
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/11815E36135311EE94A8A114C4F9AE02.roa
File: 11815E36135311EE94A8A114C4F9AE02.roa (raw, json)
Hash identifier: gxwmxGG8uXjmf7OQYav7fi+LEJxCykIRMPfMDhbn+Lk=
Subject key identifier: E4:43:0C:A1:4D:52:98:03:AD:AC:82:B3:BB:C8:8A:A6:2F:A7:E1:2E
Certificate issuer: /CN=A91AA28B/serialNumber=6FC2EDF0C51152A3BEC1149A1BDB2EDB293C9D95
Certificate serial: 0DF2
Authority key identifier: 6F:C2:ED:F0:C5:11:52:A3:BE:C1:14:9A:1B:DB:2E:DB:29:3C:9D:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/11815E36135311EE94A8A114C4F9AE02.roa
Signing time: Mon 02 Mar 2026 18:21:54 +0000
ROA not before: Mon 02 Mar 2026 18:21:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64075
IP address blocks: 2404:2980::/32 maxlen: 32
2404:2980::/48 maxlen: 48
2404:2980:1::/48 maxlen: 48
2404:2980:2::/48 maxlen: 48
2404:2980:3::/48 maxlen: 48
2404:2980:4::/48 maxlen: 48
2404:2980:5::/48 maxlen: 48
2404:2980:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.crl
rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3570 (0xdf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA28B, serialNumber=6FC2EDF0C51152A3BEC1149A1BDB2EDB293C9D95
Validity
Not Before: Mar 2 18:21:54 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a5d542-6063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ad:c7:00:ac:35:43:a6:16:25:71:85:42:6b:
5f:a9:02:37:44:e4:81:4b:9c:88:f1:11:5f:da:3c:
0f:25:fd:02:bd:24:c5:d0:3e:4a:1e:61:0c:cb:28:
80:b7:67:42:31:6b:38:32:15:f6:0f:13:ab:2c:68:
fc:f3:7f:cf:b4:16:e7:e4:96:cd:0d:31:c5:1a:33:
92:e6:19:2a:5b:6f:67:99:7f:5b:5e:a1:d1:2b:90:
34:72:58:39:47:27:8c:ca:f6:94:5a:79:da:26:ae:
dd:40:dd:59:76:61:73:f8:e6:07:7c:26:65:c5:f6:
3c:d4:70:29:3d:a8:3f:0c:ef:65:7d:00:56:69:5d:
92:01:a8:ee:05:b3:25:be:f5:23:5a:c1:c0:99:cf:
94:05:b6:b2:25:ec:e5:03:39:50:66:e9:d9:4a:87:
39:33:8d:91:30:28:e2:6a:a7:63:39:40:5a:63:72:
c0:78:62:0f:21:3c:f0:e6:ac:52:3e:94:08:d2:28:
44:40:44:6d:f5:69:75:4b:90:ef:d3:82:f5:b4:d2:
10:fc:80:26:c0:15:7b:5b:dc:17:cc:75:f0:b5:4a:
70:13:12:fd:45:59:c5:89:61:3e:f1:96:3f:24:87:
92:52:a2:67:b4:5c:04:50:2e:29:43:13:8f:d5:6a:
02:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:43:0C:A1:4D:52:98:03:AD:AC:82:B3:BB:C8:8A:A6:2F:A7:E1:2E
X509v3 Authority Key Identifier:
keyid:6F:C2:ED:F0:C5:11:52:A3:BE:C1:14:9A:1B:DB:2E:DB:29:3C:9D:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/11815E36135311EE94A8A114C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2404:2980::/32
Signature Algorithm: sha256WithRSAEncryption
71:8c:76:0b:ad:2a:5c:68:5c:2a:a2:f8:e8:cf:2d:59:62:45:
57:81:48:ec:c7:58:ce:03:ac:8d:c8:68:da:63:4e:db:5e:88:
3d:50:5d:2f:f3:b5:0a:14:0e:9b:a9:cb:70:36:a1:fc:21:af:
e5:6c:fd:89:9e:57:55:eb:47:9c:f2:5b:a1:04:9f:07:ea:7e:
0d:1a:0f:0d:1b:26:96:d3:12:3f:79:1c:9f:bb:48:96:59:b0:
e7:45:60:cd:cd:e1:04:22:2f:2a:92:9d:69:cc:2f:0f:ed:df:
71:91:85:93:f2:09:94:31:18:9b:b4:bc:d8:2c:ef:b3:b0:84:
f3:ed:9f:b5:31:b1:a2:c1:13:1e:a9:ec:7d:67:0a:8d:e9:53:
17:24:5d:bf:a2:4a:cb:11:91:f7:86:96:a1:72:69:dc:86:e2:
1a:bd:6e:36:9b:45:a1:6f:e6:2b:8c:26:58:80:eb:cf:01:8d:
fa:de:96:da:b4:13:fe:9f:d5:66:7a:e5:79:2d:26:52:16:0f:
9a:f8:72:b2:a6:e7:9a:78:f2:b6:86:40:bd:f3:7e:42:34:7c:
2b:50:a4:de:04:d7:29:2e:54:c6:99:8b:bb:35:06:c3:f0:f1:
85:3f:5e:5d:51:0e:38:e5:3b:08:6b:a6:72:da:8d:c5:ff:31:
47:99:39:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:50:06 2026 by rpki-client