
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/12032AE02EAC11EFB73C0767C4F9AE02.roa
File: 12032AE02EAC11EFB73C0767C4F9AE02.roa (raw, json)
Hash identifier: LCp+IefaBKjg+XGn+zhxSq3lJLzchE+i+vnMx628oTs=
Subject key identifier: 40:75:FF:ED:70:36:E9:F9:9F:BE:3D:A6:FA:11:B0:58:17:D9:85:40
Certificate issuer: /CN=A91FA6FF/serialNumber=CAE3DB8ADEE7A16AB6CA537F2347B0205BDF4F76
Certificate serial: 0159
Authority key identifier: CA:E3:DB:8A:DE:E7:A1:6A:B6:CA:53:7F:23:47:B0:20:5B:DF:4F:76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/12032AE02EAC11EFB73C0767C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:33:01 +0000
ROA not before: Wed 09 Apr 2025 05:12:37 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 15830
IP address blocks: 2401:9f20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.crl
rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 04:52:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 345 (0x159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA6FF, serialNumber=CAE3DB8ADEE7A16AB6CA537F2347B0205BDF4F76
Validity
Not Before: Apr 9 05:12:37 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a5918d-e00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7f:df:6b:ac:6e:f5:47:3d:0c:b5:bb:d3:b8:
3e:c6:ef:bc:74:70:ca:2d:f6:09:9f:f6:79:6c:4a:
ec:07:a4:54:38:41:23:5f:1e:27:07:b0:0b:d9:81:
f4:73:2b:e4:df:b5:1e:95:7c:f5:94:32:f4:c9:94:
f1:15:51:3c:c5:1e:ae:ee:22:0b:11:9b:e5:85:c3:
24:b7:7f:61:bd:82:d9:95:91:99:a2:ed:2a:0f:e3:
72:e9:33:02:c3:26:b5:5f:a1:72:36:a7:ea:35:9e:
ac:77:4c:f0:ec:5e:da:48:5b:a7:59:22:8b:fb:5f:
1d:86:11:57:cf:f3:00:87:dc:fb:44:83:9d:89:42:
a0:da:48:b0:6f:7c:44:66:7a:09:a4:fa:c6:1b:74:
58:9b:16:ee:23:62:2c:51:07:60:c7:a7:ec:d8:82:
7b:e0:91:bb:04:57:e2:27:69:ec:ed:48:99:e3:b3:
3f:07:59:95:b7:c9:ce:de:38:99:7b:76:0d:ad:d0:
58:83:1b:3e:e3:c4:11:23:c1:08:23:aa:e1:01:02:
a9:6c:b4:7a:71:65:17:64:e1:39:03:f7:01:20:f7:
81:7b:3c:46:f7:4f:99:f0:ee:a7:4c:db:2d:7b:2a:
96:55:93:6c:11:6c:7f:7c:a7:ce:5c:69:ef:23:b6:
d6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:75:FF:ED:70:36:E9:F9:9F:BE:3D:A6:FA:11:B0:58:17:D9:85:40
X509v3 Authority Key Identifier:
keyid:CA:E3:DB:8A:DE:E7:A1:6A:B6:CA:53:7F:23:47:B0:20:5B:DF:4F:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/12032AE02EAC11EFB73C0767C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:9f20::/32
Signature Algorithm: sha256WithRSAEncryption
62:b6:f8:80:2b:82:86:c3:40:b6:6f:f1:b7:a2:af:74:64:c4:
7e:3e:ea:8f:99:98:35:ec:12:71:b4:e6:3c:c1:5e:8c:16:11:
1b:89:a4:f8:59:84:64:dc:09:d5:6b:82:de:44:8f:a4:24:78:
2d:68:f4:64:a4:02:5a:d4:c3:d9:3e:74:2f:c0:e6:3e:fe:a3:
19:01:3f:4c:ce:ba:fc:39:10:81:39:c6:97:08:a3:ca:7e:51:
66:3a:d2:2a:6f:a5:f0:17:05:00:39:db:bd:b5:77:96:4e:fe:
b3:ac:8f:23:28:f2:c9:68:8d:b7:99:dc:4e:94:35:9b:9a:90:
7d:0e:6e:03:5d:97:81:ce:fa:f3:23:4c:69:78:e5:17:9e:1e:
c5:8c:78:3d:23:e2:3d:5a:e8:7e:3d:fd:96:17:db:e9:34:68:
46:02:53:ea:ff:a9:46:d8:cf:34:f7:05:0e:31:a0:76:68:83:
c0:a6:65:fe:a3:f3:81:cf:06:63:54:bc:96:ad:3b:80:f5:59:
47:3d:9a:74:bf:3b:de:88:d7:fa:2e:d6:fe:0a:d2:62:23:0a:
71:94:5d:b7:ff:a4:61:73:a0:2c:d5:d5:08:b0:af:e3:24:25:
f7:e9:38:bd:2b:9a:45:53:00:86:7d:06:d0:3b:6b:0d:84:42:
9e:2a:c0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 15:21:30 2026 by rpki-client