
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/139300E4BA6911EFA78E2F66C4F9AE02.roa
File: 139300E4BA6911EFA78E2F66C4F9AE02.roa (raw, json)
Hash identifier: yCvoaq2+gH8eug9ke1gyvyuGfvN0I5mdLMCLsy4Yymk=
Subject key identifier: E1:39:47:BE:80:9E:29:B6:CE:F4:65:1B:94:D0:87:A2:5C:59:C8:31
Certificate issuer: /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial: 02AC
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/139300E4BA6911EFA78E2F66C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:30:53 +0000
ROA not before: Thu 31 Jul 2025 04:10:50 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 32167
IP address blocks: 2401:b60:2d::/48 maxlen: 48
2401:b60:1000::/36 maxlen: 44
2401:b60:e300::/40 maxlen: 48
2401:b60:e400::/40 maxlen: 48
2401:b60:e500::/40 maxlen: 48
2401:b60:e600::/40 maxlen: 48
2401:b60:e700::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Mar 2026 02:14:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 684 (0x2ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Validity
Not Before: Jul 31 04:10:50 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a485dd-a2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:63:b5:2c:ff:4c:8a:50:46:f6:37:d9:57:ee:
bb:4c:b8:15:28:b0:de:b2:7d:df:ac:9c:66:f1:04:
8e:37:2a:50:7f:2c:0c:e4:35:97:01:c9:b1:76:19:
1a:48:99:72:00:0b:40:c1:08:7e:77:a3:a0:ad:f5:
48:0f:82:db:68:85:c1:24:29:f0:65:39:2e:4c:5b:
7d:1a:d0:4e:42:7d:f7:c9:70:7a:df:a7:19:22:bb:
90:b2:b9:3b:ce:0c:fa:f9:42:8f:c6:f9:26:26:2f:
31:94:5d:cf:c7:91:94:e8:14:94:f0:94:4c:6c:c7:
d4:0d:c6:0c:6b:7e:f5:7b:c3:ea:56:a0:b6:4c:0f:
f2:d7:e8:29:5a:cc:91:fe:af:12:a2:ca:80:99:00:
ab:2b:7b:b8:36:8f:da:8d:86:2c:50:ce:38:da:29:
ca:56:cf:14:60:de:b9:fc:f1:9b:06:27:f7:36:19:
ce:f2:ea:29:da:f4:f8:ed:be:52:dd:b6:ec:0f:e7:
e3:3e:fd:9c:98:d3:2b:59:57:22:d8:c1:4e:57:ae:
fb:72:dd:ba:99:b0:d3:22:be:38:1c:9c:32:ff:b0:
0b:f2:23:81:ba:09:5c:08:e3:f3:56:be:7d:34:af:
82:a4:3f:ff:f1:dc:3f:31:cb:89:83:de:de:ad:46:
9b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:39:47:BE:80:9E:29:B6:CE:F4:65:1B:94:D0:87:A2:5C:59:C8:31
X509v3 Authority Key Identifier:
keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/139300E4BA6911EFA78E2F66C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:b60:2d::/48
2401:b60:1000::/36
2401:b60:e300::-2401:b60:e7ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
51:db:40:7a:0e:72:0a:67:56:d2:89:50:21:d0:12:31:f6:0a:
50:9a:12:36:86:38:c9:98:7a:61:5c:36:43:d5:7b:48:f1:d5:
8f:10:23:75:7f:cd:37:b1:81:30:76:49:30:1f:c6:eb:a9:8e:
2a:b2:a4:ba:95:2a:c2:9b:dc:60:89:a9:bf:bd:fb:65:06:65:
5b:d4:7b:a6:8c:b6:3e:f7:f6:af:cc:96:d3:15:b5:d2:71:fe:
d9:f1:04:fc:a8:68:43:eb:07:62:d5:74:1c:7f:11:68:e1:53:
f2:88:05:7b:dc:0d:e5:58:78:35:95:61:b3:3d:3e:f2:f0:33:
94:2f:82:0a:00:3e:68:71:6e:bf:59:7b:f3:65:6a:db:b9:1b:
ef:c5:0a:5d:9c:92:7f:37:a6:cc:f1:1e:e2:5a:17:6a:bb:50:
ce:05:77:5e:c1:ee:43:1c:5b:a2:93:b2:b8:37:6e:e6:27:a3:
d3:34:e1:be:b2:fa:eb:20:b2:e6:ca:af:17:fe:44:17:3d:c4:
cc:08:e5:8c:47:e1:5c:03:33:6a:d3:53:ce:c6:5d:d0:2b:39:
32:d3:c4:8b:0e:f6:e2:fd:ad:4d:f8:be:01:c4:21:0c:00:e9:
9e:8d:8b:7a:19:b7:5a:df:dc:8a:db:2b:42:f4:42:5a:bb:04:
9c:e0:a1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 04:13:41 2026 by rpki-client