
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/E0AAD7E6722011EFA2865162C4F9AE02.roa
File: E0AAD7E6722011EFA2865162C4F9AE02.roa (raw, json)
Hash identifier: N1C7sjBSZLZS6EiMOR8X3Y9D0vgOLrEZbb0bDyQy27U=
Subject key identifier: D0:E4:01:8D:05:70:C2:52:19:2A:88:9D:AF:65:26:61:C2:62:13:75
Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial: 0256
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/E0AAD7E6722011EFA2865162C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:16:57 +0000
ROA not before: Wed 31 Dec 2025 04:24:24 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 138685
IP address blocks: 2001:3c8:243::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 04:45:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 598 (0x256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Validity
Not Before: Dec 31 04:24:24 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a490a9-6a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fb:be:5a:43:32:f3:80:7d:1c:40:01:ab:67:
5e:50:9b:8c:fc:cc:09:94:0e:17:a8:2c:31:de:ed:
44:f0:10:60:58:0e:4b:2b:5a:5e:8b:27:3c:87:32:
8c:63:bf:b7:da:8e:34:9a:c9:95:e7:ae:0b:40:f8:
92:86:03:43:32:5d:10:bb:74:f6:8f:92:7d:49:ce:
20:48:75:b9:53:4a:c1:f4:99:61:88:ec:ca:e5:e9:
6f:a1:06:d2:c3:1e:3f:79:f1:54:7e:ec:89:74:5d:
75:5a:78:09:1c:50:cc:16:71:4c:5f:2c:dc:44:85:
6c:29:29:3c:7f:28:9b:69:b9:16:05:f8:05:a4:27:
b4:dc:17:cb:9e:3c:06:33:7d:bd:e1:3e:d6:fe:a1:
ec:47:16:a5:91:37:f8:dd:07:f4:df:2c:da:f1:99:
fa:52:63:6d:60:84:87:60:aa:fe:85:a6:6a:a1:33:
47:28:33:60:27:d2:a2:ae:c7:8c:b3:4d:fa:b4:ab:
4c:0a:c3:9a:1a:71:74:67:7c:a2:b5:12:ca:fb:83:
8a:23:65:23:7b:ed:fe:4f:38:be:e4:cf:43:98:d7:
b2:93:54:39:05:3b:49:cb:89:b1:2c:69:26:ca:9a:
72:fa:cd:5c:a3:34:aa:03:b0:85:7c:ca:1c:43:42:
91:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E4:01:8D:05:70:C2:52:19:2A:88:9D:AF:65:26:61:C2:62:13:75
X509v3 Authority Key Identifier:
keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/E0AAD7E6722011EFA2865162C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:3c8:243::/48
Signature Algorithm: sha256WithRSAEncryption
65:fa:a0:85:44:2d:da:b3:8b:0a:d0:3d:20:05:e9:09:43:fb:
eb:df:fe:c9:c2:80:12:4c:8b:95:04:98:5e:d5:a3:c1:c9:fd:
69:5f:bf:96:f9:b8:db:f8:d7:04:3d:5f:e7:48:7a:be:35:8b:
91:58:38:84:a6:89:77:a5:d2:b5:90:2e:dc:fc:88:69:00:08:
74:e7:c5:a5:a0:c3:3d:59:25:f1:8c:15:06:6d:83:48:9a:36:
c4:5f:a6:17:9c:7c:d0:0b:c0:61:e9:94:2b:30:6e:0c:1b:9f:
78:07:a8:6e:2b:78:03:b6:05:27:37:c6:69:ac:88:7d:4c:ee:
1d:17:26:44:46:ac:49:8b:46:48:65:cf:a4:b0:5f:ab:54:09:
dc:82:61:fd:e9:50:fb:83:d5:25:ac:e6:82:8c:05:04:5f:be:
c4:a5:64:2d:be:41:25:85:1b:2e:a9:7b:20:ff:9f:72:ea:9e:
5d:65:07:5d:e0:5d:36:27:29:2b:e8:9f:61:4c:90:a5:66:ac:
a4:db:c8:7b:25:a8:22:cc:8d:d9:d9:a3:01:cc:9a:69:43:cb:
9b:90:a4:aa:1e:86:4c:82:ce:db:19:de:50:59:c7:ac:1b:23:
f2:b6:cf:90:65:2c:6d:3d:9e:61:4e:61:47:75:7c:47:70:56:
65:cf:40:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 05:53:24 2026 by rpki-client