
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/BACC498C9EFC11EC856FCB09C4F9AE02.roa
File: BACC498C9EFC11EC856FCB09C4F9AE02.roa (raw, json)
Hash identifier: 9sxR8CYFCyJQExW8lI4y1fZzjOTHx0uRGcx0+QALp7E=
Subject key identifier: 90:8A:95:40:3C:20:28:9A:F8:0B:1D:76:7C:28:B6:72:89:CE:4E:31
Certificate issuer: /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Certificate serial: 0B44
Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/BACC498C9EFC11EC856FCB09C4F9AE02.roa
Signing time: Thu 26 Mar 2026 19:25:00 +0000
ROA not before: Thu 26 Mar 2026 19:25:00 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 3938
IP address blocks: 2001:218:4000:9::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2884 (0xb44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Validity
Not Before: Mar 26 19:25:00 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69c5880c-a928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:24:59:1f:4f:df:34:95:72:e5:2f:8d:f3:02:
ac:24:9e:0b:fa:58:6c:65:26:a8:17:e7:25:e1:2e:
22:26:37:52:39:35:75:3c:06:60:ca:26:a0:3a:93:
0c:24:ac:93:4c:5c:0b:29:23:26:4d:f3:ce:85:be:
52:a8:83:e0:2e:b3:7e:a0:fd:cd:ac:12:0c:16:a1:
13:a2:a4:ab:32:1b:9f:8d:7b:1d:9f:2f:08:87:e6:
81:30:4e:3d:a3:eb:be:95:36:fd:63:6c:4f:2e:4f:
42:1a:66:54:d6:f9:3f:62:d9:bf:7a:84:07:da:2f:
6a:db:5a:cd:d0:47:f6:df:7e:12:c4:cc:bc:1c:3b:
11:0a:b7:03:2e:8d:9a:fd:b1:08:93:8e:30:38:71:
08:d4:70:95:b2:a1:e8:27:1a:29:2c:96:f4:8f:c9:
7d:07:83:d1:09:d1:7f:e0:cf:04:79:59:0f:98:8c:
f9:2c:76:e5:6a:09:cb:4d:a1:05:ea:1b:90:7c:0e:
cf:05:69:9d:af:5a:b9:1f:f7:7b:c2:94:aa:a0:a1:
52:6a:b4:cc:66:45:84:e6:77:9f:16:37:0f:3f:d8:
b8:ed:1a:da:50:25:54:8a:d1:d7:1e:28:33:62:42:
b8:96:cb:38:e0:24:1a:7f:df:ca:d1:ca:6a:66:02:
43:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8A:95:40:3C:20:28:9A:F8:0B:1D:76:7C:28:B6:72:89:CE:4E:31
X509v3 Authority Key Identifier:
keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/BACC498C9EFC11EC856FCB09C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:218:4000:9::/64
Signature Algorithm: sha256WithRSAEncryption
16:7a:8f:b8:44:79:26:31:71:39:25:60:04:27:88:6c:53:61:
29:a9:22:48:e7:f1:fe:b2:4a:0f:17:ec:5b:9b:53:8b:f6:dd:
aa:eb:7a:09:78:37:19:0a:1b:d4:47:23:f3:29:38:47:bf:c1:
a8:2e:e1:fd:00:2f:1d:91:96:73:85:8a:86:dd:ea:e8:e3:92:
c1:83:e5:5a:b1:4c:e4:b1:a1:78:b2:20:40:f0:60:af:d9:9f:
7c:07:0b:31:e7:9a:23:8a:0b:f0:ab:18:73:8b:a3:90:85:0e:
bc:b5:f6:f7:1f:6b:e6:3e:6c:93:40:f7:c1:ba:76:25:dd:d2:
8d:33:17:1b:fa:f1:0d:eb:43:95:a2:25:09:a9:49:87:6e:b8:
71:3a:94:2e:08:92:82:40:cb:e6:60:27:7f:d9:f3:eb:56:1e:
b8:5d:9a:8e:90:32:1c:db:45:70:11:b9:da:5e:f3:55:1d:3b:
2e:c3:ef:2a:94:dd:27:2d:9c:ee:0e:ab:98:8e:b1:82:77:b3:
9c:46:98:03:db:ee:08:7e:ce:4d:8b:b2:8c:a9:d8:16:42:c2:
be:e9:a2:b2:b8:1e:4a:32:2c:0c:2e:bb:67:b6:71:52:b5:da:
a0:f9:8a:fc:be:67:49:ac:cd:80:d6:2e:5a:8c:c3:0c:99:4b:
b8:20:4e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 00:25:19 2026 by rpki-client