
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/0989F3EE120911EB83107638C4F9AE02.roa
File: 0989F3EE120911EB83107638C4F9AE02.roa (raw, json)
Hash identifier: 4Y9nNKAigvhYjcu279sIrumnfKE8nPHZdarr6Cb3oLQ=
Subject key identifier: F1:A3:41:D9:B7:99:6D:B0:C8:77:28:FA:D6:35:38:97:00:23:46:43
Certificate issuer: /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Certificate serial: 08CA
Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/0989F3EE120911EB83107638C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:03:35 +0000
ROA not before: Tue 16 Dec 2025 21:17:27 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 207268
IP address blocks: 2406:9dc0:10::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 20:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2250 (0x8ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Validity
Not Before: Dec 16 21:17:27 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a47f77-8b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:95:33:cd:c3:a1:0e:ff:63:5f:9f:d0:df:9e:
05:f3:8a:f8:54:b9:ef:60:23:bb:02:43:d2:4c:8b:
d9:a9:a8:38:a1:5a:ff:a5:08:58:e7:9f:ea:39:bd:
e7:2f:01:45:4d:f1:f8:85:a8:c6:14:f1:10:dc:35:
e7:1c:9b:90:67:1b:23:cb:df:ad:e4:8a:b9:3c:9b:
1e:8f:c6:72:38:a6:06:3f:28:2b:c9:28:4f:60:9c:
45:51:e2:d5:8a:f3:b6:7b:5c:d7:13:73:ee:6d:73:
a9:18:22:57:b8:e7:83:de:ca:fa:67:d4:10:30:75:
93:0d:3c:cc:33:c8:c9:bb:ae:3e:f3:28:c0:a7:2d:
db:01:9c:1b:82:2e:6c:ee:84:f4:2f:90:ff:b0:9f:
4d:96:15:d7:92:41:17:7b:f4:f4:37:fa:20:8f:0a:
ed:8d:26:d7:67:a5:a6:d0:4a:c5:c5:d7:11:19:71:
36:4a:44:00:16:eb:33:6e:63:38:c1:b2:03:c0:05:
4d:14:8d:66:32:e5:d7:61:07:69:9d:18:83:d7:49:
b8:81:7d:64:61:22:2d:bb:d6:4f:03:7c:e8:af:c9:
4f:c4:ec:82:2e:af:f2:0e:7a:1f:d1:59:28:e4:99:
c2:5f:36:bb:cc:3b:57:44:8d:f2:89:1b:a3:aa:ce:
93:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A3:41:D9:B7:99:6D:B0:C8:77:28:FA:D6:35:38:97:00:23:46:43
X509v3 Authority Key Identifier:
keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/0989F3EE120911EB83107638C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:9dc0:10::/44
Signature Algorithm: sha256WithRSAEncryption
82:ac:e7:27:cb:cc:a2:3d:38:e0:02:15:c1:0a:b9:6c:89:02:
37:86:02:56:5f:ac:fa:3b:d1:07:92:5c:61:1e:20:69:b4:b5:
93:36:03:51:85:8b:0c:1c:aa:10:cd:62:7a:7f:c4:75:cd:e4:
09:f7:eb:e1:50:ec:f3:f4:8b:8d:cd:00:92:58:0a:81:a7:bd:
72:38:5e:6d:76:fd:f8:45:65:31:c2:84:c1:4e:8c:2c:c0:94:
0d:73:d3:96:1c:74:09:a1:ae:a7:d4:c2:f4:60:24:be:9b:43:
3c:0b:dd:f3:27:04:ca:71:2b:1f:5a:69:fa:37:88:04:49:37:
7b:8f:97:db:6e:4e:cd:39:62:71:42:58:5f:34:08:83:65:c2:
d9:67:81:8d:bd:d8:9d:0d:85:6e:f9:8b:1b:32:d0:99:eb:01:
c0:71:ae:03:a0:f0:7c:3e:3b:70:62:9c:a5:a0:9b:b9:2a:38:
f6:a1:01:e8:34:f9:43:be:1d:25:9f:4b:39:1d:a3:e1:b5:88:
ee:24:66:a1:0b:de:09:95:57:07:80:da:90:8d:20:00:9a:12:
4e:9c:ef:7d:78:f0:ec:19:b1:81:9d:45:99:63:57:b9:19:af:
c4:e7:04:e0:4b:de:42:d7:84:d3:d8:d2:93:70:9b:00:d2:a6:
1f:26:8e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 15:16:43 2026 by rpki-client