
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8DFF3E8E736D11F0AA6D9947C4F9AE02.roa
File: 8DFF3E8E736D11F0AA6D9947C4F9AE02.roa (raw, json)
Hash identifier: pd3RRAMeKkipboD7PATdVUjngp1ObG1Ra4vOH/no91s=
Subject key identifier: A1:B8:E7:A0:27:AD:71:5E:17:F7:52:30:3C:1C:B3:E6:D4:9F:47:FE
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6BEF
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8DFF3E8E736D11F0AA6D9947C4F9AE02.roa
Signing time: Mon 02 Mar 2026 23:31:30 +0000
ROA not before: Thu 28 Aug 2025 14:56:43 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 154091
IP address blocks: 2001:df5:e940::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27631 (0x6bef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:56:43 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a61dd2-aa9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:33:a9:66:c7:4b:c6:44:99:ff:84:eb:a2:e2:
8a:28:d5:50:89:84:47:3e:51:39:ee:13:73:d0:96:
72:2f:d3:b2:cf:0b:a7:7f:f4:3c:67:53:bc:f7:a5:
5b:1c:81:1e:5e:0d:70:22:f7:ad:41:9d:22:3e:d5:
b4:9e:e0:5b:68:b5:1c:0d:60:44:52:46:ee:35:1f:
b9:59:bd:fe:52:5d:8c:c4:74:d4:65:b6:53:32:44:
e6:2c:bb:f4:b5:00:72:f7:ec:ab:8f:42:6d:b9:fd:
d1:4a:d4:8c:be:e4:9c:24:99:0f:b9:51:17:22:1d:
18:63:ed:66:e9:2b:f1:b6:07:56:41:ce:c5:65:8c:
17:39:91:c0:9e:74:8e:4b:db:a6:bd:f5:5d:ef:db:
8e:2a:a0:9c:e5:d9:d9:6d:b9:b9:10:47:c1:93:4c:
d2:d8:18:ca:b7:28:57:97:97:95:7e:33:a6:02:98:
ae:21:c3:17:ae:ff:18:b4:e8:5a:30:47:b5:9d:2f:
82:ee:d9:cb:4f:d2:b9:ef:8e:64:51:ec:53:a2:e0:
97:e6:dc:be:44:85:7b:b5:64:3e:37:26:81:c3:09:
10:cf:d0:7c:ed:c9:38:b9:86:0d:12:4d:c6:84:99:
8e:f2:1a:bd:87:96:3a:82:8c:b1:10:21:d6:10:7d:
f7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B8:E7:A0:27:AD:71:5E:17:F7:52:30:3C:1C:B3:E6:D4:9F:47:FE
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8DFF3E8E736D11F0AA6D9947C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:e940::/48
Signature Algorithm: sha256WithRSAEncryption
9a:d6:af:50:ca:f0:9a:23:f6:a7:62:44:e2:44:06:fe:af:f1:
db:47:ca:8d:e2:09:03:bd:a0:6a:bd:8f:6f:c5:ea:2b:b5:d3:
6b:45:b0:c6:6b:c0:91:03:7e:9f:cd:f4:f9:16:df:e3:23:78:
38:33:45:ea:4b:e1:99:11:27:b7:8d:c1:20:c7:dc:e2:00:05:
8c:42:30:46:1c:32:8e:15:ba:86:bc:28:fa:03:a7:80:3d:b4:
68:35:a8:43:83:dc:cf:30:c7:54:3c:ee:2c:54:81:30:c3:6f:
f2:53:51:90:77:fd:55:86:92:27:77:ee:ba:13:08:4a:26:1e:
65:3a:39:b7:ff:4d:e5:59:a0:9a:54:69:4d:0f:02:1a:22:c5:
cf:48:4a:56:d2:5d:f3:5b:bf:7c:8f:52:14:fe:2e:d4:62:1f:
e4:7c:47:79:6a:ad:81:43:d7:31:6b:fb:c9:9d:35:2e:60:6a:
c0:a4:82:19:f1:7b:70:32:5b:f4:16:ed:72:59:dc:60:2f:0d:
76:41:1a:89:03:20:b9:2a:60:52:5c:92:cc:41:31:93:d4:38:
56:b0:bc:c9:85:92:2b:6d:1d:f1:1b:3d:28:99:f5:ea:ac:2f:
37:27:57:f8:51:00:08:06:f7:ad:12:31:05:74:7c:e3:0c:72:
a8:b9:e1:4d
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICa+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwODI4MTQ1NjQzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2MWRkMi1hYTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkTOpZsdLxkSZ/4TrouKKKNVQiYRHPlE57hNz0JZyL9Oyzwunf/Q8Z1O896Vb
HIEeXg1wIvetQZ0iPtW0nuBbaLUcDWBEUkbuNR+5Wb3+Ul2MxHTUZbZTMkTmLLv0
tQBy9+yrj0Jtuf3RStSMvuScJJkPuVEXIh0YY+1m6SvxtgdWQc7FZYwXOZHAnnSO
S9umvfVd79uOKqCc5dnZbbm5EEfBk0zS2BjKtyhXl5eVfjOmApiuIcMXrv8YtOha
MEe1nS+C7tnLT9K5745kUexTouCX5ty+RIV7tWQ+NyaBwwkQz9B87ck4uYYNEk3G
hJmO8hq9h5Y6goyxECHWEH33rQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFKG456An
rXFeF/dSMDwcs+bUn0f+MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvOERGRjNFOEU3
MzZEMTFGMEFBNkQ5OTQ3QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN9elAMA0GCSqGSIb3DQEBCwUAA4IBAQCa1q9QyvCaI/anYkTi
RAb+r/HbR8qN4gkDvaBqvY9vxeortdNrRbDGa8CRA36fzfT5Ft/jI3g4M0XqS+GZ
ESe3jcEgx9ziAAWMQjBGHDKOFbqGvCj6A6eAPbRoNahDg9zPMMdUPO4sVIEww2/y
U1GQd/1VhpInd+66EwhKJh5lOjm3/03lWaCaVGlNDwIaIsXPSEpW0l3zW798j1IU
/i7UYh/kfEd5aq2BQ9cxa/vJnTUuYGrApIIZ8XtwMlv0Fu1yWdxgLw12QRqJAyC5
KmBSXJLMQTGT1DhWsLzJhZIrbR3xGz0omfXqrC83J1f4UQAIBvetEjEFdHzjDHKo
ueFN
-----END CERTIFICATE-----
Generated at Sat Mar 7 22:44:59 2026 by rpki-client