
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/2CF7FA46995011F082453F71C4F9AE02.roa
File: 2CF7FA46995011F082453F71C4F9AE02.roa (raw, json)
Hash identifier: GLJ+jea24FBfzaQsii1UlRgswnUlDRjX0vu/zA29ZHA=
Subject key identifier: 26:64:5D:4D:92:32:13:A5:C8:C8:3F:42:CA:96:5F:34:70:9D:E3:CE
Certificate issuer: /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Certificate serial: 0400
Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/2CF7FA46995011F082453F71C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:58:30 +0000
ROA not before: Sat 08 Nov 2025 23:45:48 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 8075
IP address blocks: 2407:30c0:184::/48 maxlen: 48
2407:30c0:186::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Mar 2026 00:19:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1024 (0x400)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Validity
Not Before: Nov 8 23:45:48 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a47e46-2e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:c9:0f:44:d5:cd:2e:4e:45:27:d0:cd:d9:
9c:c8:ce:a6:0a:f6:97:37:6d:dc:2e:27:7e:33:be:
5c:bd:95:a7:ef:61:6a:7e:c8:e0:ae:af:c8:3e:ff:
0e:4f:0b:fd:d0:21:56:0b:5e:e4:57:6e:ab:5e:94:
f5:48:42:26:28:84:ef:34:9c:40:d0:c2:26:d0:78:
7a:d9:f8:73:03:f8:ae:b2:8b:1d:5a:01:38:5e:81:
7c:48:75:63:5d:7c:3c:f9:47:70:8d:62:4a:ae:55:
ad:f6:ac:14:82:05:9f:38:80:e2:7b:4d:a0:cd:d9:
31:ce:bc:14:a6:4e:f5:bb:8f:c0:2b:3d:40:4d:20:
94:43:35:ff:9b:18:53:69:42:db:36:41:0a:05:48:
8f:7d:2b:6d:06:23:d5:dc:5c:9b:e4:4b:0b:89:a6:
ab:da:f1:da:67:de:8a:d1:89:9c:86:59:a5:f5:9c:
28:e2:bf:b2:77:63:6f:65:fd:90:d0:59:92:c4:9a:
a5:b6:bf:9b:16:3f:88:81:aa:e8:e7:0b:a8:74:26:
71:4c:f8:b8:04:d6:ea:91:1f:7f:fc:9a:84:21:a6:
5a:a2:6b:8b:84:8a:b5:f3:03:9d:14:19:5b:90:f8:
03:05:4f:75:90:10:4f:31:19:47:80:9d:e5:96:47:
70:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:64:5D:4D:92:32:13:A5:C8:C8:3F:42:CA:96:5F:34:70:9D:E3:CE
X509v3 Authority Key Identifier:
keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/2CF7FA46995011F082453F71C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2407:30c0:184::/48
2407:30c0:186::/48
Signature Algorithm: sha256WithRSAEncryption
26:92:7a:3c:d1:8e:d6:ec:ba:ae:02:a6:47:1c:ba:ef:6a:bc:
62:4c:f7:33:e0:7c:11:7b:ca:36:2c:f3:80:ee:91:3b:4b:70:
8f:f3:21:d0:b0:75:9f:2c:5c:ae:fd:84:2f:62:97:ad:77:41:
df:c5:a8:1c:c3:7a:bb:59:b7:47:6b:f8:07:3c:59:4d:3a:9b:
bf:42:66:30:67:98:a9:8c:8c:79:be:69:fd:1f:ac:9c:22:a4:
cd:97:5b:3f:7c:3f:1b:23:b4:ee:5c:b6:e7:a9:fe:43:78:b6:
c5:8f:a7:d4:13:44:a4:c5:89:7b:eb:73:66:92:1c:13:69:e4:
64:ec:ba:ee:cc:57:a7:c1:52:ee:0e:86:53:3f:4c:1e:fe:6f:
1b:16:f0:16:fa:bb:f4:43:d8:7a:b8:bc:0e:89:dd:f5:82:22:
3f:2c:b1:bd:e8:25:a0:3c:40:12:3a:e4:74:f3:e1:e5:ad:11:
65:80:66:53:c5:16:02:68:3a:16:17:54:6b:cb:87:1c:15:98:
cb:2d:ac:24:67:99:a4:41:18:02:73:53:cf:b1:fe:47:6a:d4:
bf:32:32:27:6d:e3:e2:cc:f5:51:2b:6e:47:90:0a:c2:24:d7:
98:89:11:31:d7:7f:0c:aa:a2:9d:4e:d7:79:bd:0f:d6:54:30:
ae:19:9d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 18:16:47 2026 by rpki-client