
$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/3590603EEA9911EDA6A36E18C4F9AE02.roa
File: 3590603EEA9911EDA6A36E18C4F9AE02.roa (raw, json)
Hash identifier: KAOajreZKNs6OhlZEEuG6IUQi2eX+xK6ACMq1TNvAF4=
Subject key identifier: EC:37:E0:67:B1:BA:22:A2:D7:E6:3D:95:F5:33:45:E1:AC:C0:CA:54
Certificate issuer: /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Certificate serial: 3176
Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/3590603EEA9911EDA6A36E18C4F9AE02.roa
Signing time: Sat 02 May 2026 16:18:24 +0000
ROA not before: Sat 02 May 2026 16:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140911
IP address blocks: 2405:2000:902::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 15 May 2026 15:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12662 (0x3176)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Validity
Not Before: May 2 16:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f623d0-1e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3c:d3:21:93:e7:24:95:d9:c9:d6:cc:bb:14:
f4:58:a6:95:6d:20:2d:bb:4d:41:88:cb:eb:f2:03:
00:0d:f8:27:18:6d:43:b3:71:93:2a:29:16:f3:9c:
08:83:41:13:27:e1:5c:53:e7:9a:3a:24:6d:f9:19:
9d:c0:25:da:06:ab:dc:57:ba:db:c0:69:ab:81:c2:
61:f4:86:7e:d0:ef:c6:ec:69:29:be:b0:63:18:42:
13:71:75:3c:9e:54:b0:85:51:73:87:e6:14:99:9f:
cb:ff:2c:01:c3:23:87:4d:c2:34:9d:3a:da:1d:6d:
fe:c6:29:db:b6:97:d2:d4:ac:69:01:06:30:c1:a5:
35:5a:ba:d4:ed:1d:bc:20:60:15:b8:92:51:83:65:
d3:b5:41:08:3c:99:df:e4:41:58:b2:4a:00:60:11:
1f:a0:16:ff:30:c7:1a:ef:54:0c:bc:f4:91:b1:08:
b2:df:6d:8a:7b:c6:41:af:f3:0c:fd:66:ea:10:cf:
c6:4b:1e:11:79:97:5c:55:29:88:6f:19:25:ec:40:
1b:2e:cd:99:23:80:ea:99:5a:59:dc:5d:08:6b:52:
e7:3f:f8:9d:02:8d:87:2c:9d:98:70:f6:25:da:49:
b3:d1:33:23:5e:b5:34:56:4b:2f:9c:8f:28:8e:4a:
bc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:37:E0:67:B1:BA:22:A2:D7:E6:3D:95:F5:33:45:E1:AC:C0:CA:54
X509v3 Authority Key Identifier:
keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/3590603EEA9911EDA6A36E18C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:2000:902::/48
Signature Algorithm: sha256WithRSAEncryption
60:6e:ef:ee:69:c3:e8:6a:b2:73:0e:f2:3c:f8:dc:fa:2f:22:
01:4e:de:2b:48:1f:9b:5a:18:82:42:c6:d7:96:57:87:a0:9b:
fc:b7:7d:7b:40:49:46:62:c3:0f:f9:8a:d6:6a:87:7e:11:69:
27:d7:4c:c1:e8:52:50:b4:e4:5b:f2:7d:ea:6a:0f:5f:7d:12:
51:be:38:a3:e2:1b:77:3d:fc:d5:93:7e:6c:7c:d0:fb:dc:e8:
c4:f6:14:54:8a:94:35:c3:7c:92:0e:e8:e6:91:e3:91:61:bd:
e0:82:9a:9f:04:6c:05:67:60:1e:cc:96:7b:2c:39:77:0c:34:
1b:91:3e:c2:8e:b7:95:98:8d:6e:0e:9d:65:1f:a2:f3:5d:42:
d6:68:60:e5:e3:99:35:51:bc:8c:5c:e6:ab:d0:9f:29:19:a1:
09:c7:56:94:02:a2:4b:be:9c:39:0e:b7:7d:f5:d2:92:54:7e:
63:a7:3f:f8:f5:d2:89:96:89:8a:04:e3:39:30:31:1c:62:ee:
54:f7:b2:96:d2:c0:36:92:b1:a7:3a:ac:26:b5:dd:a1:e3:9c:
5f:2d:42:23:f1:06:c0:87:53:f0:6d:2d:3a:9d:d1:fd:b2:3a:
a7:23:c8:eb:82:07:10:e2:4c:6e:2f:1a:48:b0:85:f8:66:5a:
7c:ab:26:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 19:27:33 2026 by rpki-client