
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/ED91F9DA03DE11F0BF284950C4F9AE02.roa
File: ED91F9DA03DE11F0BF284950C4F9AE02.roa (raw, json)
Hash identifier: uLQqztwEjs13oSDmjVcPoIzrVuGcL2xA+ld3CoLZQI0=
Subject key identifier: 36:C5:AB:3E:38:BE:EF:2C:86:BA:4E:F7:0B:22:51:78:86:0A:4D:43
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 5EBD
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/ED91F9DA03DE11F0BF284950C4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:19:31 +0000
ROA not before: Thu 28 Aug 2025 14:56:28 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 153499
IP address blocks: 2001:df4:d5c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24253 (0x5ebd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:56:28 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a60cf3-a263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:27:a2:48:27:02:7b:ce:22:44:e5:7c:35:de:
8e:4f:c3:ae:8c:4f:5b:6f:f6:98:c2:0c:31:e1:07:
d8:42:05:b6:3e:5d:9e:de:27:e9:15:2b:2f:9f:81:
55:8f:8f:61:f3:d5:68:70:35:15:06:05:ca:a7:2f:
9f:3c:83:21:91:b1:04:8e:4a:06:93:c2:29:39:0c:
da:e0:18:db:86:d4:26:b7:f4:bb:e0:0b:1c:2b:e4:
1f:58:71:7c:7e:70:43:52:22:6b:ce:05:86:94:a2:
3a:6b:2d:fc:d5:93:2d:3f:7c:3d:a9:4c:12:ee:73:
21:2e:63:53:53:d2:5e:d8:67:00:eb:69:c5:c0:7e:
3b:65:1d:ab:da:85:39:09:10:43:fd:8c:d6:e9:b3:
b5:4e:4b:d9:d5:d9:af:18:1b:16:db:2f:31:be:38:
46:d2:0f:69:83:5b:c3:6e:ee:90:cd:52:6d:44:92:
57:bc:7a:45:82:00:96:4d:29:6f:92:4c:1f:ca:33:
cb:9e:16:23:53:47:c6:ee:5e:8f:9c:06:37:b8:d5:
04:42:8e:ff:fc:71:7b:29:6a:30:b8:f4:4e:37:c8:
d0:64:8d:77:7d:0f:b2:12:58:51:de:a0:c5:da:1d:
18:11:d7:12:ba:53:f4:7f:df:24:07:c7:08:92:a4:
36:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C5:AB:3E:38:BE:EF:2C:86:BA:4E:F7:0B:22:51:78:86:0A:4D:43
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/ED91F9DA03DE11F0BF284950C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:d5c0::/48
Signature Algorithm: sha256WithRSAEncryption
3c:d2:53:44:39:95:b6:59:6f:75:b7:9a:0d:ec:13:92:0f:06:
7b:07:a8:ce:82:16:91:92:8c:bf:de:88:3b:05:f7:20:bb:d8:
fb:96:62:7e:78:3d:ad:8e:e9:8b:ca:46:ca:d0:4a:71:62:19:
14:9c:d3:87:3b:ac:be:cc:0f:00:25:e7:04:9e:ed:14:2b:e5:
2e:e6:00:fc:a6:14:3d:2e:4c:05:0a:14:ef:7d:6d:6c:fc:02:
f3:c6:d1:64:f3:5b:1c:c6:a3:f6:cc:85:b2:24:d9:09:aa:7c:
d0:6b:3b:1e:1a:bd:87:0a:65:56:ee:ba:42:5a:2b:b1:eb:16:
81:74:e6:2c:fe:12:18:d3:22:30:22:56:d3:aa:14:83:bd:50:
46:b2:06:c4:36:91:cd:04:37:ba:df:98:15:a0:d6:6e:3f:52:
3a:ed:0c:eb:8c:0a:c3:4b:b3:9e:9e:0c:ab:f1:25:56:c2:2d:
b8:be:ce:32:1b:cc:5c:63:f9:7f:f7:3e:5e:22:9e:1e:a7:16:
93:48:4c:ff:c0:fb:50:1c:f3:42:c4:c9:44:ab:ca:cc:09:71:
40:b2:a1:76:18:d9:c9:65:ae:35:f1:6b:c5:7d:ab:9c:d8:37:
2f:c3:57:a0:e7:e4:eb:fd:ca:32:18:89:ae:e4:5f:7e:6d:0a:
25:ef:6a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:43:03 2026 by rpki-client