
$ rpki-client -vvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/38C33A60AF8811E98C7EFC2AC4F9AE02.roa
File: 38C33A60AF8811E98C7EFC2AC4F9AE02.roa (raw, json)
Hash identifier: DLbTmFrFlPIxUN2XfAIKvCWHMwbAAUIzYG+0bkl/CNs=
Subject key identifier: 43:12:71:E1:E8:8E:95:83:E4:60:C9:C5:8C:6D:BB:4B:1A:EB:6D:CC
Certificate issuer: /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial: 13CE
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/38C33A60AF8811E98C7EFC2AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:33:39 +0000
ROA not before: Thu 14 Aug 2025 17:26:41 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 132253
IP address blocks: 2406:3000:53::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Mar 2026 16:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5070 (0x13ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Validity
Not Before: Aug 14 17:26:41 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a48683-c840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:23:87:7b:b9:5e:ef:a2:8e:af:8d:2c:2f:2c:
70:81:8c:90:1d:67:96:64:95:dd:46:43:f2:c4:f8:
ec:28:c3:8f:64:0d:22:7f:b5:75:98:62:39:89:20:
b3:bf:5e:b5:50:ec:2b:56:80:46:63:2e:e4:90:19:
b8:ea:96:1b:7a:98:fb:b0:24:f3:79:01:9f:6c:c0:
a6:27:0d:b3:e3:bd:41:43:52:91:4e:a2:ec:03:29:
bc:12:ec:a0:0a:4e:ef:a4:a2:36:bc:3e:cc:d2:f4:
a1:ed:6e:57:c2:b9:77:ac:8b:3e:1d:30:b4:35:31:
fa:a2:9f:dd:6d:5c:68:27:1b:01:b7:31:74:a5:67:
2a:6c:7d:fd:1d:a4:fa:35:b9:89:30:7c:e5:f7:f2:
18:9b:aa:f7:c4:99:8e:d8:77:74:72:6a:52:8d:91:
3f:fd:f3:28:54:f2:d1:81:70:9f:7c:38:e6:98:a9:
d2:55:ac:f0:18:92:50:ff:49:64:5b:58:50:6a:8a:
55:68:ee:88:66:d8:7e:97:bc:4a:e0:31:07:b6:68:
2f:3a:f2:8d:cc:4a:8e:6a:a2:ee:2a:50:1d:95:f5:
de:0c:56:65:b7:ee:62:4d:38:85:9a:7d:99:79:9d:
61:74:0f:ea:e4:ae:61:02:57:c9:81:49:de:65:bb:
0d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:12:71:E1:E8:8E:95:83:E4:60:C9:C5:8C:6D:BB:4B:1A:EB:6D:CC
X509v3 Authority Key Identifier:
keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/38C33A60AF8811E98C7EFC2AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:3000:53::/48
Signature Algorithm: sha256WithRSAEncryption
63:6d:df:3a:24:c0:ae:e2:5e:87:31:7e:56:bc:e1:db:ef:b6:
56:8b:9c:e7:f6:43:69:12:35:05:48:5d:98:74:84:2e:a7:a3:
df:9c:b9:c3:5a:11:45:29:1a:3f:b5:bb:b9:26:6b:1a:95:19:
c8:f2:62:f7:fa:b3:e7:4f:55:d2:b7:6e:93:80:09:c2:c5:8c:
f8:6a:f3:12:99:bf:5d:d8:01:f4:1b:a6:ee:0b:f5:62:50:92:
98:0c:35:40:5c:85:b8:4a:33:c2:d1:f2:69:63:24:83:0f:c1:
62:9d:e1:03:ec:ca:44:7d:ee:ca:77:d6:36:7d:71:55:b6:76:
cf:bc:ea:40:b6:d0:5a:8d:6a:a5:22:50:1a:bf:ec:ef:aa:ae:
c8:8b:3d:ae:01:55:47:56:c9:cd:5a:6e:90:23:15:6e:88:0c:
a6:43:44:54:f7:c9:7f:bd:bf:f8:3f:a4:49:aa:36:78:03:f3:
48:03:f9:b1:4f:06:b2:6a:60:b4:67:df:ee:b0:53:87:2c:e1:
33:a9:78:a2:ca:e4:45:f5:72:84:a8:fd:4d:26:b0:c7:5f:4b:
68:fb:dd:a2:85:69:b4:bc:c6:12:96:79:76:c0:76:e7:cb:8e:
f2:a8:2a:21:d3:d2:5e:6f:87:95:35:c6:98:74:a9:77:7a:02:
0f:69:0a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 13:28:47 2026 by rpki-client