
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/5B6A06725D2C11F080B2DC7BC4F9AE02.roa
File: 5B6A06725D2C11F080B2DC7BC4F9AE02.roa (raw, json)
Hash identifier: luJDZXUCsErEO6dlGQ0NaKVijOt5Fv1/7lPhVmE4g3Q=
Subject key identifier: 0A:C9:30:08:7D:B4:79:60:61:59:C6:93:E0:C8:AB:5C:55:60:83:ED
Certificate issuer: /CN=A91FC5BD/serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188
Certificate serial: 015E
Authority key identifier: E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/5B6A06725D2C11F080B2DC7BC4F9AE02.roa
Signing time: Sat 07 Mar 2026 04:40:53 +0000
ROA not before: Sat 07 Mar 2026 04:40:53 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 132546
IP address blocks: 2401:3d20:24::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl
rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 18 Mar 2026 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350 (0x15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC5BD, serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188
Validity
Not Before: Mar 7 04:40:53 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69abac55-63d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ad:a4:e1:a6:aa:da:d9:28:28:0b:0f:21:ff:
ee:d3:80:d5:5c:ce:dc:3a:61:a6:33:92:77:50:bf:
3f:4b:a6:8a:7a:d3:09:e3:18:40:bc:b4:02:24:58:
b6:90:90:1b:25:f7:ac:68:73:94:55:1f:56:4d:33:
30:f3:c0:57:15:50:52:a9:35:7e:4a:5f:f6:a1:9e:
40:66:57:78:df:ec:fc:eb:d9:b3:f0:b9:b5:b3:f0:
d8:51:b3:90:0c:e8:d9:60:ad:9d:f9:81:75:37:67:
2a:35:3f:37:39:46:3d:6a:2b:ee:bc:68:c2:d2:b7:
eb:c8:4f:f9:35:86:11:f0:49:87:77:ae:2f:92:52:
1c:2e:18:38:5d:28:53:42:ed:05:36:02:e2:13:28:
66:0f:56:17:b3:ff:81:ad:57:d4:3e:37:82:a1:c9:
28:4d:49:40:cb:4f:af:59:01:2f:67:f8:51:42:26:
7c:e4:80:71:9f:10:66:11:db:cf:0d:ca:b2:07:12:
52:d0:0e:a1:85:78:da:b4:ec:04:62:03:ac:c7:bf:
c2:0d:98:09:4a:9d:8b:cc:50:58:5c:53:bb:d2:19:
ff:50:ef:30:d1:07:75:9b:41:3e:24:77:41:67:7c:
03:73:e7:32:11:70:a7:4b:dd:26:67:cf:c3:eb:70:
34:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C9:30:08:7D:B4:79:60:61:59:C6:93:E0:C8:AB:5C:55:60:83:ED
X509v3 Authority Key Identifier:
keyid:E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/5B6A06725D2C11F080B2DC7BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:3d20:24::/48
Signature Algorithm: sha256WithRSAEncryption
1b:08:79:97:bd:a9:8f:0d:aa:e6:01:b1:03:4a:94:0a:0f:e1:
0f:fd:7c:3a:89:80:d4:d3:13:66:ad:36:78:ba:85:ca:a4:94:
a2:a8:02:43:80:c3:15:7f:7f:bd:bd:28:07:56:44:c3:ff:0a:
79:ea:35:46:d0:47:85:34:0c:42:c4:4f:5c:0c:06:fb:77:98:
69:8d:0f:c1:6c:78:48:5c:b4:65:51:01:e3:73:6c:98:59:73:
6e:5e:10:aa:6c:62:06:f8:bd:b1:f8:18:dc:f5:08:99:13:4a:
81:27:21:eb:76:b4:57:38:96:c6:4e:bc:89:0a:c1:bb:9a:e1:
4e:31:1d:a8:17:5b:bf:05:9a:e4:57:5c:3a:ca:c7:a5:b2:b3:
5b:6f:ba:d6:a2:cf:bb:42:1c:e7:08:f6:bb:6a:a7:50:0b:0f:
1b:96:6a:48:ba:d1:18:26:0a:32:75:c5:6b:61:17:e2:6f:d3:
08:33:40:e6:5e:6d:0b:09:e4:68:2d:dc:ff:81:80:9e:8d:3a:
54:d5:7d:d1:96:d3:e1:d2:2b:e8:b0:7c:b8:99:5f:41:32:04:
88:f9:ab:83:6f:08:22:fc:db:1d:a9:a9:67:7c:64:c9:f4:49:
6d:59:3e:d2:c2:48:84:2f:4b:55:65:76:09:f5:63:30:5e:c1:
bc:cd:bc:67
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkM1QkQxMTAvBgNVBAUTKEU5NzdBOTIyNjIyMEU4Qzc4QTFEMUIzQkUwNEQ2MENE
Q0M4QTIxODgwHhcNMjYwMzA3MDQ0MDUzWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWFiYWM1NS02M2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvK2k4aaq2tkoKAsPIf/u04DVXM7cOmGmM5J3UL8/S6aKetMJ4xhAvLQCJFi2
kJAbJfesaHOUVR9WTTMw88BXFVBSqTV+Sl/2oZ5AZld43+z869mz8Lm1s/DYUbOQ
DOjZYK2d+YF1N2cqNT83OUY9aivuvGjC0rfryE/5NYYR8EmHd64vklIcLhg4XShT
Qu0FNgLiEyhmD1YXs/+BrVfUPjeCockoTUlAy0+vWQEvZ/hRQiZ85IBxnxBmEdvP
DcqyBxJS0A6hhXjatOwEYgOsx7/CDZgJSp2LzFBYXFO70hn/UO8w0Qd1m0E+JHdB
Z3wDc+cyEXCnS90mZ8/D63A0LwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFArJMAh9
tHlgYVnGk+DIq1xVYIPtMB8GA1UdIwQYMBaAFOl3qSJiIOjHih0bO+BNYM3MiiGI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzVCRC83NkMyQzcyRTFD
RUIxMUVGODVERkQ3NzZDNEY5QUUwMi82WGVwSW1JZzZNZUtIUnM3NEUxZ3pjeUtJ
WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZYZXBJbUlnNk1lS0hSczc0RTFnemN5S0lZZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkM1QkQvNzZDMkM3MkUxQ0VCMTFFRjg1REZENzc2QzRGOUFFMDIvNUI2QTA2NzI1
RDJDMTFGMDgwQjJEQzdCQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAE9IAAkMA0GCSqGSIb3DQEBCwUAA4IBAQAbCHmXvamPDarmAbED
SpQKD+EP/Xw6iYDU0xNmrTZ4uoXKpJSiqAJDgMMVf3+9vSgHVkTD/wp56jVG0EeF
NAxCxE9cDAb7d5hpjQ/BbHhIXLRlUQHjc2yYWXNuXhCqbGIG+L2x+Bjc9QiZE0qB
JyHrdrRXOJbGTryJCsG7muFOMR2oF1u/BZrkV1w6yselsrNbb7rWos+7QhznCPa7
aqdQCw8blmpIutEYJgoydcVrYRfib9MIM0DmXm0LCeRoLdz/gYCejTpU1X3RltPh
0ivosHy4mV9BMgSI+auDbwgi/NsdqalnfGTJ9EltWT7SwkiEL0tVZXYJ9WMwXsG8
zbxn
-----END CERTIFICATE-----
Generated at Thu Mar 12 08:01:25 2026 by rpki-client