
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F6697/FB332016A7F011F1B7A18DD06111F970/C6CD1F88A7F111F1B64CD5216211F970.roa
File: C6CD1F88A7F111F1B64CD5216211F970.roa (raw, json)
Hash identifier: UaimprQYq0eQREUYcfKRisgfFqpSVoX92BDSH1JKOvk=
Subject key identifier: 35:A7:05:9C:D6:32:E7:C6:79:9A:5C:EC:88:8C:76:72:29:60:3C:C2
Certificate issuer: /CN=A91F6697/serialNumber=EB58EC44157BFABD9B98250063AE47DCCAEABEE1
Certificate serial: 02
Authority key identifier: EB:58:EC:44:15:7B:FA:BD:9B:98:25:00:63:AE:47:DC:CA:EA:BE:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61jsRBV7-r2bmCUAY65H3MrqvuE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6697/FB332016A7F011F1B7A18DD06111F970/C6CD1F88A7F111F1B64CD5216211F970.roa
Signing time: Thu 03 Sep 2026 23:47:09 +0000
ROA not before: Thu 03 Sep 2026 23:47:09 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 139673
IP address blocks: 2001:df7:7240::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6697/FB332016A7F011F1B7A18DD06111F970/61jsRBV7-r2bmCUAY65H3MrqvuE.crl
rsync://rpki.apnic.net/member_repository/A91F6697/FB332016A7F011F1B7A18DD06111F970/61jsRBV7-r2bmCUAY65H3MrqvuE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61jsRBV7-r2bmCUAY65H3MrqvuE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 09:09:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6697, serialNumber=EB58EC44157BFABD9B98250063AE47DCCAEABEE1
Validity
Not Before: Sep 3 23:47:09 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a9a06fd-8e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:26:3d:95:13:25:db:c6:fd:fc:21:c3:75:6c:
24:29:16:b4:e0:db:06:b5:fe:db:68:af:87:b4:2d:
90:bb:db:a4:c4:8e:3b:d3:27:5d:a2:b5:07:93:d9:
6e:97:b4:8e:c3:ff:0f:6a:83:e5:a9:04:e7:3e:eb:
7f:86:39:9e:f0:9c:ac:44:32:f8:c9:4b:cd:3d:74:
a4:15:38:6f:86:9f:90:98:30:c1:49:8e:5b:62:73:
9c:de:7a:b0:c5:1c:32:ab:7f:65:52:bc:dc:32:87:
01:2f:ab:11:46:5f:a4:c4:1e:c0:ed:7a:03:3e:85:
33:15:36:a5:2a:1a:4a:ff:cf:c6:ad:ec:f9:9a:fb:
03:57:4e:04:3e:e4:47:6f:34:82:fb:68:e3:68:57:
8b:d4:18:18:4d:99:91:57:1a:3d:57:ee:60:09:78:
b1:84:93:4e:3a:20:7f:cc:6c:07:5a:f3:59:7f:7f:
ca:68:88:be:7f:d1:c9:74:d7:49:3c:00:66:d7:8f:
05:01:48:44:ea:a3:25:48:8d:36:0e:34:b7:97:da:
c5:01:55:f2:30:4f:a5:49:84:e0:48:75:72:8c:7a:
0e:4e:6d:98:1b:45:31:4e:7b:5e:7d:72:e8:19:b4:
b1:69:fe:1b:be:54:fb:c6:dc:3b:7c:16:be:3e:7f:
1a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A7:05:9C:D6:32:E7:C6:79:9A:5C:EC:88:8C:76:72:29:60:3C:C2
X509v3 Authority Key Identifier:
keyid:EB:58:EC:44:15:7B:FA:BD:9B:98:25:00:63:AE:47:DC:CA:EA:BE:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6697/FB332016A7F011F1B7A18DD06111F970/61jsRBV7-r2bmCUAY65H3MrqvuE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61jsRBV7-r2bmCUAY65H3MrqvuE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6697/FB332016A7F011F1B7A18DD06111F970/C6CD1F88A7F111F1B64CD5216211F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:7240::/48
Signature Algorithm: sha256WithRSAEncryption
42:22:7d:7a:6f:47:34:e3:fb:4a:aa:b4:fa:35:70:98:92:b7:
a7:81:eb:19:10:c0:9d:35:7b:f8:06:61:14:43:a3:a2:1e:b8:
91:1f:87:06:b9:ec:df:37:eb:f8:df:3c:ef:ca:ac:be:9b:37:
81:82:97:39:43:22:38:42:e6:3e:cc:78:10:69:d2:1f:1a:01:
64:34:31:cb:5d:23:16:7b:45:d8:c7:51:13:4c:8e:55:48:6d:
06:4a:1d:34:53:d8:96:74:7c:5e:6d:25:2a:b2:b5:ad:90:6e:
8e:4b:24:10:7f:19:e2:54:00:c3:68:5d:92:cf:69:99:d9:d6:
cc:4a:aa:48:3e:2d:f0:29:2f:0a:2f:26:6c:bc:68:30:3a:c9:
98:f6:88:a5:56:34:36:21:1c:b5:4e:02:3f:76:66:d3:85:d5:
2a:8b:be:8e:41:3c:38:bc:5f:d2:8d:3e:ee:b5:c3:c3:ff:9a:
ca:20:cf:c6:5c:15:87:ec:0e:49:8c:55:b8:1d:58:12:8a:fd:
fb:42:94:85:70:4d:2b:d3:42:f9:0a:12:63:61:94:43:92:94:
b2:1b:a0:3a:8d:61:cb:e9:32:06:3e:65:50:12:1c:15:9c:ac:
80:0d:a8:8b:53:d7:e3:5d:33:5f:ca:50:dc:d5:4f:0f:4f:9a:
75:db:c1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:32:47 2026 by rpki-client