
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3816FE9844B211EFA3EEED58C4F9AE02.roa
File: 3816FE9844B211EFA3EEED58C4F9AE02.roa (raw, json)
Hash identifier: LJUOyiGzkTRjsR7ELl9E1MrqWPIBJE/e0yuWEwBJuHw=
Subject key identifier: D4:4B:5E:A6:55:8A:DC:FC:DB:15:55:CF:81:92:38:E5:28:9A:CD:E1
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 5E9E
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3816FE9844B211EFA3EEED58C4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:19:01 +0000
ROA not before: Thu 28 Aug 2025 14:55:59 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 152949
IP address blocks: 2001:df4:dc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24222 (0x5e9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:55:59 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a60cd4-b856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:68:ce:2c:fa:d1:c8:13:8b:98:b6:f0:24:ce:
1a:79:09:06:77:d2:fa:7c:ea:e4:ca:c9:bd:63:68:
6a:d1:1c:9c:c1:f2:5f:7f:ed:5f:96:69:42:a5:87:
f3:d2:36:ec:d2:ad:4a:f5:35:26:30:9a:f8:28:41:
1c:6d:70:0f:cd:61:c3:37:92:7d:d0:30:ce:80:c1:
90:78:14:b6:b0:26:77:a1:0b:a0:38:a9:f1:bb:87:
d0:06:da:16:b3:21:05:7c:8a:17:b1:c9:6c:c9:c2:
dd:88:7b:be:8e:51:ef:01:0c:26:33:ec:81:4f:1a:
b5:ce:d5:dc:f4:d3:c7:0f:80:fe:78:43:45:50:0c:
f0:fa:a0:43:0c:70:e1:1f:ad:be:bf:76:9d:2b:81:
98:ef:38:6f:e5:f4:b8:55:0d:5f:cf:1b:1a:33:7d:
6b:15:3a:60:55:88:7f:f3:8f:5e:3c:0c:ab:9b:77:
93:fb:b3:9b:04:1a:c2:52:18:f1:b1:45:a5:2f:c3:
7b:dd:90:e8:18:50:38:12:6b:14:f8:4f:8d:5b:df:
58:47:c4:46:cd:36:83:e6:c7:ff:9a:bd:df:22:eb:
6f:82:01:20:37:04:1e:81:18:d0:1d:0c:0e:58:d6:
79:51:ce:36:0c:62:e8:ff:70:90:44:46:e6:cc:b1:
46:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4B:5E:A6:55:8A:DC:FC:DB:15:55:CF:81:92:38:E5:28:9A:CD:E1
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3816FE9844B211EFA3EEED58C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:dc0::/48
Signature Algorithm: sha256WithRSAEncryption
c2:17:df:95:19:8d:b5:42:36:40:4e:76:10:23:1f:6e:8c:00:
b6:b9:a5:dc:d1:5c:ef:7e:ce:11:0e:5e:c6:c9:dd:13:f7:8f:
8c:ef:f1:31:92:5f:d0:f7:f5:8b:f1:b7:21:14:56:ca:1e:c8:
79:d7:db:8e:52:25:21:31:11:37:40:26:4b:33:52:4a:73:19:
e9:4a:72:90:c9:f5:03:f9:36:10:67:38:d1:62:71:98:2a:06:
42:42:d3:80:5c:f4:79:5a:ab:a5:ce:d6:9b:68:fe:36:0b:f6:
bb:79:b3:ee:6a:9a:37:09:9c:84:0b:13:52:c9:0a:f7:6c:d0:
d4:dc:6a:96:55:d5:1e:8f:03:72:fc:c2:bd:17:58:a1:9f:1f:
31:9b:20:55:d1:29:80:02:30:93:b6:9f:3c:13:47:08:ab:6b:
25:8f:bb:c3:29:9d:68:27:7c:55:ca:0a:b0:23:f0:45:0c:85:
62:17:bf:b9:ed:5d:87:93:9c:4d:9a:d6:6d:bf:5e:f6:fa:82:
4d:a5:fb:15:7c:51:3a:94:27:93:09:d5:4c:08:c9:d2:75:7c:
3e:96:0d:60:16:51:27:41:66:7f:1e:0a:42:c9:fc:07:35:ab:
61:a3:ac:7b:e3:5c:8b:cc:01:03:36:b5:85:83:93:48:cb:a1:
2c:3f:6c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:44:08 2026 by rpki-client