
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/2E248E2CAD8511F08469DF53C4F9AE02.roa
File: 2E248E2CAD8511F08469DF53C4F9AE02.roa (raw, json)
Hash identifier: WTkCXMD4s9+pTdAVOc0KZG2ehtUBwPP4uPitEquEFeQ=
Subject key identifier: 3B:52:D2:A8:69:6A:B8:09:9D:20:93:37:FF:C5:B6:B8:00:7A:F9:68
Certificate issuer: /CN=A91EABCB/serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA
Certificate serial: 0725
Authority key identifier: 16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/2E248E2CAD8511F08469DF53C4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:29:11 +0000
ROA not before: Mon 02 Mar 2026 22:29:11 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 55201
IP address blocks: 2400:bac0::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl
rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 21:37:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1829 (0x725)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EABCB, serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA
Validity
Not Before: Mar 2 22:29:11 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69a60f36-7e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:84:3e:29:6a:8d:1f:e8:0d:79:08:1c:cf:cc:
1c:53:48:d4:15:49:c9:74:2a:cd:bb:d2:7b:70:a9:
ea:15:7a:f7:ab:53:86:38:a8:95:a0:f6:75:7e:02:
74:8a:bc:48:df:cc:fd:72:7e:15:ee:50:49:1f:1c:
44:d9:0c:98:b4:75:d6:80:81:d7:f9:de:5d:00:63:
a2:fa:4a:7b:3e:88:8e:84:ab:33:25:b4:66:b1:73:
9a:77:3d:c8:4f:87:08:83:45:9f:bf:ff:fe:22:a2:
67:fc:75:ad:44:ac:c3:96:79:b6:86:a4:6c:6c:9d:
87:c2:ed:1c:1f:1f:41:02:4c:e3:69:f9:e7:ec:95:
62:10:f4:69:56:a5:a0:5d:22:61:26:ac:7a:f2:b6:
c2:d8:4a:b5:c7:78:6e:90:c6:ec:69:57:fd:ab:69:
94:5b:3c:31:ad:c4:78:a8:5a:13:17:0a:8b:01:aa:
2b:ae:7d:c8:3c:f4:23:9e:7b:02:12:4d:3d:ff:bf:
30:cd:90:4c:fd:53:5f:5e:32:8a:9f:03:29:57:d2:
82:6a:f9:e5:ed:2b:d2:b0:19:99:36:be:fd:6c:ae:
1b:ae:05:b1:7f:3f:12:27:58:ac:77:05:6f:4a:82:
56:19:ba:f6:97:56:5d:37:5e:1f:34:a1:4d:13:df:
4a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:52:D2:A8:69:6A:B8:09:9D:20:93:37:FF:C5:B6:B8:00:7A:F9:68
X509v3 Authority Key Identifier:
keyid:16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/2E248E2CAD8511F08469DF53C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:bac0::/32
Signature Algorithm: sha256WithRSAEncryption
51:8b:37:52:d8:9d:b4:a6:c2:62:b2:32:d3:6c:2f:ef:b9:d2:
a5:89:f0:ed:ce:c2:b1:e3:1b:bb:55:1d:f0:2e:28:bf:dd:dd:
04:11:b8:3e:47:6f:e6:5a:ee:7d:a7:3a:54:7b:69:47:b1:7c:
98:73:30:79:52:26:ec:ac:a1:87:5d:e6:59:fd:a8:cd:66:62:
73:9a:10:23:5e:a0:a5:6d:e6:33:2b:1b:34:2d:f6:d2:71:41:
a5:b4:f2:a3:96:87:53:e0:39:7f:ed:79:90:cf:71:94:2e:e9:
54:fd:44:f1:53:da:19:21:a6:3d:1b:e0:8e:c1:f5:dc:2c:43:
17:e2:b0:dc:9f:4d:33:01:03:8c:4d:c8:b0:1f:14:21:2b:0b:
27:b6:1b:0e:24:40:2e:97:5b:81:3b:db:8b:43:75:49:51:5d:
c8:b0:e0:ad:1a:7b:bf:88:be:52:44:a2:c8:f2:df:60:74:11:
d8:33:b6:7b:38:1f:18:78:9b:e7:57:e4:a3:bb:7c:6c:11:8e:
b6:f8:9e:29:67:66:34:3a:0a:1b:97:4a:70:4e:97:bb:8d:90:
6a:db:82:b2:9b:36:e5:3c:37:33:1c:79:00:a8:2b:6c:5d:c8:
b5:ff:de:9e:7e:51:6e:ba:fc:4c:0a:7f:89:ca:63:98:7e:d4:
84:76:75:64
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgICByUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFCQ0IxMTAvBgNVBAUTKDE2Qjk4ODQyRDg2MUFFRkU4MDMwNDAyMDBDOUFBQTg5
NTYwRjJCQ0EwHhcNMjYwMzAyMjIyOTExWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2MGYzNi03ZTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnYQ+KWqNH+gNeQgcz8wcU0jUFUnJdCrNu9J7cKnqFXr3q1OGOKiVoPZ1fgJ0
irxI38z9cn4V7lBJHxxE2QyYtHXWgIHX+d5dAGOi+kp7PoiOhKszJbRmsXOadz3I
T4cIg0Wfv//+IqJn/HWtRKzDlnm2hqRsbJ2Hwu0cHx9BAkzjafnn7JViEPRpVqWg
XSJhJqx68rbC2Eq1x3hukMbsaVf9q2mUWzwxrcR4qFoTFwqLAaorrn3IPPQjnnsC
Ek09/78wzZBM/VNfXjKKnwMpV9KCavnl7SvSsBmZNr79bK4brgWxfz8SJ1isdwVv
SoJWGbr2l1ZdN14fNKFNE99K/wIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFDtS0qhp
argJnSCTN//FtrgAevloMB8GA1UdIwQYMBaAFBa5iELYYa7+gDBAIAyaqolWDyvK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUJDQi8zNDJGRkYxODdB
ODYxMUVCOTdBRTUxNjBDNEY5QUUwMi9Gcm1JUXRoaHJ2NkFNRUFnREpxcWlWWVBL
OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZybUlRdGhocnY2QU1FQWdESnFxaVZZUEs4by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUFCQ0IvMzQyRkZGMTg3QTg2MTFFQjk3QUU1MTYwQzRGOUFFMDIvMkUyNDhFMkNB
RDg1MTFGMDg0NjlERjUzQzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJAC6wDANBgkqhkiG9w0BAQsFAAOCAQEAUYs3UtidtKbCYrIy02wv
77nSpYnw7c7CseMbu1Ud8C4ov93dBBG4Pkdv5lrufac6VHtpR7F8mHMweVIm7Kyh
h13mWf2ozWZic5oQI16gpW3mMysbNC320nFBpbTyo5aHU+A5f+15kM9xlC7pVP1E
8VPaGSGmPRvgjsH13CxDF+Kw3J9NMwEDjE3IsB8UISsLJ7YbDiRALpdbgTvbi0N1
SVFdyLDgrRp7v4i+UkSiyPLfYHQR2DO2ezgfGHib51fko7t8bBGOtvieKWdmNDoK
G5dKcE6Xu42QatuCsps25Tw3Mxx5AKgrbF3Itf/enn5Rbrr8TAp/icpjmH7UhHZ1
ZA==
-----END CERTIFICATE-----
Generated at Sat Mar 7 17:26:50 2026 by rpki-client