
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/EDE3E1EE306D11EB9AEE3E86C4F9AE02.roa
File: EDE3E1EE306D11EB9AEE3E86C4F9AE02.roa (raw, json)
Hash identifier: ltfUKJwTqWZFi+ETCGh0pHEPgtdhF2qDnHtNgnGUkF0=
Subject key identifier: 19:FC:38:A9:AA:0C:DE:0D:F0:C4:28:90:E8:34:E6:16:95:56:3A:C3
Certificate issuer: /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
Certificate serial: 0F26
Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/EDE3E1EE306D11EB9AEE3E86C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:38:36 +0000
ROA not before: Tue 02 Sep 2025 18:38:04 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 51089
IP address blocks: 2405:84c0:fd00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl
rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 17:43:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3878 (0xf26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4C60, serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
Validity
Not Before: Sep 2 18:38:04 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a487ac-66cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8a:e9:d2:47:b1:00:7d:0e:dd:b3:02:d0:4a:
3a:f3:25:39:56:9d:42:ae:21:4d:02:21:14:9a:c0:
2d:ef:94:80:82:5f:5c:e4:6d:e9:2a:f5:70:9b:25:
e4:27:41:ae:11:49:d8:49:03:dd:2b:f6:5d:58:1d:
24:61:04:8d:80:ae:ba:bb:2f:30:ea:39:f3:bd:d9:
db:4c:12:4a:69:8a:df:c9:fb:ba:e5:5b:ae:69:46:
a0:b8:78:ed:cc:d7:4a:4d:58:28:25:ae:9e:eb:c5:
16:f8:9b:90:5c:b6:e3:8c:ae:cb:45:5e:17:b9:b4:
66:15:e2:f3:b2:df:8b:e9:27:a1:8f:8f:f2:ea:73:
5a:46:6f:fc:ce:32:28:b7:23:67:7a:42:2d:ef:e5:
0b:47:19:0e:05:78:2d:5e:b4:73:74:00:d0:ec:19:
93:7e:73:3b:d2:0b:67:0a:12:9e:34:42:3f:f7:bf:
b5:71:6e:98:8c:57:1c:20:fe:0b:32:6a:b9:8c:7f:
cb:38:a7:4c:8f:94:59:12:b3:40:76:3a:e8:50:f7:
44:79:9e:72:3d:e9:21:c9:0a:77:92:d9:af:de:0e:
c9:4d:80:23:22:71:b4:79:9a:21:80:61:cf:e3:c6:
3b:9a:51:f5:2b:2f:74:3e:f3:62:d5:80:67:36:81:
b4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FC:38:A9:AA:0C:DE:0D:F0:C4:28:90:E8:34:E6:16:95:56:3A:C3
X509v3 Authority Key Identifier:
keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/EDE3E1EE306D11EB9AEE3E86C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:84c0:fd00::/40
Signature Algorithm: sha256WithRSAEncryption
a8:24:d5:1c:9e:e7:b2:2d:fc:ad:f2:95:d5:27:e3:1b:05:ca:
1d:86:50:c4:ec:55:f9:87:c7:f5:3b:66:b1:85:34:a1:1a:e2:
f8:df:50:95:23:35:0d:61:c0:e7:0a:00:e9:4a:e4:a6:15:bc:
06:78:d7:76:5e:48:fa:92:93:05:83:92:70:41:01:25:4d:c9:
bd:22:67:06:b3:d3:58:b0:ee:98:d2:32:be:76:68:e0:26:0b:
46:40:a8:29:29:e6:b7:05:18:73:29:a1:2c:d6:e2:24:5f:be:
93:ab:e8:57:46:c1:21:21:8c:d5:c1:93:c5:67:92:3a:a1:01:
52:06:ac:27:0c:b9:06:d9:c3:b7:73:72:66:7e:24:39:bb:f9:
71:95:7c:53:63:d5:b8:1e:17:1d:4e:41:48:16:0a:25:e7:52:
5e:16:e3:8a:9f:cf:76:66:10:1a:30:f2:3a:1a:4f:bf:4c:f9:
c3:3a:77:ab:0d:19:ec:fd:bf:76:3f:71:41:18:c9:39:ca:cb:
4c:1e:b5:84:3e:de:6c:7e:d6:e9:17:23:7c:f9:d3:0d:70:6c:
d3:7b:88:38:e9:13:63:40:45:0c:30:41:f7:1d:40:cd:1c:95:
69:97:73:38:c7:f6:20:39:38:1c:8f:ca:d8:3d:4b:9a:9a:46:
76:39:28:f1
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgICDyYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRDNjAxMTAvBgNVBAUTKDlFRjlFNDM3NkUzNjY1MzI3NUM3OTYzNTk4RDZCNDVC
NzBBRjgwOTkwHhcNMjUwOTAyMTgzODA0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODdhYy02NmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApYrp0kexAH0O3bMC0Eo68yU5Vp1CriFNAiEUmsAt75SAgl9c5G3pKvVwmyXk
J0GuEUnYSQPdK/ZdWB0kYQSNgK66uy8w6jnzvdnbTBJKaYrfyfu65VuuaUaguHjt
zNdKTVgoJa6e68UW+JuQXLbjjK7LRV4XubRmFeLzst+L6Sehj4/y6nNaRm/8zjIo
tyNnekIt7+ULRxkOBXgtXrRzdADQ7BmTfnM70gtnChKeNEI/97+1cW6YjFccIP4L
Mmq5jH/LOKdMj5RZErNAdjroUPdEeZ5yPekhyQp3ktmv3g7JTYAjInG0eZohgGHP
48Y7mlH1Ky90PvNi1YBnNoG0uwIDAQABo4ICYjCCAl4wHQYDVR0OBBYEFBn8OKmq
DN4N8MQokOg05haVVjrDMB8GA1UdIwQYMBaAFJ755DduNmUydceWNZjWtFtwr4CZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEM2MC9CNTI2RkY3NEQ4
NDExMUU5QTQ1MjE0MTNDNEY5QUUwMi9udm5rTjI0MlpUSjF4NVkxbU5hMFczQ3Zn
SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL252bmtOMjQyWlRKMXg1WTFtTmEwVzNDdmdKay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTRDNjAvQjUyNkZGNzREODQxMTFFOUE0NTIxNDEzQzRGOUFFMDIvRURFM0UxRUUz
MDZEMTFFQjlBRUUzRTg2QzRGOUFFMDIucm9hMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAWEwP0wDQYJKoZIhvcNAQELBQADggEBAKgk1Rye57It/K3yldUn
4xsFyh2GUMTsVfmHx/U7ZrGFNKEa4vjfUJUjNQ1hwOcKAOlK5KYVvAZ413ZeSPqS
kwWDknBBASVNyb0iZwaz01iw7pjSMr52aOAmC0ZAqCkp5rcFGHMpoSzW4iRfvpOr
6FdGwSEhjNXBk8VnkjqhAVIGrCcMuQbZw7dzcmZ+JDm7+XGVfFNj1bgeFx1OQUgW
CiXnUl4W44qfz3ZmEBow8joaT79M+cM6d6sNGez9v3Y/cUEYyTnKy0wetYQ+3mx+
1ukXI3z50w1wbNN7iDjpE2NARQwwQfcdQM0clWmXczjH9iA5OByPytg9S5qaRnY5
KPE=
-----END CERTIFICATE-----
Generated at Fri Mar 13 11:18:17 2026 by rpki-client