
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5674F86CC2BC11EF9A776235C4F9AE02.roa
File: 5674F86CC2BC11EF9A776235C4F9AE02.roa (raw, json)
Hash identifier: ztMDxL9BpzBVCXFmSpoHlFHJ8cBnHxGzbugpyQa6NFc=
Subject key identifier: 7F:0F:76:F1:A1:A6:0D:56:63:A3:12:4A:F4:FD:36:47:70:D3:2A:88
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 5EB7
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5674F86CC2BC11EF9A776235C4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:19:25 +0000
ROA not before: Thu 28 Aug 2025 14:56:23 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 153428
IP address blocks: 2001:df4:a8c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24247 (0x5eb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:56:23 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a60cec-5897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c4:6c:53:c6:91:e0:e8:b1:97:3b:c1:8a:45:
57:49:72:0e:91:be:0c:f8:2d:35:e7:82:ed:93:82:
4c:65:58:52:f7:81:0e:25:43:88:ab:2f:dd:8f:b1:
26:0b:21:6c:9a:6a:fb:f8:33:29:e8:ee:a4:bc:9c:
f2:91:22:ba:6a:01:04:d6:ed:e7:6c:b2:1e:8a:50:
cf:b6:22:db:66:30:e5:5a:ca:39:3f:d4:31:e5:ba:
b7:56:f8:1f:75:d7:09:51:c9:a3:8c:a1:c2:6b:bb:
e7:e4:04:07:01:7d:8e:42:1c:b9:8e:d3:e0:d1:43:
e8:cb:15:45:43:ca:6d:64:75:de:48:aa:91:89:87:
ff:f2:4c:2a:da:1b:e8:a5:aa:1b:4c:88:85:68:a7:
ca:1a:a4:b0:69:ab:7c:ab:ae:e5:d5:7c:86:81:5c:
20:52:92:73:11:cb:cf:20:02:47:fd:61:9e:52:d3:
24:47:ed:b0:3b:a2:de:23:40:aa:a1:ec:9b:28:43:
1c:51:ce:21:39:7b:64:24:4f:1a:e9:19:5b:27:77:
74:63:b4:80:b7:f3:b1:82:62:20:e0:c7:17:4e:69:
a4:51:68:19:84:85:48:9f:c7:3e:d5:66:39:c9:2e:
6a:ce:5a:e0:49:f2:0d:4e:5f:d8:bf:f7:35:f5:55:
07:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0F:76:F1:A1:A6:0D:56:63:A3:12:4A:F4:FD:36:47:70:D3:2A:88
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5674F86CC2BC11EF9A776235C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:a8c0::/48
Signature Algorithm: sha256WithRSAEncryption
49:15:d8:d0:cd:9f:a5:d3:6e:05:2c:d1:3b:b1:62:18:06:30:
b5:55:27:c2:7e:1a:6e:4d:fa:e5:7c:86:f1:62:99:92:00:15:
17:63:d1:ed:84:cc:09:61:9e:e9:fd:37:3f:07:97:ee:90:66:
a7:2a:c7:a2:41:9c:6e:c6:f6:89:30:07:1a:6e:94:fc:d2:b6:
b9:6b:6d:b8:31:89:98:9f:48:3c:f6:b8:0c:1d:4e:80:bc:cc:
cf:f7:c4:44:9b:9d:73:0f:7c:42:48:48:2d:2b:4c:d4:f3:a2:
81:cd:df:1f:41:b5:b5:08:82:e2:f3:6e:44:79:cb:16:3a:6b:
1d:44:50:95:a9:81:e1:63:05:45:be:dc:d9:c6:4b:57:2e:e9:
8e:d7:f1:a0:e2:57:55:18:f2:42:8b:68:8b:77:2f:60:85:51:
dc:ff:02:5c:07:81:ac:3b:b2:85:8e:09:cb:7a:d7:9b:1b:f1:
b6:77:69:12:9d:9a:c0:ee:ef:6a:fa:8a:52:6c:4a:9b:19:ff:
98:72:5b:de:82:8c:11:90:22:79:b0:58:aa:d7:31:e6:af:26:
cd:82:19:9f:fc:ec:af:fe:16:6b:9a:44:ef:df:ac:aa:6b:e1:
89:60:57:2b:3a:e5:13:91:f3:02:4b:11:99:e7:c8:d0:9c:1d:
e1:ff:d9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:47:43 2026 by rpki-client