
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5D9E700AE08411F09A71B4293D6F56BC.roa
File: 5D9E700AE08411F09A71B4293D6F56BC.roa (raw, json)
Hash identifier: FBan115x78xf5bqpsWBvfnXLs/bycR2FVH5pbrLgPD8=
Subject key identifier: 2B:C4:6B:F8:48:D7:51:4B:25:F4:51:B5:CE:35:9C:F4:FA:D0:51:2F
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6BC1
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5D9E700AE08411F09A71B4293D6F56BC.roa
Signing time: Mon 02 Mar 2026 23:30:25 +0000
ROA not before: Wed 24 Dec 2025 04:52:36 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 24035
IP address blocks: 2001:df0:19::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27585 (0x6bc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Dec 24 04:52:36 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a61d91-9927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:62:5d:30:91:c7:ad:f2:67:bb:f7:bb:e8:f0:
90:6f:db:68:86:fe:13:c3:f2:5d:63:e2:b4:36:3f:
ec:44:50:09:c1:f5:d3:85:fd:73:81:b8:ce:1b:2a:
b0:79:56:14:dc:c0:46:1d:3f:35:52:64:07:50:9c:
32:c8:88:eb:6e:a2:a6:b2:6c:c1:02:f2:9b:1f:f6:
c6:f2:e9:8f:eb:23:22:d5:5c:0a:e1:69:44:14:91:
26:36:ee:af:84:25:cb:a9:cd:b3:1c:d8:4d:f2:51:
e6:34:d7:7c:85:c8:b2:0c:c4:e2:06:c4:44:12:31:
3e:f4:1e:d9:bd:07:ca:6c:e3:cc:67:c7:e6:67:09:
31:7d:fd:27:bc:df:91:22:3f:18:42:59:a3:e8:c9:
ea:b8:d3:20:13:d0:29:40:07:7c:63:8b:68:3a:ef:
01:99:63:90:83:a0:57:f0:5d:9f:ce:9c:9f:8a:20:
b3:42:44:92:fc:8d:26:63:9c:1e:14:5d:1a:29:b0:
94:a3:09:bd:41:80:29:e8:7d:92:8c:79:a6:f9:b0:
32:02:85:d1:49:ac:81:88:28:b8:42:b0:21:63:c5:
0d:53:63:1d:6e:23:50:8f:8a:08:cc:ab:0b:6f:36:
31:0d:6c:51:ad:bb:06:24:5f:c9:fb:f4:ad:35:2a:
27:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C4:6B:F8:48:D7:51:4B:25:F4:51:B5:CE:35:9C:F4:FA:D0:51:2F
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5D9E700AE08411F09A71B4293D6F56BC.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:19::/48
Signature Algorithm: sha256WithRSAEncryption
4e:06:e0:21:0b:d2:0c:e6:6d:00:60:32:d7:49:4e:a1:e4:16:
90:b3:55:f7:a4:ff:dd:7b:8d:7e:47:d3:b7:5b:56:c4:9a:96:
7a:08:8c:e1:10:e3:a1:5a:aa:63:81:5d:74:e4:55:ed:e5:35:
6c:b5:50:f0:a4:6d:b9:7c:a3:12:e8:25:2e:ad:70:3b:b3:3a:
86:26:f1:ab:e2:1e:11:1a:0c:77:df:a8:e4:ad:64:2a:68:99:
cf:79:62:76:85:d0:9d:30:77:11:2a:91:b7:73:53:c2:9e:47:
db:30:82:86:93:99:13:d5:b7:08:da:c4:a7:25:01:9d:ac:cc:
19:e5:89:1a:86:5b:17:4a:44:8f:61:44:c6:aa:eb:da:2d:9f:
a4:ef:01:87:06:ec:13:ae:0b:89:eb:68:f2:19:82:cc:f4:2b:
1a:79:fd:c1:ec:88:b6:a6:d1:bc:e9:f0:24:3a:dd:71:c6:aa:
86:9e:0c:fe:43:c6:2d:11:71:ef:b4:d2:c0:48:b8:b9:2b:60:
ce:48:75:f2:bc:b0:ba:fb:22:94:6f:1a:3c:2f:18:04:ae:d5:
0c:b2:c1:09:91:69:a1:13:7c:22:53:07:8f:89:72:8f:bb:86:
7d:1c:d2:d3:02:43:9a:e1:6e:18:ad:85:19:22:8a:8f:5a:75:
d8:db:23:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:48:12 2026 by rpki-client