
7b:8d:02:6a:67:5f:6d:91:d0:8b:ab:0c:5a:99:1d:
2d:94:41:03:e5:9e:6c:75:c4:73:95:96:0f:bc:d1:
7e:67:95:0c:54:1d:81:5c:da:c0:7e:1f:50:18:9a:
9b:17:f7:94:19:73:fc:87:c9:5c:db:6f:44:7c:58:
24:ef:41:69:14:50:a6:df:54:1e:18:f2:7f:a8:23:
c5:98:18:6b:d2:f5:39:66:35:36:fe:4a:9d:b1:42:
1c:07:d5:89:8e:a9:af:00:75:ac:3e:ae:52:8b:41:
4a:78:00:3d:0a:f7:2e:dc:82:11:76:ce:b0:c3:d6:
24:26:76:47:1a:eb:b9:5f:d5:ad:89:df:a2:9d:8a:
31:40:75:75:21:e9:3c:a7:ed:30:f0:fa:47:61:d1:
90:a8:4b:9b:67:26:6c:bd:24:36:01:9e:64:c4:79:
82:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:84:4F:A0:BA:BB:D9:BF:73:A5:39:1E:D1:12:9B:0B:43:89:15:64
X509v3 Authority Key Identifier:
keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/8F6A0892437611EC9E067020C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2404:c140:956e::/48
Signature Algorithm: sha256WithRSAEncryption
05:e6:c5:9b:04:d5:98:b1:32:89:be:46:bb:38:b6:fe:57:d4:
a5:da:8b:6e:a5:4a:de:87:07:ab:9c:6a:57:8e:ac:1d:a8:d0:
60:08:09:d6:eb:cf:2d:4f:e4:7a:e6:23:7c:1e:dc:5f:f2:5e:
8f:b8:e1:d7:39:cc:d1:c7:35:3d:c0:8c:aa:b8:e1:f2:d0:7c:
3a:f4:a8:eb:70:dc:cd:74:8e:6e:17:04:13:7c:37:30:e1:69:
d1:11:fd:43:19:7c:8c:6c:67:83:1a:6e:3b:11:d1:b4:cb:4e:
dd:35:2e:ee:74:0c:2c:b3:79:f3:a6:c7:6e:a5:53:dc:0e:22:
80:fd:19:5d:df:63:81:90:ea:0a:90:79:64:21:9d:d1:81:20:
bb:17:e0:f7:7e:56:1b:f1:90:70:73:ce:e5:f6:cc:eb:7c:ab:
81:14:b8:b4:79:f3:3a:a1:45:17:00:0c:39:f2:bf:53:3f:42:
69:49:ec:b8:54:f7:46:8c:d6:bd:c5:b5:22:69:99:ca:af:c3:
d0:35:76:91:f0:96:38:75:4f:d8:09:99:07:cf:8b:2a:e5:7f:
80:97:c4:4a:1d:0a:c3:0d:63:07:b7:d1:6a:e3:6e:32:74:c9:
7d:22:78:bf:8b:d4:2b:63:62:10:22:c6:27:15:db:e6:13:c1:
6d:16:04:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:03:17 2026 by rpki-client