
$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/D0680FF86AB211F0976F001AC4F9AE02.roa
File: D0680FF86AB211F0976F001AC4F9AE02.roa (raw, json)
Hash identifier: xvCQat8cEUCOVzKUZe2Y4zreB9P77CYReFAzizbnP0s=
Subject key identifier: 3E:3F:9F:A4:11:37:76:EF:86:36:A1:58:B8:7A:E8:E6:83:72:C0:7C
Certificate issuer: /CN=A91685E9/serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA
Certificate serial: 011C
Authority key identifier: F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/D0680FF86AB211F0976F001AC4F9AE02.roa
Signing time: Tue 03 Mar 2026 06:42:10 +0000
ROA not before: Tue 03 Mar 2026 06:42:10 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 140119
IP address blocks: 2401:e920:fffe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl
rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:43:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284 (0x11c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91685E9, serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA
Validity
Not Before: Mar 3 06:42:10 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a682c2-cf5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9d:6a:5a:95:55:26:cd:56:6a:65:bc:44:88:
6b:fc:90:d5:09:79:78:f3:f9:e3:17:da:bb:64:d1:
52:ef:14:ce:23:5d:d3:63:45:4c:81:8d:2d:ad:50:
81:2f:8c:49:55:fb:81:fc:eb:50:df:fb:28:82:fe:
2d:e7:08:24:c1:64:0c:10:65:25:34:13:97:94:6b:
20:a1:c5:fe:12:d7:fb:73:8c:47:0e:8a:d9:8f:9e:
d9:7b:80:7a:ba:06:f4:b3:8b:ed:e9:94:1a:6b:00:
70:22:d7:46:7e:64:32:16:8a:12:a6:a2:34:71:60:
c4:ea:73:43:07:c8:97:bc:6f:3c:d6:b0:a6:7c:01:
02:ca:96:43:e1:3c:42:25:a5:07:d3:5b:f4:20:c2:
1d:df:8f:d0:d4:da:e1:d4:c9:4e:4a:78:11:79:f5:
d0:07:12:1c:8b:f4:2d:ea:0f:47:6a:42:ac:3a:f2:
db:82:21:81:b3:9d:c6:de:2e:23:52:30:80:bd:65:
6a:c0:3f:9d:86:a0:3a:af:f3:dc:9c:bb:3e:fd:c7:
71:59:b2:ac:bf:d7:d0:e8:58:12:d0:f6:04:11:71:
22:fe:66:13:d0:2d:6f:cf:ef:53:d1:40:90:9d:d7:
51:15:d3:9d:d5:d7:84:67:2b:51:da:aa:c0:40:4a:
b6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3F:9F:A4:11:37:76:EF:86:36:A1:58:B8:7A:E8:E6:83:72:C0:7C
X509v3 Authority Key Identifier:
keyid:F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/D0680FF86AB211F0976F001AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:e920:fffe::/48
Signature Algorithm: sha256WithRSAEncryption
1e:29:50:ae:8c:21:46:6e:0d:c5:24:8b:45:21:92:8d:46:6c:
94:9d:df:06:9e:94:10:72:c2:06:c0:8b:e3:dc:aa:e3:61:15:
cb:5e:ec:26:88:0a:89:04:f0:33:72:e4:5e:f5:98:3c:d4:6a:
c9:8e:fe:7d:b0:80:f5:14:e8:78:fa:dd:d3:9e:f9:53:2c:18:
6d:81:0a:fd:ec:d9:db:2b:41:b6:ac:bb:89:0a:b4:40:5a:98:
65:e7:a7:1d:d8:13:f5:18:67:55:71:01:18:6d:b5:91:6d:71:
4d:08:88:90:e3:93:d9:c0:9a:31:63:11:fc:0d:ea:71:42:d5:
0a:2c:50:79:7c:84:55:fa:e3:84:10:ac:4b:c5:a4:56:06:60:
c6:87:7a:1b:46:84:18:7f:41:bc:80:2d:c3:5e:98:1f:e7:08:
c7:9d:c9:da:dc:e8:e3:f3:8a:a3:95:c5:a0:79:e2:81:78:10:
f0:d6:72:e3:c8:45:20:07:66:a7:31:4d:ed:70:d3:cd:56:a6:
e9:d6:58:1d:77:3b:8a:f6:25:1c:89:ff:80:7c:0c:a8:61:ef:
fd:40:8c:84:f7:24:60:f9:74:89:a0:ce:c7:2d:9f:37:02:2e:
ca:9f:22:1d:82:10:a1:2f:07:79:1a:02:73:fd:97:62:6c:02:
47:86:d6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:12:32 2026 by rpki-client