
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/2851C57C88FF11F1BFED971F4A11F970.roa
File: 2851C57C88FF11F1BFED971F4A11F970.roa (raw, json)
Hash identifier: eSRwvGiAt/3oDdwVqUKijtcqc/uEjbLSCEwTPyQp47s=
Subject key identifier: 32:63:92:88:DB:E0:AB:18:2F:67:08:8C:1E:EC:07:FB:7E:22:72:16
Certificate issuer: /CN=A91FC19D/serialNumber=64B88BF5F6AA9BB1E911766C8DF95AE80F880677
Certificate serial: 03
Authority key identifier: 64:B8:8B:F5:F6:AA:9B:B1:E9:11:76:6C:8D:F9:5A:E8:0F:88:06:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLiL9faqm7HpEXZsjfla6A-IBnc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/2851C57C88FF11F1BFED971F4A11F970.roa
Signing time: Sun 26 Jul 2026 14:34:50 +0000
ROA not before: Sun 26 Jul 2026 14:34:50 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 149438
IP address blocks: 2001:df7:3e40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/ZLiL9faqm7HpEXZsjfla6A-IBnc.crl
rsync://rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/ZLiL9faqm7HpEXZsjfla6A-IBnc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLiL9faqm7HpEXZsjfla6A-IBnc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:39:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC19D, serialNumber=64B88BF5F6AA9BB1E911766C8DF95AE80F880677
Validity
Not Before: Jul 26 14:34:50 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a661b0a-a5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2d:66:76:ed:5c:f4:ab:a0:b1:8b:ab:b2:72:
6e:48:b2:c0:02:fe:90:3b:88:c2:92:3d:85:dc:12:
5a:a4:55:ac:2b:4f:50:89:ff:5b:99:aa:c4:8e:16:
36:be:f6:73:14:7f:0b:bb:e8:04:69:90:ae:87:67:
e6:7d:b2:9f:6b:67:78:b3:6f:e7:19:62:e4:13:43:
1a:e9:56:d5:81:52:ba:37:43:c0:04:3c:c9:80:3b:
ce:0b:2e:cf:d7:00:dc:ef:78:38:92:da:dd:cb:d4:
2a:71:60:a3:03:d4:11:61:51:11:fe:5d:f4:de:bd:
2d:61:4d:1d:1e:c5:ee:4e:a9:6d:1c:1d:ec:b5:fa:
62:ea:43:98:3d:69:44:29:8c:c8:0f:e7:87:5b:78:
c5:b7:0e:3d:b6:68:35:b3:b1:f5:07:27:d5:b9:3d:
66:4c:7e:62:a0:72:5e:88:0a:7f:58:36:e7:7e:e7:
09:06:8b:b1:0d:ed:e0:ed:47:a8:c1:cf:a7:db:b0:
02:1d:75:38:d1:61:8f:25:9f:29:15:be:16:9e:f0:
54:1b:9f:ab:fc:93:9c:47:43:12:ca:65:91:11:c3:
cd:1a:14:57:d5:a0:f3:a6:b3:72:fe:8d:fe:b5:23:
69:73:4d:77:aa:40:54:57:c4:a7:70:ae:a4:8a:25:
8e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:63:92:88:DB:E0:AB:18:2F:67:08:8C:1E:EC:07:FB:7E:22:72:16
X509v3 Authority Key Identifier:
keyid:64:B8:8B:F5:F6:AA:9B:B1:E9:11:76:6C:8D:F9:5A:E8:0F:88:06:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/ZLiL9faqm7HpEXZsjfla6A-IBnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLiL9faqm7HpEXZsjfla6A-IBnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/2851C57C88FF11F1BFED971F4A11F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:3e40::/48
Signature Algorithm: sha256WithRSAEncryption
4f:db:0b:49:5c:4d:4c:9b:31:cb:79:9d:49:28:af:b3:be:ef:
64:8f:06:1c:9d:28:71:93:38:fb:86:47:41:ba:48:bb:5b:e7:
6d:c3:84:88:1b:3b:37:73:4e:1c:68:6c:1d:09:f0:40:3a:63:
3a:e6:d0:f4:74:db:a2:6f:d3:1f:a6:80:03:5c:1b:5a:35:8f:
e7:c4:6a:92:71:1c:d4:f6:c2:51:ec:5a:58:1a:fd:c5:d4:72:
f5:52:08:9f:7a:e9:48:c7:54:d0:49:61:df:c5:8d:5f:fc:c6:
25:2a:86:f2:5a:c2:15:5a:59:6a:8a:19:90:55:48:3c:72:af:
c7:54:4c:36:eb:e3:dc:df:00:6f:7e:0f:66:3f:79:79:0c:be:
48:7c:52:21:f2:eb:bf:77:ce:f8:d8:34:6a:8d:a7:e6:ea:95:
10:c8:47:59:1a:38:d1:c7:65:5f:8d:b5:8d:97:7f:a6:c8:14:
9e:c8:42:4c:7a:e6:d0:59:bb:b0:43:33:6c:e9:0a:99:44:a3:
09:6d:91:44:c4:26:25:dd:08:42:df:84:46:c5:ab:95:ae:8b:
4a:50:70:55:c2:01:0a:20:1e:c3:57:e8:36:e4:c1:a2:95:1d:
ea:a4:4f:cf:34:ed:b2:b5:b9:79:0f:e8:3a:03:a0:33:78:0c:
92:5f:f4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:47:46 2026 by rpki-client