
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/C5B45CA014F411F180EDEBBD193D8C67.roa
File: C5B45CA014F411F180EDEBBD193D8C67.roa (raw, json)
Hash identifier: 1jcExNuLyHWYrWjBJRhFw6fSw8L5FWvGvk7sIxrsGAg=
Subject key identifier: 76:00:69:82:EE:E2:11:7F:3B:46:4D:13:E9:F9:24:4F:E4:A0:03:11
Certificate issuer: /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Certificate serial: 04E1
Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/C5B45CA014F411F180EDEBBD193D8C67.roa
Signing time: Tue 03 Mar 2026 00:32:45 +0000
ROA not before: Tue 03 Mar 2026 00:32:45 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 50763
IP address blocks: 2400:54a0:2080::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 23:46:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1249 (0x4e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D51A0, serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Validity
Not Before: Mar 3 00:32:45 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a62c2d-0a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b0:44:b3:06:03:49:77:33:3b:90:bd:e3:7c:
63:b6:f6:3a:fd:65:47:30:0c:5e:22:22:96:95:47:
50:3c:2a:1f:95:b9:18:b0:8a:ab:1f:f7:76:39:e6:
99:62:51:7f:d1:a3:97:d6:e8:5f:ad:80:e9:08:37:
7c:e8:99:d2:18:fa:1e:22:83:d7:97:11:2b:76:90:
12:a0:32:a9:35:3a:df:30:34:2a:bb:4e:48:1e:de:
9b:f5:8f:f1:62:53:bc:cc:ce:a7:4e:c2:66:e6:6c:
4d:6d:80:a4:93:42:c9:e8:38:f8:2d:38:39:38:ba:
9a:69:b5:e9:d2:33:f3:2f:e9:6e:5b:85:57:d0:f0:
81:24:86:3c:84:1c:58:29:74:31:69:31:a6:1d:6f:
8c:f8:b4:8c:da:7a:c1:8c:2e:c0:33:5e:e9:f8:83:
bf:d7:03:01:19:82:dc:11:6b:cc:14:2c:b1:0e:eb:
7d:df:72:a3:f1:79:c9:a3:a9:d7:c5:85:5c:2e:22:
a2:ca:73:ba:88:a2:77:8f:29:97:73:27:76:b7:5d:
66:16:af:25:41:a1:1f:30:3d:d9:dc:42:5e:5e:43:
b0:3b:8a:47:38:5a:6c:a5:22:b6:80:47:40:b8:60:
d5:da:8e:dd:d7:fe:40:24:86:51:8e:d4:c2:56:9b:
58:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:00:69:82:EE:E2:11:7F:3B:46:4D:13:E9:F9:24:4F:E4:A0:03:11
X509v3 Authority Key Identifier:
keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/C5B45CA014F411F180EDEBBD193D8C67.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:54a0:2080::/44
Signature Algorithm: sha256WithRSAEncryption
2f:f0:c5:09:25:5e:d9:be:39:22:9a:a2:68:02:37:51:7b:50:
b9:6d:45:22:96:9d:f7:e3:92:4a:46:c1:b5:b1:e6:7e:99:3b:
eb:ef:47:bb:87:a2:32:b2:9e:84:96:51:42:24:69:d3:10:20:
9a:f2:cb:7a:66:0e:7f:6b:32:b9:4c:df:b0:63:7a:9a:7c:34:
7d:dc:60:b1:c9:24:c4:7d:88:23:c8:0c:e5:80:6c:31:be:7c:
1d:89:c5:85:ce:f0:3f:83:ff:f6:fd:dc:01:b1:ab:94:13:e7:
f2:a0:ed:14:29:a2:ef:36:8c:5c:3c:aa:b4:14:01:74:f4:c8:
5e:52:e8:bf:c7:4a:8f:cf:43:1e:93:ab:25:9b:62:ce:e1:d8:
46:10:0a:06:0f:cd:ab:95:34:c0:cf:c0:d7:da:cb:25:24:1e:
f5:98:31:f2:dd:52:f8:cd:fa:37:16:d9:83:d7:c5:f6:50:38:
01:88:9c:7e:f2:95:d1:52:d3:3e:65:cc:46:d3:87:bb:28:6d:
49:4f:13:43:7d:39:b5:e3:0f:4e:76:c0:2a:39:e8:63:9c:8c:
0e:3a:25:4f:7a:14:09:8e:99:71:18:2d:b2:6e:4d:a9:e8:47:
b5:17:05:aa:38:16:95:3f:09:5a:12:d2:2e:53:f8:72:2b:b0:
f9:31:a2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 15:34:55 2026 by rpki-client