
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/A242BED45E1511EFBBFB911EC4F9AE02.roa
File: A242BED45E1511EFBBFB911EC4F9AE02.roa (raw, json)
Hash identifier: xjdj17TdvEDkLf9+p3eEDDKwL+UFS4OGM0bjJjQEXIo=
Subject key identifier: 80:E8:47:5D:9F:81:94:FC:95:A0:BC:25:CE:0F:7B:3E:76:97:A9:5A
Certificate issuer: /CN=A91B673B/serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C
Certificate serial: 0129
Authority key identifier: 15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/A242BED45E1511EFBBFB911EC4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:47:28 +0000
ROA not before: Fri 15 Aug 2025 06:44:23 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 153166
IP address blocks: 2001:df4:1040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl
rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 05:16:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B673B, serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C
Validity
Not Before: Aug 15 06:44:23 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a5a300-8ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b6:c6:9c:e4:f6:f8:15:22:53:bb:70:19:51:
86:97:0a:ed:47:f6:39:c3:dc:2f:1f:73:2d:09:11:
36:d2:12:47:8a:04:a9:57:e5:61:fa:64:5e:f0:c6:
32:66:69:5d:3b:a2:19:fc:10:19:f7:1e:7f:0a:d4:
f7:14:e3:83:5c:cc:06:48:76:b5:06:7f:53:94:8e:
a0:5c:31:b2:e9:50:a9:29:b9:92:4b:96:5e:b3:d7:
c8:18:69:b9:76:5f:91:63:a7:93:2b:e4:8f:00:11:
f0:8d:fb:aa:03:44:cc:9d:3d:87:55:2e:c4:09:f0:
8f:15:95:f0:62:a2:3d:04:97:f0:80:fa:af:a1:ea:
31:74:2a:4a:6b:79:2b:21:33:bb:bb:3b:97:96:9e:
7b:54:9a:d4:14:ec:c8:40:ab:47:61:30:c3:cf:6e:
68:6b:0c:40:bb:58:8e:7b:a5:ae:16:4d:b7:03:c8:
40:8c:86:9d:95:63:9b:63:69:38:bd:61:2d:75:2b:
9d:93:59:7d:bd:d8:39:c9:a9:96:2b:2a:84:9e:62:
c8:9f:ad:7c:d4:11:ac:4d:27:d0:93:45:13:9f:c5:
50:d5:50:ea:26:5f:99:ea:36:da:f4:33:19:1b:9e:
02:b7:dd:42:45:4b:c6:3b:f9:89:7a:5c:0a:ab:fa:
7d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E8:47:5D:9F:81:94:FC:95:A0:BC:25:CE:0F:7B:3E:76:97:A9:5A
X509v3 Authority Key Identifier:
keyid:15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/A242BED45E1511EFBBFB911EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:1040::/48
Signature Algorithm: sha256WithRSAEncryption
1d:63:bc:aa:c2:ad:27:99:32:68:2c:0d:07:92:2e:93:a1:9d:
92:f3:f5:4e:a2:0f:9a:44:45:ee:a7:49:6b:4a:c7:4d:d0:ee:
c6:3b:bd:d1:d7:5d:84:4c:3a:29:4d:9b:d3:95:ca:27:66:84:
8f:2c:a5:e1:67:fd:dc:6f:e6:83:37:27:cc:71:4f:e9:10:28:
bb:ee:b5:c0:5c:d7:52:c4:f8:ff:6a:ba:8c:d5:b7:7a:50:39:
c0:a0:9e:b8:f8:7a:6e:93:04:a2:0b:d4:95:8c:d7:1d:f9:31:
6d:15:1e:d8:cc:9f:e9:97:2e:b9:7f:37:4d:24:5c:83:51:10:
a7:7a:6b:68:52:3b:a0:a6:53:26:b2:fc:c4:25:ed:74:fe:fd:
a5:4d:3a:c7:b8:0e:84:56:9a:82:3f:08:bf:e7:eb:31:65:2c:
88:e9:20:2a:53:eb:8a:c3:ab:5b:22:80:5a:7e:fc:ee:22:02:
fe:dd:82:0c:64:54:f1:73:f9:b6:ab:ad:a8:18:46:88:3c:6e:
e2:64:f9:31:1f:44:f2:5a:7b:09:d9:d8:81:b3:38:e4:f0:1a:
e2:a5:78:c8:82:14:16:84:51:0e:d7:e2:50:76:21:fa:b0:03:
ea:4d:6f:f5:42:94:7f:de:17:63:95:a8:13:86:dc:a5:7d:3a:
46:2f:11:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 13:15:00 2026 by rpki-client