
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/566FED7071AB11EFB45D987FC4F9AE02.roa
File: 566FED7071AB11EFB45D987FC4F9AE02.roa (raw, json)
Hash identifier: J5NOPXr3wPETLrm/rX1Me6ZdDfcoksp1CAfWiHvOF+o=
Subject key identifier: F4:85:27:01:D1:6C:D6:95:16:1C:31:59:ED:C8:C7:5F:A9:5B:A0:02
Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial: 0252
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/566FED7071AB11EFB45D987FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:16:54 +0000
ROA not before: Wed 31 Dec 2025 04:24:21 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 137546
IP address blocks: 2001:3c8:e10e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 04:45:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 594 (0x252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Validity
Not Before: Dec 31 04:24:21 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a490a6-d7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:5b:b0:6e:87:89:4e:e3:d3:f4:3a:ca:5f:
06:62:b8:c4:8d:a4:f2:9d:4a:f9:4b:e0:b9:88:3a:
9d:0d:6e:c2:cf:3c:eb:d3:c0:af:69:13:25:da:27:
4a:2d:94:41:2f:23:49:5c:9d:c3:b6:1d:f6:40:0f:
d5:27:96:76:ef:ce:63:bb:f2:33:0d:26:13:39:14:
9b:c0:48:db:02:9c:28:e8:99:4d:8a:c1:87:07:43:
50:3b:89:c5:cd:07:41:22:66:36:c0:2d:89:62:16:
8d:bf:d8:ae:af:8b:f6:e5:96:a6:5a:16:18:5c:af:
0a:58:80:f9:6f:e1:e2:63:d4:4b:fe:ff:61:9e:c4:
77:e9:9b:00:b0:3e:58:b5:2b:73:d5:df:2e:ec:b5:
14:66:95:41:30:e4:17:fb:e9:14:8f:15:00:8d:ca:
1b:b8:bb:4f:68:88:ba:8a:08:52:65:85:90:09:39:
ff:4e:e4:47:c4:93:02:63:61:67:76:fc:2c:45:67:
8b:b5:d8:b7:cc:04:98:5e:cc:76:be:d9:c7:4c:3e:
df:32:38:e1:97:1e:74:71:37:59:30:1e:bd:cc:e5:
cc:08:55:f5:81:22:02:94:b5:29:62:ea:67:44:d9:
57:fb:5f:53:49:90:1a:27:7f:fb:b6:9e:ad:47:53:
d3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:85:27:01:D1:6C:D6:95:16:1C:31:59:ED:C8:C7:5F:A9:5B:A0:02
X509v3 Authority Key Identifier:
keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/566FED7071AB11EFB45D987FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:3c8:e10e::/48
Signature Algorithm: sha256WithRSAEncryption
42:ee:11:55:9d:c0:8f:16:b9:08:b9:ff:ea:09:65:b3:9f:0e:
15:9c:a9:2a:8a:f6:3a:c4:ce:36:0a:6f:6f:b5:f6:a3:40:1d:
3c:d7:cf:38:85:80:fb:e0:c9:74:d1:11:37:7a:3b:e4:61:05:
f5:eb:85:b1:45:06:f0:ab:55:b5:f9:8e:9a:14:2a:ac:e5:8e:
d7:df:1b:90:75:81:e8:e5:d1:e0:46:61:f4:63:ff:98:b0:92:
a7:8c:f7:1c:71:d8:54:fa:ea:00:34:a9:a4:69:5c:98:d2:9b:
5d:2f:23:15:b4:d6:59:d6:10:19:b2:b3:b6:a3:2c:bb:20:d9:
fa:41:83:ca:41:f4:10:aa:25:24:3d:cc:c5:2b:fd:fa:bc:3d:
76:ba:a6:29:0f:a4:ed:1a:df:89:c7:b1:ed:08:cf:4f:3a:7f:
61:72:76:4e:90:9b:a3:3b:6a:74:a2:2b:ed:8d:5d:4c:89:ae:
6b:98:05:73:97:03:bc:a7:e8:6d:fd:c9:c9:1b:45:80:e6:ab:
c5:26:72:c7:66:66:c0:9a:4f:dd:3c:6c:76:57:44:0a:08:84:
bc:c1:ff:67:b3:a5:83:93:69:c0:c6:a0:18:fa:2c:6f:2a:0c:
d3:ee:1e:43:aa:b1:78:80:05:98:60:a3:4b:bd:cf:0b:ce:07:
c0:f5:ca:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 05:53:24 2026 by rpki-client