
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/D60B1BCCB9AF11EE97EEDB49C4F9AE02.roa
File: D60B1BCCB9AF11EE97EEDB49C4F9AE02.roa (raw, json)
Hash identifier: d1toG7sLPjlZ/TNbgwuVBqOmKgkDBtISMVC/NGfqvrM=
Subject key identifier: F4:AB:8B:A7:50:AF:BA:B6:13:20:85:C9:B0:6F:1F:BF:90:1F:4B:FC
Certificate issuer: /CN=A91CFD5A/serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46
Certificate serial: 018E
Authority key identifier: 4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/D60B1BCCB9AF11EE97EEDB49C4F9AE02.roa
Signing time: Thu 19 Feb 2026 03:24:04 +0000
ROA not before: Thu 19 Feb 2026 03:24:04 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 152342
IP address blocks: 2001:df3:6540::/48 maxlen: 48
2001:df3:6540::/49 maxlen: 49
2001:df3:6540:8000::/49 maxlen: 49
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl
rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 03:24:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFD5A, serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46
Validity
Not Before: Feb 19 03:24:04 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69968254-ef11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9d:e0:7a:eb:9a:df:2e:d4:fc:74:5a:fb:3d:
e0:1c:2b:ed:4a:c6:49:d2:2c:e8:ce:2f:34:6f:a3:
1f:0f:3a:42:2a:fd:57:9c:16:77:c4:87:d5:31:9d:
09:8a:4c:30:8a:e3:0e:f7:c8:5c:cb:d9:9f:59:80:
52:78:62:16:b5:47:d7:a3:0b:7d:fb:31:68:c9:7d:
30:8b:bf:5c:e1:26:f6:29:2a:1a:3a:25:9e:64:a3:
5f:f7:9c:15:c8:40:81:c3:6e:14:7c:c4:57:9d:d8:
0b:1e:20:5a:2c:d5:64:7c:3c:b4:9b:73:32:f3:92:
85:c3:8a:0e:96:70:18:5f:8d:ce:66:de:7c:38:2e:
53:b1:bf:f3:f3:ec:22:cd:61:88:91:24:0c:84:fe:
51:17:6e:83:f9:e3:0d:a9:85:40:c0:8b:cf:ab:68:
92:1d:4c:a0:c7:b0:c2:ec:d7:d3:d0:5a:fb:86:ab:
9f:23:db:58:22:bb:18:b8:3c:93:ff:40:31:f3:05:
ae:d3:57:c1:c7:0a:16:a6:7b:26:e2:11:13:09:eb:
01:fa:27:62:fa:0d:40:ef:cc:87:68:81:c9:bc:2e:
d7:7b:4c:84:f6:8e:7e:af:2c:da:36:d8:30:e0:fa:
da:36:ff:84:0b:d9:a6:8a:f6:f3:dd:b0:ae:0b:74:
4d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AB:8B:A7:50:AF:BA:B6:13:20:85:C9:B0:6F:1F:BF:90:1F:4B:FC
X509v3 Authority Key Identifier:
keyid:4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/D60B1BCCB9AF11EE97EEDB49C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:6540::/48
Signature Algorithm: sha256WithRSAEncryption
46:e8:d9:c2:36:d2:98:6e:06:e8:59:51:07:ed:22:62:ba:a5:
4b:1e:44:bc:56:f8:3d:da:a4:c3:d0:ba:c0:2e:23:31:16:42:
34:85:8d:1f:0c:32:22:9f:90:cb:6c:63:3d:b9:46:d3:2e:e3:
ed:97:2b:38:85:75:48:25:cc:a3:9d:19:3d:db:83:eb:54:62:
74:92:be:c5:16:3e:c9:16:38:cc:4f:08:9c:8b:1a:ae:9c:06:
92:c6:47:50:0b:21:9a:21:ee:14:6d:69:f8:82:9f:41:11:98:
70:ed:79:c3:c6:7b:fd:8a:71:ef:af:de:39:c7:52:94:69:a2:
13:5d:fe:ff:d1:40:b7:44:62:6d:47:08:74:12:25:c2:b2:b0:
3b:3d:70:74:7a:51:67:e0:b6:98:d3:a6:af:42:c4:a5:f6:4a:
a8:a6:69:d6:e7:54:b7:41:58:d4:ea:00:db:35:bf:68:df:47:
b2:f6:e6:1a:e4:9a:b6:a7:53:45:f0:ce:e5:6e:c6:d5:46:ea:
d7:d5:8c:91:0a:59:9a:ec:cd:a4:e1:8f:da:5b:34:99:b2:75:
4a:a9:96:7f:a8:63:8a:72:a1:18:d7:a0:16:e9:6c:d3:8b:f2:
3e:eb:fd:de:ff:5e:10:9b:49:53:6b:47:00:a3:14:c6:5a:c9:
92:29:ec:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:41:14 2026 by rpki-client