
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/B1F23610923B11F084052A57C4F9AE02.roa
File: B1F23610923B11F084052A57C4F9AE02.roa (raw, json)
Hash identifier: YSb0tSwa/5ouwveWRMPrFfSh8tKVPTJV0n6+IuBaWyE=
Subject key identifier: CD:CC:00:BC:26:36:FE:F4:4A:62:AA:68:8E:54:C5:81:FC:61:F3:A8
Certificate issuer: /CN=A91ADD64/serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE
Certificate serial: 0174
Authority key identifier: 40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/B1F23610923B11F084052A57C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:09:07 +0000
ROA not before: Mon 15 Sep 2025 13:55:54 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 14618
IP address blocks: 2407:7a80:104::/48 maxlen: 48
2407:7a80:105::/48 maxlen: 48
2407:7a80:106::/48 maxlen: 48
2407:7a80:107::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl
rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:11:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 372 (0x174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADD64, serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE
Validity
Not Before: Sep 15 13:55:54 2025 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=69a59a03-6898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d8:6b:3e:91:a7:40:68:85:e8:78:4c:a9:d5:
1b:d2:da:24:99:14:83:71:7d:c0:c5:63:90:5b:ae:
77:6d:c2:57:ca:0b:28:f7:3d:1b:f6:88:28:66:dc:
b2:e8:59:d4:6a:a3:0d:91:6e:0f:14:8c:10:66:32:
b8:a6:c4:82:cb:99:2c:1b:8b:93:aa:ec:a1:a2:70:
03:87:be:04:27:25:59:73:65:59:c3:f5:15:33:f6:
be:e9:5a:a7:56:fc:40:22:60:58:51:11:6a:19:f9:
17:35:43:46:8d:d7:4f:ad:3b:d2:3a:69:a8:12:74:
a8:9c:e2:22:f5:d1:1a:ef:a0:8d:38:62:58:0d:9c:
70:38:b9:e9:cb:7f:11:a0:c7:0f:c7:3e:30:ad:d5:
0a:2b:dc:94:b9:35:bf:79:ff:99:b7:d8:d0:98:c2:
92:ac:a9:eb:f6:6c:be:34:e1:a2:b5:7c:b7:5c:f7:
1a:73:7e:91:55:09:9a:57:f9:9c:85:99:f2:2f:ff:
50:f9:1e:fe:d0:41:d4:20:fd:29:0f:9c:1e:a7:6d:
bf:c1:ac:29:77:92:4c:92:65:1f:d2:1d:2a:dc:b6:
00:12:9d:52:7c:7b:8c:63:38:16:0d:95:11:12:a6:
3c:48:a7:a9:90:a4:af:aa:ed:91:ec:c5:95:47:31:
4a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CC:00:BC:26:36:FE:F4:4A:62:AA:68:8E:54:C5:81:FC:61:F3:A8
X509v3 Authority Key Identifier:
keyid:40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/B1F23610923B11F084052A57C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2407:7a80:104::/46
Signature Algorithm: sha256WithRSAEncryption
6b:bd:8a:f0:a0:70:2f:bb:e3:a0:e7:59:04:ff:51:27:d8:bb:
8e:b5:7c:81:bc:c0:1c:c9:0e:08:f6:3a:9c:e5:60:26:9c:b2:
3e:bd:79:73:df:fb:8f:85:23:95:c7:fb:39:33:70:41:0f:41:
4f:22:0e:a5:6f:a6:b3:af:19:4f:9d:b3:f5:2c:3e:69:44:d2:
c8:50:61:25:88:b3:53:a8:64:71:5e:f9:16:1a:69:94:b8:0c:
fe:77:9b:ee:5f:a2:91:43:09:c1:2c:24:ae:7c:63:62:bd:65:
64:b3:fc:e9:8b:9d:d2:8b:d7:94:d5:82:e6:d7:0a:f1:d3:87:
bf:b7:60:b3:4a:cd:c6:ed:1d:87:fc:b2:e0:11:82:c5:c8:1e:
bf:56:d1:94:49:c4:d9:2f:d3:86:7d:0f:bf:92:51:b9:49:99:
8a:f8:7e:db:bd:ca:ac:94:b6:fe:10:9f:f8:70:67:4c:8a:5e:
8c:7b:de:6e:73:f9:38:6a:4b:39:a3:a4:06:32:e4:09:88:5c:
36:75:35:cb:4b:9c:0c:8c:17:b7:18:d7:97:b3:b6:50:76:be:
0d:89:49:77:db:c4:d2:f9:dc:5b:49:f1:78:a5:11:62:bc:7b:
f8:82:ac:fc:ea:81:4c:b0:57:9f:f1:53:91:46:ff:bf:1f:15:
10:28:91:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:51:33 2026 by rpki-client