
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/2B46EF64951211F0A6C6AF5AC4F9AE02.roa
File: 2B46EF64951211F0A6C6AF5AC4F9AE02.roa (raw, json)
Hash identifier: c7Rbo+oNT+V1uajSdDgXAF7Hq3CeSaeGd4C51hV9pYE=
Subject key identifier: E6:CA:33:5A:98:23:9F:1A:C6:DF:E9:BE:74:5C:29:85:22:A4:99:33
Certificate issuer: /CN=A91F58C9/serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE
Certificate serial: 045C
Authority key identifier: 19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/2B46EF64951211F0A6C6AF5AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:31:00 +0000
ROA not before: Wed 31 Dec 2025 00:19:49 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 7594
IP address blocks: 2400:16e0:36::/48 maxlen: 48
2400:16e0:36:3000::64/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl
rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 23:47:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1116 (0x45c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F58C9, serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE
Validity
Not Before: Dec 31 00:19:49 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a477d4-0dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:77:1e:de:68:71:9f:24:f5:d0:55:18:f2:b9:
98:42:38:37:4d:1a:c9:2c:39:63:e8:81:0e:82:34:
cd:59:70:6a:61:a8:5f:2f:d0:86:85:c5:6b:35:60:
ad:43:f1:7a:b6:e3:d5:a4:79:a1:8d:9a:61:27:ce:
1e:89:70:bd:d9:bf:4b:13:6a:a0:a1:0c:a0:09:b5:
07:53:cb:b3:08:98:9e:6e:88:1e:fe:aa:6d:b8:5e:
f9:9f:ee:40:f9:db:7d:30:83:15:74:c4:ab:62:18:
dc:db:05:e6:c7:d2:80:e8:57:77:af:4f:e9:bb:0b:
3e:5b:a1:ec:a2:d2:24:0b:6a:b5:5b:cc:42:24:6b:
19:61:52:b3:1c:55:a5:f2:37:31:ff:11:e1:8b:1f:
a8:f6:d3:a6:16:18:ec:2f:86:8a:fa:3c:52:51:95:
fe:29:d7:ec:7b:85:2f:d2:eb:15:46:7d:89:aa:70:
67:96:49:79:1d:98:07:09:8b:bd:7d:06:7e:6a:16:
50:a3:ec:a9:64:cd:85:52:f9:be:18:8d:60:51:06:
d7:db:03:dd:15:8e:44:34:ac:0a:cb:19:bc:d8:bf:
33:51:c9:d0:05:97:dc:04:37:c0:40:5a:64:6c:e8:
72:6e:39:cb:96:b6:42:50:56:ac:cd:67:f2:4d:f7:
29:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CA:33:5A:98:23:9F:1A:C6:DF:E9:BE:74:5C:29:85:22:A4:99:33
X509v3 Authority Key Identifier:
keyid:19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/2B46EF64951211F0A6C6AF5AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:16e0:36::/48
Signature Algorithm: sha256WithRSAEncryption
7a:b5:04:aa:f1:10:ee:40:a6:a2:8e:3e:8b:bd:58:38:82:3b:
eb:4b:cd:47:a8:7f:6e:73:bf:a4:9f:20:fe:93:a5:a7:be:a3:
d6:3b:da:11:29:83:ac:4b:9c:6c:1d:24:f3:ef:df:0d:32:41:
39:4a:65:1b:6a:d1:2d:91:14:1b:b3:9b:06:c3:7c:a6:1a:77:
7f:e2:84:dd:2d:c7:f4:7c:43:dc:4b:bd:5e:4f:88:b4:91:64:
72:e1:6d:db:43:96:64:3d:9c:5d:2c:da:b2:42:6b:65:ea:be:
f8:f9:39:10:a9:4b:fb:88:0e:05:98:3e:44:1a:10:cd:25:0e:
7a:c7:10:7b:5e:36:4f:86:be:5f:74:11:79:a8:f9:38:db:fc:
8c:df:3a:b9:e3:58:67:db:45:02:01:a5:91:07:0c:b3:ef:f8:
c1:f7:e3:ca:56:6d:69:7f:06:41:fc:59:93:83:ad:af:d5:64:
50:f4:44:8d:bf:1b:36:de:9f:3c:20:31:ef:03:da:dd:92:5c:
a4:33:8d:7e:85:f0:23:e1:6a:6e:d3:af:ca:6e:39:1d:93:6f:
03:d6:84:1c:b6:6f:ad:88:1c:65:5d:7c:43:ea:8d:c7:2e:dd:
7b:35:cf:a7:7d:a9:a6:c8:6c:1c:56:72:5c:86:ce:c8:ee:85:
18:36:31:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:11:13 2026 by rpki-client