
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/9FC8CE38936E11EC92AF8421C4F9AE02.roa
File: 9FC8CE38936E11EC92AF8421C4F9AE02.roa (raw, json)
Hash identifier: WTqwHXSIQbsE5L8weGRc2aq7JOuLqHkuqUf1ZNJu4GM=
Subject key identifier: 4C:17:40:39:2B:9B:66:60:76:F3:35:B4:3D:68:A7:48:30:8F:CF:66
Certificate issuer: /CN=A91F58C9/serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE
Certificate serial: 0458
Authority key identifier: 19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/9FC8CE38936E11EC92AF8421C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:30:56 +0000
ROA not before: Wed 31 Dec 2025 00:19:45 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 149512
IP address blocks: 2400:16e0::/32 maxlen: 32
2400:16e0::/48 maxlen: 48
2400:16e0:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl
rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 23:47:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1112 (0x458)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F58C9, serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE
Validity
Not Before: Dec 31 00:19:45 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a477d0-cd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8a:2b:54:c4:77:44:77:99:56:57:d4:b6:f7:
d7:35:2e:4f:62:e9:6a:ec:d5:99:2e:70:7c:33:1b:
e5:99:73:1b:e9:24:19:65:bb:3f:63:30:2a:e2:70:
61:a4:37:ba:e1:89:5b:fd:62:38:aa:61:7d:d9:05:
8c:35:7b:89:2c:0e:c0:93:a5:01:34:cb:5d:37:48:
3c:cf:22:44:d6:78:aa:c5:d4:fb:7b:0a:dc:45:f9:
b2:99:5b:d1:7e:f4:d1:42:21:44:90:4f:2c:60:3e:
d9:0e:c2:f5:97:90:42:e0:3f:e5:f4:f5:23:bf:28:
6e:bc:06:d5:af:53:d1:8f:25:8f:23:11:1f:32:70:
08:a5:04:96:89:22:2d:17:84:05:cd:7d:2b:59:e0:
87:a3:49:cc:e1:88:47:18:0e:f3:74:08:f2:d3:9f:
2a:31:d9:9b:5b:e7:0b:64:05:5a:2d:35:80:9d:ac:
40:9e:85:fe:75:e7:b1:80:a3:53:2a:54:7e:11:a7:
cb:55:17:90:5e:7a:cc:d4:cb:90:51:28:a4:67:de:
7d:46:ec:bd:ef:b8:39:43:2d:4e:9d:98:e4:2c:0f:
b9:c0:73:6e:5f:8a:65:23:f6:94:2f:29:36:13:29:
6e:2d:e7:bf:a5:09:eb:30:1d:a4:82:af:f9:e0:82:
32:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:17:40:39:2B:9B:66:60:76:F3:35:B4:3D:68:A7:48:30:8F:CF:66
X509v3 Authority Key Identifier:
keyid:19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/9FC8CE38936E11EC92AF8421C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:16e0::/32
Signature Algorithm: sha256WithRSAEncryption
1b:5e:f4:84:c7:66:f7:56:86:31:83:6b:a7:ef:ae:df:15:fb:
82:c5:c0:31:43:d9:9e:d0:ab:ab:d7:97:8a:a0:89:b3:e3:6e:
1f:9f:a4:69:2a:91:64:c7:6b:80:e3:29:af:72:ab:de:23:a6:
78:e8:c0:fc:93:f1:f6:5a:5f:5d:c5:81:6a:15:2f:0b:88:c0:
70:4f:c2:c8:54:08:e1:2d:c1:55:40:f6:b1:e4:38:cb:ec:ca:
e2:ba:54:87:40:7e:0f:ae:2b:b6:39:ba:d1:66:f3:07:73:3a:
9f:d0:22:12:19:61:e7:3e:e3:ca:41:6b:8b:8d:63:81:96:a7:
f2:d0:72:33:e1:3c:0f:cb:1e:a7:dc:df:df:fe:80:31:ed:ab:
a5:c8:36:a8:f0:cb:c9:ab:7b:72:0f:74:e5:62:e7:c6:51:a4:
77:e3:67:d6:ff:81:3a:e0:44:33:ba:45:2c:e2:43:28:41:fb:
dc:37:39:17:a0:d0:9e:59:c7:db:e1:9b:5e:d6:29:f1:9e:3d:
4a:28:50:f5:e6:51:5e:21:27:c9:d1:45:a2:0d:41:39:76:0f:
22:31:94:54:dc:a5:69:2f:97:1d:2c:99:af:19:f0:dc:cc:77:
25:b3:56:38:02:60:ba:4f:69:09:d9:b7:d7:c7:2d:2b:d1:7f:
a0:86:a6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:56:31 2026 by rpki-client