
$ rpki-client -vvf rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/443241A0321B11EA83044473C4F9AE02.roa
File: 443241A0321B11EA83044473C4F9AE02.roa (raw, json)
Hash identifier: eY1w/uSuvZhy6UuNvgp5Bv6SKcJvF5lGQVhVkfevuMY=
Subject key identifier: 4C:3B:F4:50:1C:61:CC:FB:1C:F4:3F:5D:35:5F:A4:85:6F:DF:1E:94
Certificate issuer: /CN=A91771E3/serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5
Certificate serial: 13DA
Authority key identifier: 15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/443241A0321B11EA83044473C4F9AE02.roa
Signing time: Wed 28 Jan 2026 17:14:23 +0000
ROA not before: Wed 28 Jan 2026 17:14:23 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 24474
IP address blocks: 2001:dd8:24::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl
rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 16:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5082 (0x13da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91771E3, serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5
Validity
Not Before: Jan 28 17:14:23 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=697a43ef-6eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:56:31:b7:3c:e1:f6:9f:a2:5b:16:24:13:8d:
62:c0:b0:d5:fc:8d:4f:13:c9:c1:09:33:d5:76:7b:
de:36:ef:54:ea:2a:ec:9e:4a:3a:95:d5:74:cf:2d:
74:92:84:1c:58:9b:3c:07:ce:4f:76:85:4c:cc:87:
eb:ae:63:5a:13:61:2b:e8:12:17:82:86:e4:3c:f1:
25:f6:75:92:af:20:7f:3e:49:ca:7c:cf:26:47:02:
92:55:e4:6f:78:6e:ae:3d:f4:45:49:f2:d1:8c:de:
bf:91:04:bb:57:a8:d7:20:99:0b:34:70:21:e5:e6:
e8:c8:22:29:fb:df:ec:52:65:e1:59:b3:b3:39:9f:
e6:fc:ff:74:e7:ac:e8:98:64:50:a6:e6:41:34:36:
f2:64:9b:9d:57:09:0b:59:67:62:ac:95:90:ab:7c:
22:49:ee:1b:08:67:06:2f:fd:5c:0c:53:8c:84:52:
18:0a:3b:ca:83:ec:72:41:7a:0b:87:60:c0:87:2f:
f5:a9:b4:11:bd:df:10:35:6c:8d:8d:a1:b0:b6:48:
90:48:f8:67:37:b9:3b:fb:36:b9:bb:b0:8e:6e:3d:
ef:81:22:fa:e1:aa:dd:e1:bc:8c:75:78:ee:f2:76:
fb:04:49:5c:e3:01:e6:82:04:95:9e:fc:88:0d:e8:
4d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3B:F4:50:1C:61:CC:FB:1C:F4:3F:5D:35:5F:A4:85:6F:DF:1E:94
X509v3 Authority Key Identifier:
keyid:15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/443241A0321B11EA83044473C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:dd8:24::/47
Signature Algorithm: sha256WithRSAEncryption
55:a2:ec:f6:be:b6:de:46:9e:07:b0:b7:75:7a:00:c5:dd:7c:
21:1e:54:76:c4:c4:f2:1a:8b:28:86:d9:29:80:bf:a3:c3:40:
13:a2:88:34:97:ab:93:a6:ff:bd:ef:b8:7a:c9:d3:71:02:9b:
30:f6:7c:71:5d:52:9a:f8:43:35:34:c9:c4:e7:15:5f:ee:d9:
08:17:9c:77:a4:94:91:b1:55:cc:69:61:6e:78:7c:d8:cd:75:
a6:51:4d:a1:18:59:44:d8:b0:8c:e5:dc:0a:e1:ce:16:45:1a:
9e:d3:63:80:49:e8:83:bc:ba:f7:e6:34:bc:ac:ad:b8:cb:15:
26:9a:59:b6:24:4b:99:cb:8f:e0:5c:0f:95:fc:be:06:1e:58:
3b:b0:6f:5c:c5:a6:01:00:a0:2e:47:83:16:07:49:11:0c:b7:
4e:c4:5f:4d:e9:c7:98:f4:2d:2f:e5:e7:ab:63:79:ef:36:4d:
40:64:e6:a9:de:ac:13:e8:87:a0:ad:be:b1:25:66:39:45:2f:
29:0e:9d:e5:63:1a:95:b1:50:9b:9d:20:fc:df:77:b1:a1:6e:
9c:6e:28:6c:22:78:d2:5e:6a:bf:86:81:43:06:b6:ba:12:dc:
4c:10:e7:9e:da:cb:d4:32:f0:38:57:a4:b0:68:38:d3:d5:53:
7f:1f:34:90
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICE9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NzcxRTMxMTAvBgNVBAUTKDE1OTZDNEJCRTczMkRBODVDQjgzRThBNzcwODczRUEz
NDEzNzAxQTUwHhcNMjYwMTI4MTcxNDIzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTdhNDNlZi02ZWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt1Yxtzzh9p+iWxYkE41iwLDV/I1PE8nBCTPVdnveNu9U6irsnko6ldV0zy10
koQcWJs8B85PdoVMzIfrrmNaE2Er6BIXgobkPPEl9nWSryB/PknKfM8mRwKSVeRv
eG6uPfRFSfLRjN6/kQS7V6jXIJkLNHAh5eboyCIp+9/sUmXhWbOzOZ/m/P9056zo
mGRQpuZBNDbyZJudVwkLWWdirJWQq3wiSe4bCGcGL/1cDFOMhFIYCjvKg+xyQXoL
h2DAhy/1qbQRvd8QNWyNjaGwtkiQSPhnN7k7+za5u7CObj3vgSL64ard4byMdXju
8nb7BElc4wHmggSVnvyIDehNDQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFEw79FAc
Ycz7HPQ/XTVfpIVv3x6UMB8GA1UdIwQYMBaAFBWWxLvnMtqFy4Pop3CHPqNBNwGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzFFMy85MzgzRTY0NkFE
NjUxMUU4QUNCRDBENkFDNEY5QUUwMi9GWmJFdS1jeTJvWExnLWluY0ljLW8wRTNB
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZaYkV1LWN5Mm9YTGctaW5jSWMtbzBFM0FhVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzcxRTMvOTM4M0U2NDZBRDY1MTFFOEFDQkQwRDZBQzRGOUFFMDIvNDQzMjQxQTAz
MjFCMTFFQTgzMDQ0NDczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwEgAQ3YACQwDQYJKoZIhvcNAQELBQADggEBAFWi7Pa+tt5G
ngewt3V6AMXdfCEeVHbExPIaiyiG2SmAv6PDQBOiiDSXq5Om/73vuHrJ03ECmzD2
fHFdUpr4QzU0ycTnFV/u2QgXnHeklJGxVcxpYW54fNjNdaZRTaEYWUTYsIzl3Arh
zhZFGp7TY4BJ6IO8uvfmNLysrbjLFSaaWbYkS5nLj+BcD5X8vgYeWDuwb1zFpgEA
oC5HgxYHSREMt07EX03px5j0LS/l56tjee82TUBk5qnerBPoh6CtvrElZjlFLykO
neVjGpWxUJudIPzfd7GhbpxuKGwieNJear+GgUMGtroS3EwQ557ay9Qy8DhXpLBo
ONPVU38fNJA=
-----END CERTIFICATE-----
Generated at Fri Feb 20 01:39:54 2026 by rpki-client