
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/8FD0B12E400311EEBF5A8B52C4F9AE02.roa
File: 8FD0B12E400311EEBF5A8B52C4F9AE02.roa (raw, json)
Hash identifier: Fu109TGeOUOlOrI2XIFdihyRA7Fr+8/prz/x7VcBoCE=
Subject key identifier: 99:D5:DD:DD:22:DB:D8:61:DE:2F:81:1A:C3:EB:6D:19:DB:38:58:16
Certificate issuer: /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Certificate serial: 04DF
Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/8FD0B12E400311EEBF5A8B52C4F9AE02.roa
Signing time: Tue 03 Mar 2026 00:32:41 +0000
ROA not before: Tue 03 Mar 2026 00:32:41 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 216452
IP address blocks: 2400:54a0:2120::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 23:46:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1247 (0x4df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D51A0, serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Validity
Not Before: Mar 3 00:32:41 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a62c29-c220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:46:a8:6e:3c:95:96:cc:9b:bc:b3:6a:e5:a3:
2f:3b:99:4c:4c:a6:90:15:c1:d2:b8:24:fd:83:c6:
dd:5e:a8:4e:e8:e0:71:f6:8b:f6:8f:a0:03:eb:b7:
47:78:d4:13:08:ce:84:cb:b6:da:48:f2:96:02:a6:
0d:d6:58:79:03:b3:d6:c8:ad:d8:d4:81:5c:38:f9:
9c:1a:40:58:25:e1:dd:38:82:bb:88:b1:3d:30:5a:
c9:28:8b:f2:fa:eb:69:02:e3:96:8b:77:f7:04:ab:
9b:d1:a0:a5:ff:d3:4a:91:fa:bd:e1:a4:d2:de:ee:
17:aa:d5:0f:e2:ab:e9:bc:b5:05:b7:3e:1e:85:94:
ad:d0:34:7d:99:f2:99:f5:2f:57:7b:0d:4f:38:f9:
09:10:81:a8:a1:50:95:2f:e0:54:ec:c1:6b:01:a0:
96:a3:5e:b0:c5:bc:b1:56:62:ba:db:34:f7:7e:6a:
9a:0d:2c:47:65:99:64:7a:ce:0f:f8:dc:ad:81:32:
c7:2c:5f:2a:3a:02:3b:3f:82:ce:67:c4:cc:66:71:
6e:bd:7d:c0:ce:d1:7a:68:0c:11:d3:a1:52:c3:07:
d5:2a:85:c4:a9:43:ca:19:ed:c7:6b:a1:48:77:c1:
fb:ba:80:bd:0d:79:13:84:e8:11:17:c8:3e:41:39:
c1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D5:DD:DD:22:DB:D8:61:DE:2F:81:1A:C3:EB:6D:19:DB:38:58:16
X509v3 Authority Key Identifier:
keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/8FD0B12E400311EEBF5A8B52C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:54a0:2120::/44
Signature Algorithm: sha256WithRSAEncryption
20:2d:a3:f0:c7:77:2d:33:10:b4:79:bb:e8:9c:3d:1f:86:ab:
0f:82:68:51:dc:42:ee:9b:ac:f8:a1:17:18:7d:93:50:f0:97:
a1:87:67:d7:af:cf:a0:ea:c3:49:06:ec:11:d3:35:0a:23:69:
53:89:c0:bb:63:be:50:cd:27:76:38:5b:8a:cf:fc:be:f5:26:
f6:05:24:4c:21:73:5a:00:f3:ac:9d:87:e2:a3:b0:37:4c:91:
22:40:43:25:8b:2c:af:43:2b:2d:5f:a0:28:30:5e:5d:2c:b0:
ed:b4:ec:77:61:06:1c:8e:7c:c2:51:20:6f:6c:ef:88:fb:aa:
0f:40:a6:f7:ea:df:4a:63:4c:84:02:de:9a:ff:24:f2:5d:e6:
b0:cf:1c:d4:b3:da:2e:9a:b6:ac:df:51:88:46:3e:d8:1d:7b:
ae:66:86:ec:f4:a2:21:b7:3a:b4:5d:80:c2:54:a8:a0:47:92:
27:01:42:6a:72:53:ce:38:6e:c2:43:03:0a:bd:40:b7:ba:36:
b0:a7:b3:5d:81:24:04:50:56:68:8b:54:7a:3a:42:c5:f8:77:
0b:90:8c:9c:06:78:29:96:40:94:15:09:1f:56:b2:03:b1:40:
c5:6c:24:0d:48:c9:1c:ae:82:68:1a:80:fb:bd:b8:2c:82:44:
61:b3:66:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 15:42:33 2026 by rpki-client