
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/42C6F6041E6F11EF898C1E38C4F9AE02.roa
File: 42C6F6041E6F11EF898C1E38C4F9AE02.roa (raw, json)
Hash identifier: 3Wk8dYppZ9PYDGlWy8Aq6MWTQPzxpyguIWGe4yXyIMI=
Subject key identifier: CF:D2:D1:69:F3:DA:25:95:81:3D:6D:17:8F:37:26:BB:BF:01:AC:99
Certificate issuer: /CN=A91C31B7/serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065
Certificate serial: 0155
Authority key identifier: A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/42C6F6041E6F11EF898C1E38C4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:58:40 +0000
ROA not before: Thu 21 Aug 2025 05:43:55 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 152886
IP address blocks: 2001:df3:dbc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl
rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 04:45:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341 (0x155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C31B7, serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065
Validity
Not Before: Aug 21 05:43:55 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a58980-4f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:57:50:aa:f4:5a:e9:c3:86:42:f2:2d:ff:78:
ce:d7:a9:c9:8c:64:da:54:c3:ed:07:ce:90:d7:2b:
df:06:3c:7b:28:7b:ec:98:47:a6:d7:25:20:47:39:
12:86:17:ea:74:5a:63:f5:4a:c4:26:68:30:2a:65:
95:1e:90:a4:86:12:2e:34:8a:5c:64:61:b2:69:7f:
99:7b:99:73:17:18:c8:06:bb:5f:1d:f0:f5:e9:4f:
b9:23:7d:7d:d5:26:f2:b9:6f:e4:e2:46:ab:9a:17:
92:54:ac:40:7b:24:da:09:80:25:2a:be:cc:89:61:
22:85:6c:1e:66:8a:92:02:48:51:c6:46:4a:8f:66:
3d:35:ab:13:4f:e3:3c:0f:05:e3:a1:f0:2e:02:11:
e7:12:47:54:09:5a:45:a2:2e:a3:fb:0b:ef:e6:88:
9b:2a:58:9c:33:8a:dc:24:5a:d7:f5:59:e4:0c:1f:
52:f6:e0:61:ad:46:8c:0b:63:7e:b7:2f:0f:2c:22:
80:b2:69:89:f2:a2:4b:80:43:0c:26:9a:c9:6d:fe:
eb:a2:a7:31:f9:10:e1:ad:aa:8f:42:8a:33:84:de:
08:86:1d:15:0d:5d:22:4a:0c:9f:ad:63:33:30:13:
d4:8a:fc:4c:b1:8c:fb:42:7a:1c:55:a8:13:12:5f:
d3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D2:D1:69:F3:DA:25:95:81:3D:6D:17:8F:37:26:BB:BF:01:AC:99
X509v3 Authority Key Identifier:
keyid:A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/42C6F6041E6F11EF898C1E38C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:dbc0::/48
Signature Algorithm: sha256WithRSAEncryption
4d:e1:d7:ff:4a:66:84:0e:80:b9:a0:cc:6e:60:a9:a1:c6:6c:
be:ce:2c:83:e7:40:2b:9e:e8:86:ce:7a:af:87:c4:10:1e:f0:
82:b3:e6:1f:bc:ba:aa:13:9c:fa:40:b2:30:00:d0:b6:00:43:
ce:6d:b4:7e:dd:c7:3d:12:0b:de:b3:0b:a3:6f:ed:9e:68:f9:
2b:dd:c7:92:19:50:b2:de:f4:1e:f1:46:10:43:02:b8:94:45:
69:a4:82:1a:e3:ed:7d:0c:29:02:1d:81:75:32:31:77:66:16:
42:fc:86:7c:c3:0f:bb:c2:2b:36:df:a4:72:3b:63:2d:f9:a9:
4e:d3:e8:ce:0f:33:2a:2e:bf:f3:fd:61:b4:2f:9b:54:65:72:
24:43:75:ed:b0:c5:d8:76:a7:88:ec:9a:9f:78:58:d8:f9:c2:
09:82:fd:e8:06:41:e3:48:68:2a:2e:15:74:43:c2:9f:42:d6:
8e:6a:6b:e3:bd:7d:04:9a:08:7c:90:15:ad:b3:0a:f8:7f:c3:
37:7f:d3:bb:ae:fb:e4:78:d0:6e:76:28:d1:c6:e4:6f:ce:d9:
80:0e:a7:c0:b4:3e:d4:5e:56:71:eb:1d:36:a0:ad:6f:21:41:
73:1d:57:37:a2:8c:dc:f9:08:96:3b:ad:e5:65:dd:a7:aa:51:
83:c3:34:6f
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzMxQjcxMTAvBgNVBAUTKEE4MUQxNTVDQTQwNEFFNDE0NTc4MUFGMDVFQjUzQTEy
MTlFMkUwNjUwHhcNMjUwODIxMDU0MzU1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1ODk4MC00ZjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsFdQqvRa6cOGQvIt/3jO16nJjGTaVMPtB86Q1yvfBjx7KHvsmEem1yUgRzkS
hhfqdFpj9UrEJmgwKmWVHpCkhhIuNIpcZGGyaX+Ze5lzFxjIBrtfHfD16U+5I319
1SbyuW/k4karmheSVKxAeyTaCYAlKr7MiWEihWweZoqSAkhRxkZKj2Y9NasTT+M8
DwXjofAuAhHnEkdUCVpFoi6j+wvv5oibKlicM4rcJFrX9VnkDB9S9uBhrUaMC2N+
ty8PLCKAsmmJ8qJLgEMMJprJbf7roqcx+RDhraqPQoozhN4Ihh0VDV0iSgyfrWMz
MBPUivxMsYz7QnocVagTEl/TzwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFM/S0Wnz
2iWVgT1tF483Jru/AayZMB8GA1UdIwQYMBaAFKgdFVykBK5BRXga8F61OhIZ4uBl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFCNy9GQ0MzMzRDQzFF
NkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9xQjBWWEtRRXJrRkZlQnJ3WHJVNkVobmk0
R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FCMFZYS1FFcmtGRmVCcndYclU2RWhuaTRHVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzMxQjcvRkNDMzM0Q0MxRTZCMTFFRkFDMEU5MTRFQzRGOUFFMDIvNDJDNkY2MDQx
RTZGMTFFRjg5OEMxRTM4QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN89vAMA0GCSqGSIb3DQEBCwUAA4IBAQBN4df/SmaEDoC5oMxu
YKmhxmy+ziyD50ArnuiGznqvh8QQHvCCs+YfvLqqE5z6QLIwANC2AEPObbR+3cc9
Egveswujb+2eaPkr3ceSGVCy3vQe8UYQQwK4lEVppIIa4+19DCkCHYF1MjF3ZhZC
/IZ8ww+7wis236RyO2Mt+alO0+jODzMqLr/z/WG0L5tUZXIkQ3XtsMXYdqeI7Jqf
eFjY+cIJgv3oBkHjSGgqLhV0Q8KfQtaOamvjvX0Emgh8kBWtswr4f8M3f9O7rvvk
eNBudijRxuRvztmADqfAtD7UXlZx6x02oK1vIUFzHVc3oozc+QiWO63lZd2nqlGD
wzRv
-----END CERTIFICATE-----
Generated at Wed Mar 4 13:14:45 2026 by rpki-client