
$ rpki-client -vvf rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/A90DA1C0C71611EE9465BF5EC4F9AE02.roa
File: A90DA1C0C71611EE9465BF5EC4F9AE02.roa (raw, json)
Hash identifier: xOcV+Ws+Sc04FIxL3ePl5cuu7X8jyPVzdlvtQncOg3Y=
Subject key identifier: 23:90:DE:E0:A0:B8:ED:7D:18:F4:D5:D0:B4:A3:E4:F0:B2:4E:45:12
Certificate issuer: /CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Certificate serial: 022A
Authority key identifier: CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/A90DA1C0C71611EE9465BF5EC4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:09:56 +0000
ROA not before: Tue 03 Jun 2025 04:01:34 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 400618
IP address blocks: 2401:5a0:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 02:23:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 554 (0x22a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911710E, serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Validity
Not Before: Jun 3 04:01:34 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a59a34-f768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:85:c0:8b:32:64:27:dc:a7:bc:33:e4:1f:1d:
ed:70:4c:e7:27:89:e5:62:bb:da:8a:35:3e:e7:92:
04:04:b9:4e:fa:16:81:e5:07:d6:ac:76:67:84:06:
21:01:84:fd:fa:a6:e2:a6:a6:f6:91:70:24:ee:b5:
b1:43:71:db:d2:b6:d9:02:ec:0d:1c:04:f8:ea:ed:
68:c1:56:ff:c2:33:da:e7:72:0c:60:77:46:b2:4f:
64:58:11:00:f9:f6:25:fd:6c:6a:2d:be:68:f8:97:
74:b2:34:a6:36:54:49:5f:65:ce:8f:0c:f4:59:33:
7f:84:46:4a:94:1d:d3:66:94:d9:3c:6a:15:d9:a3:
ed:fd:28:84:11:04:ae:44:45:25:da:99:e9:91:a0:
63:36:48:9c:48:ed:e0:49:c6:5d:1d:7e:ba:13:ca:
56:68:cb:24:de:d8:af:f0:95:fd:5c:fe:74:d1:b0:
a0:1b:e0:7c:89:1a:5d:0f:3a:7a:8b:8f:a8:18:68:
e2:4c:ef:78:fe:f5:e2:11:fc:b1:da:54:13:0a:ec:
c1:57:0c:ff:c1:90:9d:3a:ca:a0:14:46:13:bb:e6:
f7:73:ce:1b:df:c8:82:e8:da:ad:32:42:95:ec:45:
73:b5:07:f3:a5:b9:49:94:b7:bd:cb:79:34:bb:02:
b7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:90:DE:E0:A0:B8:ED:7D:18:F4:D5:D0:B4:A3:E4:F0:B2:4E:45:12
X509v3 Authority Key Identifier:
keyid:CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/A90DA1C0C71611EE9465BF5EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:5a0:2000::/40
Signature Algorithm: sha256WithRSAEncryption
28:04:7a:2b:11:11:63:0b:bb:7b:7d:11:cc:d4:85:69:a8:d9:
ed:fd:82:2d:6f:96:f0:8e:b0:a6:a4:ef:77:cc:3f:3e:0b:48:
7a:1a:29:68:28:6c:56:cb:f7:9c:f4:4e:40:cb:a4:10:30:eb:
73:64:8d:b2:75:89:b6:fd:cb:47:cf:12:9d:ea:8d:41:f5:75:
49:02:81:71:b1:d8:37:a4:8a:6c:e0:29:3c:cf:2d:b2:62:bd:
9e:7f:e3:53:c3:fc:e1:74:07:e4:12:49:9e:53:66:f0:70:3d:
62:5a:3d:05:cd:05:d6:67:53:35:73:71:61:a4:9e:31:91:b6:
a9:5d:15:85:d5:04:77:a9:71:62:3c:b2:8e:d1:fa:e7:d4:40:
9a:2c:58:d5:15:91:13:ad:63:25:fb:33:6e:2f:b0:3d:e4:51:
de:22:40:ff:13:b3:e1:79:c5:ac:93:35:2f:03:b9:52:d7:50:
2d:b4:00:c4:a4:73:10:52:c8:79:12:4a:85:84:3f:89:87:73:
13:fe:2d:a1:37:c2:7e:0d:81:6b:35:82:69:10:ae:57:d2:84:
a7:6c:ac:46:05:35:00:5e:50:b2:d2:3e:01:b8:af:00:74:42:
6b:fb:09:bf:5c:3b:e0:4a:e0:5d:f3:6e:a6:fa:c8:06:4c:21:
53:9b:15:ee
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTcxMEUxMTAvBgNVBAUTKENEMTg0MUI2QzVCRUY3QzQ3ODJFNjdGNjYzRjNDMTk3
NDYxOTkzODMwHhcNMjUwNjAzMDQwMTM0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OWEzNC1mNzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtoXAizJkJ9ynvDPkHx3tcEznJ4nlYrvaijU+55IEBLlO+haB5QfWrHZnhAYh
AYT9+qbipqb2kXAk7rWxQ3Hb0rbZAuwNHAT46u1owVb/wjPa53IMYHdGsk9kWBEA
+fYl/WxqLb5o+Jd0sjSmNlRJX2XOjwz0WTN/hEZKlB3TZpTZPGoV2aPt/SiEEQSu
REUl2pnpkaBjNkicSO3gScZdHX66E8pWaMsk3tiv8JX9XP500bCgG+B8iRpdDzp6
i4+oGGjiTO94/vXiEfyx2lQTCuzBVwz/wZCdOsqgFEYTu+b3c84b38iC6NqtMkKV
7EVztQfzpblJlLe9y3k0uwK3OwIDAQABo4ICYjCCAl4wHQYDVR0OBBYEFCOQ3uCg
uO19GPTV0LSj5PCyTkUSMB8GA1UdIwQYMBaAFM0YQbbFvvfEeC5n9mPzwZdGGZOD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzEwRS9DOTNFMTc4QTAx
QjUxMUVFODlGNkVCNzhDNEY5QUUwMi96UmhCdHNXLTk4UjRMbWYyWV9QQmwwWVpr
NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pSaEJ0c1ctOThSNExtZjJZX1BCbDBZWms0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTcxMEUvQzkzRTE3OEEwMUI1MTFFRTg5RjZFQjc4QzRGOUFFMDIvQTkwREExQzBD
NzE2MTFFRTk0NjVCRjVFQzRGOUFFMDIucm9hMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAEFoCAwDQYJKoZIhvcNAQELBQADggEBACgEeisREWMLu3t9EczU
hWmo2e39gi1vlvCOsKak73fMPz4LSHoaKWgobFbL95z0TkDLpBAw63NkjbJ1ibb9
y0fPEp3qjUH1dUkCgXGx2DekimzgKTzPLbJivZ5/41PD/OF0B+QSSZ5TZvBwPWJa
PQXNBdZnUzVzcWGknjGRtqldFYXVBHepcWI8so7R+ufUQJosWNUVkROtYyX7M24v
sD3kUd4iQP8Ts+F5xayTNS8DuVLXUC20AMSkcxBSyHkSSoWEP4mHcxP+LaE3wn4N
gWs1gmkQrlfShKdsrEYFNQBeULLSPgG4rwB0Qmv7Cb9cO+BK4F3zbqb6yAZMIVOb
Fe4=
-----END CERTIFICATE-----
Generated at Sun Mar 8 10:48:30 2026 by rpki-client