
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/305C2134666211EFB1D51134C4F9AE02.roa
File: 305C2134666211EFB1D51134C4F9AE02.roa (raw, json)
Hash identifier: NBiw0PfzwCZiFFdzuEah9Xt74JYMXPJbIVgjm8WBWcs=
Subject key identifier: 74:D6:12:C0:D7:1A:62:AB:1D:EA:76:7E:52:27:29:D9:0F:88:DD:FD
Certificate issuer: /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial: 02A8
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/305C2134666211EFB1D51134C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:30:50 +0000
ROA not before: Thu 31 Jul 2025 04:10:46 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 215050
IP address blocks: 2401:b60:fffd::/48 maxlen: 48
2401:b60:fffe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Mar 2026 02:14:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680 (0x2a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Validity
Not Before: Jul 31 04:10:46 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a485da-f550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:56:7c:ff:e7:64:d1:89:0c:85:af:72:14:a4:
56:db:b5:73:9f:cf:04:7b:25:df:f9:bf:1f:c2:93:
11:56:fb:88:fd:2a:02:ab:ba:63:b6:ce:42:f6:6f:
97:27:1b:8a:b1:a5:c8:0b:cb:34:66:9a:a1:d3:d6:
fb:ef:e9:f9:5a:ef:d8:23:a1:66:94:28:11:21:6d:
0e:2f:7a:66:bc:66:1b:06:93:97:aa:5d:66:e5:bc:
24:2c:1d:4a:53:91:d4:3a:45:9e:c5:a7:66:09:ff:
bc:74:47:cc:eb:7a:30:2c:c6:df:5a:6f:95:f0:3c:
dd:71:d8:32:f7:52:cc:ea:c2:ef:59:b1:e5:cd:b9:
f3:f7:ed:dd:53:56:fc:d7:91:eb:c9:81:f3:0b:46:
da:29:f8:e5:3f:88:89:d2:db:07:00:79:02:84:7a:
50:6b:80:ce:de:d8:1e:11:19:69:24:30:ed:15:5b:
32:16:a2:98:dc:79:cd:cf:7f:d0:58:00:2e:07:d2:
a3:f5:8a:f6:47:b4:f2:38:af:74:43:b7:94:6c:b0:
1b:1c:30:b0:49:e1:80:52:60:3a:31:19:a5:0d:14:
f8:55:ca:ff:1c:a9:f0:02:9b:78:65:ae:7e:cf:91:
f8:d2:e3:dc:7b:81:bf:26:f9:3b:ed:fc:2b:c5:51:
6e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D6:12:C0:D7:1A:62:AB:1D:EA:76:7E:52:27:29:D9:0F:88:DD:FD
X509v3 Authority Key Identifier:
keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/305C2134666211EFB1D51134C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:b60:fffd::-2401:b60:fffe:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
54:c0:2f:80:ed:1c:b9:1e:d0:58:c2:92:5b:d7:c8:86:ef:f2:
0e:1d:2a:39:3c:5f:8c:ed:28:b3:be:2e:a5:3e:7f:df:68:93:
c6:f5:e8:8f:e2:0b:22:90:32:58:38:17:b9:0b:ed:d5:8f:a0:
86:90:2e:ea:6c:cb:74:0e:47:9f:69:0c:e9:2b:9b:84:a5:09:
83:c9:19:16:6d:9f:b8:15:d7:5a:6d:d1:8a:c0:2d:f8:a3:9b:
ee:99:48:0e:52:68:72:61:20:24:24:b7:d5:11:12:44:d7:12:
3c:dd:6a:e7:e5:8f:85:b6:71:f2:bd:14:5f:fb:d3:86:8e:5f:
8a:d1:82:e0:4a:59:66:d5:df:6c:af:9c:e7:c8:eb:09:2e:13:
2f:c4:5e:75:58:9b:5e:60:ac:0c:b5:b0:d0:47:11:3a:b5:1a:
ec:84:14:63:9c:67:b0:95:cf:40:9e:50:97:04:b2:22:91:6f:
8c:b4:c8:e9:16:4a:eb:63:68:5e:19:10:02:dd:34:55:2d:d6:
ba:16:f3:86:ea:ec:2b:9a:12:22:49:12:e8:ce:d9:78:6f:46:
3a:3b:12:fe:21:a7:9c:3e:9c:4b:28:cf:94:1d:bd:81:83:dc:
d4:bf:91:c6:c3:c3:7a:b5:14:a0:85:3d:de:df:08:49:d3:6f:
2e:a6:5b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 04:48:58 2026 by rpki-client