
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/6D3C9D30195F11F08408FA45C4F9AE02.roa
File: 6D3C9D30195F11F08408FA45C4F9AE02.roa (raw, json)
Hash identifier: Yp0HMv7qZ1vbYODUUhc9C4+UvXo6Ym2toNyWlLIJdGg=
Subject key identifier: 09:94:61:85:47:B1:E3:2E:E4:43:19:A9:1A:26:01:4A:02:51:B1:98
Certificate issuer: /CN=A91A7169/serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
Certificate serial: 022C
Authority key identifier: E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/6D3C9D30195F11F08408FA45C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:55:50 +0000
ROA not before: Thu 14 Aug 2025 23:43:08 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2400:7aa0:2701::/48 maxlen: 48
2400:7aa0:2702::/48 maxlen: 48
2400:7aa0:2703::/48 maxlen: 48
2400:7aa0:2704::/48 maxlen: 48
2400:7aa0:2705::/48 maxlen: 48
2400:7aa0:2706::/48 maxlen: 48
2400:7aa0:2707::/48 maxlen: 48
2400:7aa0:2708::/48 maxlen: 48
2400:7aa0:2709::/48 maxlen: 48
2400:7aa0:270a::/48 maxlen: 48
2400:7aa0:270b::/48 maxlen: 48
2400:7aa0:270c::/48 maxlen: 48
2400:7aa0:270d::/48 maxlen: 48
2400:7aa0:270e::/48 maxlen: 48
2400:7aa0:270f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl
rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:57:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 556 (0x22c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7169, serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
Validity
Not Before: Aug 14 23:43:08 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a48bb6-70be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8a:55:9a:4d:6f:a2:59:2a:1f:76:ce:3c:73:
1f:9e:c3:f5:1b:c2:78:2a:60:66:5c:58:f8:c6:e1:
6e:f2:02:c7:ef:d8:98:6d:7d:16:35:3c:a3:92:8b:
01:81:26:28:4a:5a:41:cc:aa:f0:cd:43:67:fb:ff:
8c:99:fe:65:f5:93:24:bd:9f:c7:63:05:58:06:56:
8e:d9:b3:f2:19:cb:8c:5d:32:6b:8d:5c:fe:99:d2:
51:f8:6b:51:8c:70:ae:5a:62:07:1e:00:13:d3:95:
5a:19:0d:7e:4e:01:67:5e:eb:22:5b:80:04:84:a7:
86:f0:56:80:e3:36:0d:5f:9b:d9:83:60:8d:a7:80:
0a:95:fd:70:d8:36:b2:66:25:82:51:4f:af:41:d0:
ad:6b:57:63:ed:c2:ae:8e:17:b2:79:c5:56:4b:fb:
da:b5:9b:a2:9f:8a:8b:13:7b:7f:e8:50:97:90:bb:
d3:73:33:a5:fc:58:3f:62:43:13:48:f0:c2:57:3b:
9d:cc:de:47:c2:ef:c8:7d:c5:f9:6e:aa:06:e0:0b:
e7:bb:c7:9f:67:d2:c7:17:67:ff:cb:5b:44:cc:4e:
0d:68:87:29:32:f9:18:8b:9d:96:2b:cd:16:c7:f2:
f6:e3:c2:ba:bd:d6:b6:35:78:6c:a2:a1:15:00:26:
28:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:94:61:85:47:B1:E3:2E:E4:43:19:A9:1A:26:01:4A:02:51:B1:98
X509v3 Authority Key Identifier:
keyid:E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/6D3C9D30195F11F08408FA45C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:7aa0:2701::-2400:7aa0:270f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
c4:41:ff:f1:39:63:9f:18:ff:4e:e6:fa:ed:0e:e5:e9:9e:55:
f8:2f:a7:58:63:3e:1f:09:68:aa:b4:7e:e0:74:c6:e0:8c:34:
4e:11:c9:ad:a5:39:fa:35:10:a3:6b:6e:16:2f:35:50:54:9b:
c0:5f:fb:bd:ba:0b:4c:e4:ce:28:f1:a2:3a:ec:92:d0:82:48:
6b:ba:3d:ad:ee:f8:22:0d:b3:82:2b:c7:f3:11:a3:7b:82:21:
b6:a4:11:56:fc:98:16:b6:8b:20:4e:b8:e2:17:ab:29:c6:49:
fb:97:64:69:5e:68:80:fe:cc:32:24:de:e0:a4:76:49:c8:a9:
83:18:69:03:65:e0:9a:fc:07:08:eb:ad:14:50:d8:b0:0b:e4:
02:97:8e:d3:5a:64:d3:36:09:4c:3f:71:78:63:a2:24:c3:a6:
cb:7e:71:c2:b6:33:0b:35:c0:c5:fc:a6:2f:f6:ef:c1:d8:4a:
49:bf:17:74:91:20:cc:fe:ba:71:87:06:c0:49:b6:6f:47:94:
10:f8:a2:cf:b4:31:e0:e0:35:7d:73:e6:94:16:48:18:b5:e4:
e7:7f:d5:b5:83:1a:2a:a9:e9:74:e5:51:97:12:8a:dd:35:b7:
38:94:2b:85:cd:6d:89:2c:69:08:91:10:39:56:89:cb:94:77:
ec:34:3c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:19 2026 by rpki-client