
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/D80D96066C7F11EF92105459C4F9AE02.roa
File: D80D96066C7F11EF92105459C4F9AE02.roa (raw, json)
Hash identifier: GqOCo+Gys/z1j8c3oBwzkW0wbpmPF36OaClD0qOv/Zs=
Subject key identifier: 8E:4B:89:58:D4:F2:E8:2F:DB:F7:C7:3A:8F:5F:BE:31:41:92:77:E0
Certificate issuer: /CN=A91F8981/serialNumber=3214E260A78F7D1677E830137C1065730031CF66
Certificate serial: 017B
Authority key identifier: 32:14:E2:60:A7:8F:7D:16:77:E8:30:13:7C:10:65:73:00:31:CF:66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhTiYKePfRZ36DATfBBlcwAxz2Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/D80D96066C7F11EF92105459C4F9AE02.roa
Signing time: Sat 05 Sep 2026 04:54:59 +0000
ROA not before: Sat 05 Sep 2026 04:54:59 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 153175
IP address blocks: 2001:df4:1e40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.crl
rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhTiYKePfRZ36DATfBBlcwAxz2Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:38:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 379 (0x17b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8981, serialNumber=3214E260A78F7D1677E830137C1065730031CF66
Validity
Not Before: Sep 5 04:54:59 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a9ba0a3-07ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e1:5d:42:14:ef:32:10:7e:6e:77:26:90:28:
3b:6a:48:21:85:45:d9:df:f8:72:31:ea:3f:04:0a:
e7:89:64:a7:a9:22:85:ad:61:5d:4c:16:11:ab:3a:
d3:51:ca:cc:72:c0:5c:21:e6:db:9c:45:3e:ab:8e:
bb:28:2a:f7:a9:08:e1:4b:74:3d:83:91:9b:a8:a4:
0c:ca:ec:6c:99:b7:f9:4e:f5:f5:7e:d4:fd:84:7f:
63:d0:41:7c:6d:3d:ed:6c:ce:df:81:70:0a:ed:01:
a0:b5:8d:18:dd:f8:4d:58:fe:9b:ec:c7:c6:01:f6:
75:15:e1:73:87:db:0d:8c:33:55:81:3f:e2:f6:7d:
27:df:69:b8:9f:88:1f:5b:78:2c:56:00:f8:1a:ea:
8d:22:c7:82:5d:a5:9b:d6:c4:c5:92:e1:2e:c2:f0:
3e:68:44:d5:79:8e:fc:e8:0a:e8:e9:fd:75:cd:7f:
88:54:c7:60:c2:78:96:87:93:fd:9b:ce:30:b8:fa:
ae:78:58:bf:bb:83:5b:6b:15:30:47:49:20:30:2d:
28:1a:a3:e2:fe:98:14:5d:da:5e:ca:1d:a0:3b:c0:
67:4d:57:bc:c4:fe:d4:94:1a:3e:24:0b:29:b0:d5:
7a:55:19:2b:42:d9:83:43:2b:f7:be:78:e0:72:ce:
50:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4B:89:58:D4:F2:E8:2F:DB:F7:C7:3A:8F:5F:BE:31:41:92:77:E0
X509v3 Authority Key Identifier:
keyid:32:14:E2:60:A7:8F:7D:16:77:E8:30:13:7C:10:65:73:00:31:CF:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhTiYKePfRZ36DATfBBlcwAxz2Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/D80D96066C7F11EF92105459C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:1e40::/48
Signature Algorithm: sha256WithRSAEncryption
42:1d:55:74:27:b6:02:bb:86:cf:26:7b:b2:b0:61:96:f0:34:
a5:67:d9:8c:de:34:c9:82:d5:f4:1a:e6:4c:e1:38:ce:32:f8:
de:fb:c0:38:00:cb:56:48:46:08:e2:e6:6e:13:90:8a:24:29:
ca:d8:45:30:b7:3b:86:9a:5e:13:de:2d:92:33:dd:db:ca:cb:
01:bc:ca:e2:bc:11:4c:eb:d7:75:9e:dd:1c:c4:68:b9:b6:ad:
f4:b4:98:61:9b:cc:ab:07:87:d9:12:2e:9b:ef:ac:78:8d:18:
e0:41:68:45:e9:0e:98:e1:21:22:da:17:b5:fc:fa:7b:24:07:
e0:d6:53:5a:3a:90:66:dd:33:5b:81:15:a7:e7:b3:e5:ad:93:
7e:24:43:31:f9:8d:73:e4:57:e2:74:ef:45:be:83:8b:5e:66:
64:b2:35:5f:66:bd:95:31:9f:a1:7a:5f:db:fe:c9:b2:0f:6d:
e9:7b:45:eb:3c:c6:6f:31:a2:72:ce:9d:df:cc:5e:76:9a:a8:
98:a5:09:94:36:88:0f:51:a0:f4:c8:62:4f:24:01:22:06:39:
6c:b6:b0:ea:06:ae:be:af:fe:fc:e5:e0:5b:7d:33:d7:81:02:
e3:02:c7:8b:b9:7b:0b:67:25:d3:bc:8f:5a:79:d4:93:d0:d3:
a0:5e:ee:ed
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg5ODExMTAvBgNVBAUTKDMyMTRFMjYwQTc4RjdEMTY3N0U4MzAxMzdDMTA2NTcz
MDAzMUNGNjYwHhcNMjYwOTA1MDQ1NDU5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTliYTBhMy0wN2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzeFdQhTvMhB+bncmkCg7akghhUXZ3/hyMeo/BArniWSnqSKFrWFdTBYRqzrT
UcrMcsBcIebbnEU+q467KCr3qQjhS3Q9g5GbqKQMyuxsmbf5TvX1ftT9hH9j0EF8
bT3tbM7fgXAK7QGgtY0Y3fhNWP6b7MfGAfZ1FeFzh9sNjDNVgT/i9n0n32m4n4gf
W3gsVgD4GuqNIseCXaWb1sTFkuEuwvA+aETVeY786Aro6f11zX+IVMdgwniWh5P9
m84wuPqueFi/u4NbaxUwR0kgMC0oGqPi/pgUXdpeyh2gO8BnTVe8xP7UlBo+JAsp
sNV6VRkrQtmDQyv3vnjgcs5QaQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFI5LiVjU
8ugv2/fHOo9fvjFBknfgMB8GA1UdIwQYMBaAFDIU4mCnj30Wd+gwE3wQZXMAMc9m
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk4MS8yNzJCNEM3MDZD
N0YxMUVGOTE0RDdENTdDNEY5QUUwMi9NaFRpWUtlUGZSWjM2REFUZkJCbGN3QXh6
MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01oVGlZS2VQZlJaMzZEQVRmQkJsY3dBeHoyWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Rjg5ODEvMjcyQjRDNzA2QzdGMTFFRjkxNEQ3RDU3QzRGOUFFMDIvRDgwRDk2MDY2
QzdGMTFFRjkyMTA1NDU5QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN9B5AMA0GCSqGSIb3DQEBCwUAA4IBAQBCHVV0J7YCu4bPJnuy
sGGW8DSlZ9mM3jTJgtX0GuZM4TjOMvje+8A4AMtWSEYI4uZuE5CKJCnK2EUwtzuG
ml4T3i2SM93byssBvMrivBFM69d1nt0cxGi5tq30tJhhm8yrB4fZEi6b76x4jRjg
QWhF6Q6Y4SEi2he1/Pp7JAfg1lNaOpBm3TNbgRWn57PlrZN+JEMx+Y1z5FfidO9F
voOLXmZksjVfZr2VMZ+hel/b/smyD23pe0XrPMZvMaJyzp3fzF52mqiYpQmUNogP
UaD0yGJPJAEiBjlstrDqBq6+r/785eBbfTPXgQLjAseLuXsLZyXTvI9aedST0NOg
Xu7t
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:36:31 2026 by rpki-client