
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/6360524E03D311F0A6C64177C4F9AE02.roa
File: 6360524E03D311F0A6C64177C4F9AE02.roa (raw, json)
Hash identifier: Ry7KGatju8gQIkEerCE04qBOSViPgAfHOUcXP50puA0=
Subject key identifier: 2D:4F:A0:CB:76:6E:4E:9D:A2:0D:01:36:D0:E0:F8:21:E2:7D:FF:BA
Certificate issuer: /CN=A91EAF4B/serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
Certificate serial: 01BB
Authority key identifier: AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/6360524E03D311F0A6C64177C4F9AE02.roa
Signing time: Tue 31 Mar 2026 19:24:40 +0000
ROA not before: Tue 31 Mar 2026 19:24:39 +0000
ROA not after: Sat 01 Aug 2026 00:00:00 +0000
asID: 14007
IP address blocks: 2405:cbc0::/32 maxlen: 32
2405:cbc0:2000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl
rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:55:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 443 (0x1bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAF4B, serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
Validity
Not Before: Mar 31 19:24:39 2026 GMT
Not After : Aug 1 00:00:00 2026 GMT
Subject: CN=69cc1f77-7ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fa:a4:9f:a9:dd:17:70:c3:be:8c:5a:41:c8:
ec:6e:eb:8f:b4:de:0e:c6:c4:89:05:5f:c5:ed:ae:
97:f8:63:8e:a4:3f:7f:aa:51:79:16:51:9e:11:10:
b4:c7:73:30:4e:4c:db:c6:6e:0a:31:94:ed:0c:13:
26:18:24:5a:3e:1c:ae:38:4f:8d:05:3d:38:ec:4c:
1f:7b:bd:86:c4:9e:e2:e0:20:7d:bd:e3:d0:42:7c:
ae:42:06:eb:5b:57:e5:70:14:2d:3b:2e:47:73:3a:
78:d0:43:83:f1:ec:cb:93:cc:1b:d0:e4:47:6c:c1:
70:bd:24:ef:f1:af:42:f9:a4:94:4d:9e:0f:de:40:
a5:c4:3e:a9:84:8b:cc:31:96:82:3c:ed:ac:01:c5:
93:8e:9e:c2:1d:c9:a0:e5:7c:c5:b9:9a:f2:2c:2c:
c1:7c:06:6c:16:c6:1a:93:5d:98:50:5f:51:d7:83:
64:6a:70:a8:02:e2:26:bf:cb:cf:2e:f5:39:f7:79:
19:54:47:de:64:93:5e:f9:0a:1c:ed:76:bd:c3:68:
56:36:1d:52:6f:69:60:86:8c:5b:db:86:3d:65:48:
be:9a:98:87:6b:e3:3a:e3:af:69:2a:b0:be:09:43:
cf:06:a0:7e:68:0b:76:b2:65:2d:30:5d:c7:c4:12:
46:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4F:A0:CB:76:6E:4E:9D:A2:0D:01:36:D0:E0:F8:21:E2:7D:FF:BA
X509v3 Authority Key Identifier:
keyid:AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/6360524E03D311F0A6C64177C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:cbc0::/32
Signature Algorithm: sha256WithRSAEncryption
58:37:90:87:c1:31:4c:bd:dc:06:14:fb:af:a2:0f:14:5f:a7:
00:5e:dc:8b:ac:64:65:54:db:60:45:88:6f:8d:0b:60:8a:3e:
b6:79:0f:6b:2a:b3:f4:9d:c4:ed:36:da:53:d8:8c:f2:99:e6:
80:9b:26:68:ae:50:d4:94:fb:2d:1f:7d:d7:1a:25:4b:19:8d:
7f:95:81:b8:1b:af:fc:de:1b:fb:b9:ee:1b:ad:69:d5:a0:89:
b6:a5:de:4e:05:b8:23:2e:82:d1:11:9b:91:c1:b0:e2:ea:66:
24:f2:54:fe:b6:ec:e3:55:67:58:83:79:ab:6f:6f:09:e0:22:
03:06:0e:48:0b:ae:cc:47:1c:54:1e:6d:4b:67:80:c5:d6:59:
68:92:d8:5f:bc:77:17:ef:7b:6d:a2:b6:f9:52:3c:0c:58:a8:
c2:0e:ca:9a:f1:76:59:f6:68:25:80:69:7b:7e:c9:dd:32:af:
61:7e:cd:81:e5:75:f6:77:51:22:fa:57:1e:35:88:4f:74:a4:
dd:27:9d:38:bb:86:91:b7:a9:43:49:25:f3:74:b8:0e:81:dc:
d8:f0:36:6a:59:35:5d:b3:13:48:75:a5:50:4c:03:e6:e7:ce:
55:de:e4:5b:fb:ed:24:0e:08:79:69:b0:de:da:40:03:cd:61:
70:3c:04:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:23:28 2026 by rpki-client