
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/A9C0AECED0BA11EFB7A6B027C4F9AE02.roa
File: A9C0AECED0BA11EFB7A6B027C4F9AE02.roa (raw, json)
Hash identifier: NUBIPTzmLE7ei0rq8siWB1jNLIe1jHWLzPPD5tPj2mA=
Subject key identifier: 2C:17:1C:F7:B5:56:4F:F1:86:7A:F9:BE:FC:38:20:61:92:68:9A:98
Certificate issuer: /CN=A91E5832/serialNumber=BE9B904EB76CB05C60C3E2C379E2FA489A0E1772
Certificate serial: DE
Authority key identifier: BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/A9C0AECED0BA11EFB7A6B027C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:16:54 +0000
ROA not before: Sat 15 Nov 2025 04:22:06 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 132714
IP address blocks: 2001:df4:7140::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.crl
rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 06:13:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5832, serialNumber=BE9B904EB76CB05C60C3E2C379E2FA489A0E1772
Validity
Not Before: Nov 15 04:22:06 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a59bd6-a985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f0:f1:55:9e:ac:1b:8d:50:af:9b:1c:a5:5e:
54:57:e5:ba:17:7c:07:75:18:e6:79:99:4d:7e:86:
5b:8f:07:1c:b6:a2:51:fc:2b:1a:28:7f:95:9c:8f:
7a:24:5b:97:d2:ad:84:6f:d7:74:40:f7:58:30:84:
d4:58:9a:18:7d:0b:d7:31:fd:71:73:76:d0:bc:b4:
d3:16:11:cb:64:f8:80:73:25:cf:23:57:3b:d8:a3:
2f:6c:a4:14:4b:02:f0:cb:8d:8f:19:2e:1c:d6:25:
27:74:5a:fc:fc:ea:2c:59:da:d7:ec:6f:87:49:84:
91:c4:b2:de:e3:a3:75:1e:df:27:e3:84:9a:5d:53:
f0:cf:a7:7e:14:75:f9:e4:c0:b7:39:ed:0f:fd:b7:
08:01:a4:d3:37:ec:d0:35:b1:79:f4:1d:53:15:5f:
8c:7b:52:28:cd:00:67:c2:df:43:a7:1d:25:60:a2:
41:47:19:53:57:21:71:ee:2c:da:ab:e6:f5:22:af:
f8:6b:b2:c3:ac:81:e3:0a:db:a1:64:e5:79:dd:b1:
db:6a:56:c2:65:c5:79:aa:8c:37:47:95:15:60:80:
ed:e3:03:04:3b:28:f4:8d:af:0e:e6:d9:50:5f:12:
cf:98:9f:06:0a:26:8c:9b:ed:f6:67:10:2f:79:57:
2c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:17:1C:F7:B5:56:4F:F1:86:7A:F9:BE:FC:38:20:61:92:68:9A:98
X509v3 Authority Key Identifier:
keyid:BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/A9C0AECED0BA11EFB7A6B027C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:7140::/48
Signature Algorithm: sha256WithRSAEncryption
53:81:f6:af:40:b8:ac:a3:33:6c:62:71:ab:71:6b:90:65:8c:
c1:b9:f2:9e:2b:be:23:f6:99:ce:53:6e:2d:57:9b:b9:7d:32:
75:da:fb:d3:cc:9e:40:6e:aa:99:85:3c:32:a2:68:b9:9e:de:
58:d9:92:88:23:1b:2e:49:83:c7:d4:a1:23:33:de:96:8a:06:
70:af:26:1a:0d:8e:e0:1c:93:19:ac:87:2d:f5:30:45:00:d0:
57:63:66:a4:77:d5:61:00:50:de:1b:d0:a9:4a:73:e6:0b:66:
b2:0a:d3:43:72:15:27:86:c3:5d:0e:47:67:e3:ab:e6:4a:ee:
a8:5c:8b:c0:7b:53:8e:9e:03:1c:b3:ed:25:51:d8:3b:57:b6:
8c:e2:b9:66:aa:ff:94:57:5d:6d:50:f4:b8:20:7a:2a:35:1f:
80:dd:eb:c0:1f:02:f3:25:e3:c7:a1:54:4f:c3:43:b2:98:a6:
68:85:00:92:1c:33:b8:ec:56:33:98:06:69:96:31:1e:6f:b6:
eb:8f:31:f4:84:b9:ba:99:91:86:bb:72:ea:ae:2d:0f:cf:37:
83:87:b0:af:a2:16:a1:e1:94:d4:91:b3:78:ff:2f:7d:5a:e2:
90:e3:e9:35:d7:25:c9:17:fd:62:b5:f4:69:c9:62:83:3b:73:
a7:51:d1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 13:14:45 2026 by rpki-client