
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/81CDB96A53F111EB85FBFA19C4F9AE02.roa
File: 81CDB96A53F111EB85FBFA19C4F9AE02.roa (raw, json)
Hash identifier: d52/pTpfNEB3CiMijRJ81aMdpRpkY6spHWzuXYcjVLo=
Subject key identifier: 36:EF:2F:F0:F0:76:0C:E1:25:D4:64:2E:3F:46:03:11:C7:1C:73:E3
Certificate issuer: /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
Certificate serial: 0F27
Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/81CDB96A53F111EB85FBFA19C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:38:37 +0000
ROA not before: Tue 02 Sep 2025 18:38:05 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 59598
IP address blocks: 2405:84c0:ff20::/44 maxlen: 44
2405:84c0:ff20::/48 maxlen: 48
2405:84c0:ff21::/48 maxlen: 48
2405:84c0:ff22::/48 maxlen: 48
2405:84c0:ff23::/48 maxlen: 48
2405:84c0:ff24::/48 maxlen: 48
2405:84c0:ff25::/48 maxlen: 48
2405:84c0:ff26::/48 maxlen: 48
2405:84c0:ff27::/48 maxlen: 48
2405:84c0:ff28::/48 maxlen: 48
2405:84c0:ff29::/48 maxlen: 48
2405:84c0:ff2a::/48 maxlen: 48
2405:84c0:ff2b::/48 maxlen: 48
2405:84c0:ff2c::/48 maxlen: 48
2405:84c0:ff2d::/48 maxlen: 48
2405:84c0:ff2e::/48 maxlen: 48
2405:84c0:ff2f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl
rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 17:41:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3879 (0xf27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4C60, serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
Validity
Not Before: Sep 2 18:38:05 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a487ad-e8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:15:83:12:db:81:4d:42:d4:1e:76:bc:81:77:
c1:0c:8f:11:c4:3d:c2:29:80:d7:2b:fd:19:d1:4a:
b6:83:fc:3b:1c:ab:4a:99:c8:5b:36:77:3d:41:51:
75:97:ae:f6:df:1d:1d:37:f6:ad:76:41:52:da:95:
a6:02:50:25:74:66:0a:a8:86:4a:47:c7:7e:0b:b8:
e1:44:44:f8:8d:07:8c:94:50:1f:5a:01:a1:e1:a4:
e3:3d:92:5d:d8:5a:e8:12:24:33:82:95:58:7e:d9:
e0:43:60:f2:67:10:03:d1:58:fd:7e:f9:e8:56:6c:
9c:2c:fe:81:75:03:62:b9:67:02:cf:20:27:89:4f:
71:ef:b5:8d:90:03:36:71:35:35:f8:08:a4:7e:44:
7e:e9:6a:26:4c:fa:94:53:36:a5:f1:7e:2d:57:06:
7c:ee:1f:85:dc:f9:67:59:61:a9:8f:3b:df:b1:87:
54:ac:9e:69:4e:16:35:f7:dc:9c:e1:aa:6b:66:23:
e6:21:91:4a:6a:ad:48:84:81:34:8b:9f:be:c0:96:
10:4c:3c:db:0b:00:bc:91:62:4d:c1:7d:0e:15:fc:
7d:c5:ca:3d:e0:a8:10:b6:02:d8:15:58:96:b6:ee:
43:9f:d6:2d:bb:45:e7:d8:2a:cd:7d:f1:b5:c7:32:
ef:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EF:2F:F0:F0:76:0C:E1:25:D4:64:2E:3F:46:03:11:C7:1C:73:E3
X509v3 Authority Key Identifier:
keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/81CDB96A53F111EB85FBFA19C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:84c0:ff20::/44
Signature Algorithm: sha256WithRSAEncryption
20:dd:04:53:cc:b6:b0:be:7f:85:e8:f3:89:de:32:5c:20:57:
e2:2e:8b:20:3d:1c:81:ca:a0:24:06:87:e8:74:9c:33:ed:13:
77:47:5a:19:e9:5d:e2:00:30:ce:5a:09:da:2a:e7:d7:ab:7c:
ef:71:39:05:ae:45:8e:49:09:13:e0:6f:4c:c4:c9:f0:7a:9f:
df:47:3f:4f:2b:74:1b:05:76:5f:26:37:fe:db:1e:72:c1:34:
ce:f3:b4:61:72:57:56:b2:7a:4e:81:c1:a5:a3:cd:00:66:fd:
06:ee:05:ac:6e:35:eb:70:be:cc:9f:b2:ce:36:47:ed:f7:45:
43:d6:48:66:f5:ac:0a:45:b7:e3:61:dc:6a:f3:0b:49:b4:8b:
0f:9a:49:8b:47:79:f5:dd:46:96:43:81:43:39:fe:32:c2:38:
2a:20:08:bb:ed:bf:c7:7d:21:a5:77:bc:84:93:49:96:5d:54:
62:ed:a9:4b:87:cd:b0:78:20:a3:58:06:e0:f4:fb:2d:82:85:
73:a8:3b:b4:77:40:54:fc:bd:fd:90:20:0d:b3:c6:fd:2e:f8:
f1:4f:92:3a:30:b8:0f:de:d7:72:7f:6c:28:c3:31:a3:ec:6e:
21:d3:86:39:20:47:23:60:eb:3e:fb:ad:3d:fb:d9:59:0b:e4:
c2:14:92:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 13:29:10 2026 by rpki-client