
$ rpki-client -vvf rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/9DB343D0DA5A11F08EBD209195D3641D.roa
File: 9DB343D0DA5A11F08EBD209195D3641D.roa (raw, json)
Hash identifier: p5IcAQf4UZMIv4cEZxoIzPi0PsEpFLzNcHni6R7QkcI=
Subject key identifier: B7:DD:8F:80:E1:08:49:A7:22:DD:75:42:C1:D8:2C:D7:5E:8D:30:9A
Certificate issuer: /CN=A91519CC/serialNumber=49649E94F6CA3DBDC1FFCE99FF1BBCAB8CD0AA5C
Certificate serial: 36
Authority key identifier: 49:64:9E:94:F6:CA:3D:BD:C1:FF:CE:99:FF:1B:BC:AB:8C:D0:AA:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SWSelPbKPb3B_86Z_xu8q4zQqlw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/9DB343D0DA5A11F08EBD209195D3641D.roa
Signing time: Mon 02 Mar 2026 13:42:04 +0000
ROA not before: Tue 16 Dec 2025 08:38:38 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 154434
IP address blocks: 2001:df6:7340::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/SWSelPbKPb3B_86Z_xu8q4zQqlw.crl
rsync://rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/SWSelPbKPb3B_86Z_xu8q4zQqlw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SWSelPbKPb3B_86Z_xu8q4zQqlw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:46:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91519CC, serialNumber=49649E94F6CA3DBDC1FFCE99FF1BBCAB8CD0AA5C
Validity
Not Before: Dec 16 08:38:38 2025 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a593ac-fd96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:14:2f:19:00:50:89:02:10:38:ec:73:d7:7f:
aa:ef:a7:23:79:b6:a0:d2:a2:a8:e5:f9:17:52:33:
75:50:bc:43:16:5a:0c:e5:97:34:b2:5c:e5:ee:4d:
65:ad:0f:f5:da:9c:76:06:b4:a6:27:dd:8b:53:76:
6f:d5:78:2b:06:66:b8:c0:7b:7b:3d:71:7f:be:b0:
07:bf:88:9c:f9:94:4b:4a:f4:97:fb:01:62:3f:79:
73:c0:bc:71:1c:63:cb:22:79:4e:a3:66:fc:ff:c8:
10:5e:95:33:08:6a:b9:45:7e:b7:4a:f4:e2:6d:0d:
bd:e7:45:96:2d:9d:a9:1c:08:b3:cc:f6:04:6a:93:
af:e4:2c:78:57:b7:92:33:d5:31:80:85:1a:18:57:
e0:21:77:8f:25:92:0b:73:e5:7d:18:08:46:dc:67:
08:7f:a6:34:16:47:01:15:a3:61:c6:3e:d6:eb:da:
94:bc:3f:99:83:f7:cf:d8:d6:41:44:01:ce:c1:59:
66:c1:be:06:d7:7a:3d:50:d6:a5:60:6b:2a:ff:e7:
94:90:14:b4:8c:e5:65:26:e8:dd:56:f6:6e:fa:65:
60:55:47:1a:68:d3:0f:a4:96:7b:6e:7f:fe:ff:fa:
61:a3:94:0b:ac:59:c2:07:cc:5f:88:c9:5d:e7:d2:
3d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DD:8F:80:E1:08:49:A7:22:DD:75:42:C1:D8:2C:D7:5E:8D:30:9A
X509v3 Authority Key Identifier:
keyid:49:64:9E:94:F6:CA:3D:BD:C1:FF:CE:99:FF:1B:BC:AB:8C:D0:AA:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/SWSelPbKPb3B_86Z_xu8q4zQqlw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SWSelPbKPb3B_86Z_xu8q4zQqlw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/9DB343D0DA5A11F08EBD209195D3641D.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:7340::/48
Signature Algorithm: sha256WithRSAEncryption
6e:34:bb:92:fa:83:ed:b7:cd:ed:67:25:ea:50:b3:22:66:6c:
01:67:d4:66:28:12:f2:20:eb:13:4c:2c:4f:5f:df:1e:2d:eb:
b1:e4:fb:c8:03:17:47:59:54:79:2f:d5:5e:4f:89:d1:ef:84:
4d:86:d1:65:1c:c1:5a:71:77:45:ce:5d:3e:70:c5:72:d4:72:
2e:5e:24:0e:30:67:57:14:0f:03:8c:a4:2b:d4:a0:27:4c:79:
e0:23:21:c0:a9:b0:64:25:4f:c3:36:02:67:c2:46:49:9d:0f:
42:56:5d:fb:39:e5:da:a3:68:61:fb:62:d4:89:0a:9b:27:3c:
dd:55:1b:78:6d:6d:25:46:3e:38:c3:54:83:ab:0f:8a:bc:3c:
34:8c:e9:c0:8d:43:5b:46:b4:d1:40:4e:d6:1c:4f:51:34:78:
c0:08:69:80:bf:89:66:60:2a:ad:1e:bd:25:eb:25:af:3f:0b:
24:d7:9e:c0:df:5b:81:25:3d:0a:14:fa:1e:a5:8e:5e:ff:8d:
cf:ec:ff:01:b7:67:2f:f1:33:67:15:5d:57:91:56:cb:1d:bf:
f0:c2:32:f9:1c:f7:04:79:c8:9f:1e:d0:18:89:a3:5f:7d:19:
f1:43:4e:4f:69:2b:53:dd:16:cc:0c:8e:45:d3:99:cf:0f:26:
9d:4b:23:e5
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
MTlDQzExMC8GA1UEBRMoNDk2NDlFOTRGNkNBM0RCREMxRkZDRTk5RkYxQkJDQUI4
Q0QwQUE1QzAeFw0yNTEyMTYwODM4MzhaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTU5M2FjLWZkOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5FC8ZAFCJAhA47HPXf6rvpyN5tqDSoqjl+RdSM3VQvEMWWgzllzSyXOXuTWWt
D/XanHYGtKYn3YtTdm/VeCsGZrjAe3s9cX++sAe/iJz5lEtK9Jf7AWI/eXPAvHEc
Y8sieU6jZvz/yBBelTMIarlFfrdK9OJtDb3nRZYtnakcCLPM9gRqk6/kLHhXt5Iz
1TGAhRoYV+Ahd48lkgtz5X0YCEbcZwh/pjQWRwEVo2HGPtbr2pS8P5mD98/Y1kFE
Ac7BWWbBvgbXej1Q1qVgayr/55SQFLSM5WUm6N1W9m76ZWBVRxpo0w+klntuf/7/
+mGjlAusWcIHzF+IyV3n0j2fAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUt92PgOEI
Saci3XVCwdgs116NMJowHwYDVR0jBBgwFoAUSWSelPbKPb3B/86Z/xu8q4zQqlww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxOUNDL0EyRDQ2QTQ2REEx
RjExRjBBQjgyMEZGNzg0RDM2NDFEL1NXU2VsUGJLUGIzQl84NlpfeHU4cTR6UXFs
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvU1dTZWxQYktQYjNCXzg2Wl94dThxNHpRcWx3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MTlDQy9BMkQ0NkE0NkRBMUYxMUYwQUI4MjBGRjc4NEQzNjQxRC85REIzNDNEMERB
NUExMUYwOEVCRDIwOTE5NUQzNjQxRC5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAgAQ32c0AwDQYJKoZIhvcNAQELBQADggEBAG40u5L6g+23ze1nJepQ
syJmbAFn1GYoEvIg6xNMLE9f3x4t67Hk+8gDF0dZVHkv1V5PidHvhE2G0WUcwVpx
d0XOXT5wxXLUci5eJA4wZ1cUDwOMpCvUoCdMeeAjIcCpsGQlT8M2AmfCRkmdD0JW
Xfs55dqjaGH7YtSJCpsnPN1VG3htbSVGPjjDVIOrD4q8PDSM6cCNQ1tGtNFATtYc
T1E0eMAIaYC/iWZgKq0evSXrJa8/CyTXnsDfW4ElPQoU+h6ljl7/jc/s/wG3Zy/x
M2cVXVeRVssdv/DCMvkc9wR5yJ8e0BiJo199GfFDTk9pK1PdFswMjkXTmc8PJp1L
I+U=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:32:52 2026 by rpki-client