
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/1DF22790A4B611EF9CDA1A2CC4F9AE02.roa
File: 1DF22790A4B611EF9CDA1A2CC4F9AE02.roa (raw, json)
Hash identifier: uOIwGBtnkiFkTWiwV37tpuSWY4L6Fnh3Dr2QZu/SFEo=
Subject key identifier: 14:BC:6B:53:7B:9A:1A:4C:C0:29:DD:8D:C3:E6:12:6F:AE:08:26:C7
Certificate issuer: /CN=A91B165F/serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1
Certificate serial: F5
Authority key identifier: F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/1DF22790A4B611EF9CDA1A2CC4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:31:02 +0000
ROA not before: Mon 03 Nov 2025 06:21:52 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 140219
IP address blocks: 2001:df4:59c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl
rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:22:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B165F, serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1
Validity
Not Before: Nov 3 06:21:52 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a59116-1af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:87:b5:cc:e7:6c:03:bf:b6:55:91:7c:f5:
92:43:87:3f:be:e1:8a:f1:ff:c3:e5:57:6c:c7:38:
11:a6:f2:97:5c:d0:5b:9d:88:8c:15:7c:56:25:0a:
d0:43:ad:f9:22:70:9e:89:13:36:e2:c4:91:cd:0f:
2d:06:d4:32:14:6f:b1:60:fd:e7:86:ce:8a:9e:bb:
e3:5b:d2:7d:96:29:fe:63:f2:e5:1f:b8:e6:be:3c:
f1:10:f2:cc:5e:30:4d:ec:3e:06:ed:85:82:60:82:
09:a5:93:14:69:9e:8b:69:ad:fa:27:3d:85:74:66:
c4:75:74:cf:97:4c:21:76:41:5e:62:20:32:28:5a:
f8:ed:46:cc:d8:b2:6b:52:c2:19:62:61:c3:a6:cf:
81:18:fc:fb:fd:1a:d5:4a:cc:61:a5:d0:e4:6c:04:
a8:a2:d0:64:fb:c3:94:0e:4f:f9:fa:32:14:69:75:
fd:5d:6f:81:de:f8:7a:d3:f4:de:78:e0:a1:48:2a:
d3:6e:e7:72:d8:52:38:05:15:02:45:7d:a6:e7:b6:
3f:10:80:8b:5b:16:93:5c:a3:c6:0b:db:e0:88:59:
3e:30:ba:89:85:51:73:43:25:05:61:6f:92:aa:ae:
ef:62:24:8e:08:5d:e8:a4:c9:f3:7b:9c:3f:df:b2:
2c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BC:6B:53:7B:9A:1A:4C:C0:29:DD:8D:C3:E6:12:6F:AE:08:26:C7
X509v3 Authority Key Identifier:
keyid:F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/1DF22790A4B611EF9CDA1A2CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:59c0::/48
Signature Algorithm: sha256WithRSAEncryption
72:43:a9:75:d6:c3:e8:9a:67:ef:ab:a9:2c:f6:80:c6:ef:64:
74:7c:3c:ac:03:d3:7e:4b:11:d0:96:e5:21:9f:09:e5:16:b9:
52:a2:1b:af:d7:56:46:1b:6c:3f:ec:51:b4:9a:a9:17:00:d8:
e9:f6:b1:af:d4:ac:be:54:83:45:68:01:2f:45:af:b4:e3:dd:
48:76:91:5c:4f:45:96:f9:48:12:b6:d9:ef:36:04:f3:f1:4f:
a1:cf:f7:0d:b7:52:87:59:87:80:56:33:4b:f8:e3:b1:f5:ad:
3b:76:36:f5:6b:9d:27:f6:9e:07:9d:7c:f2:88:da:2a:59:9b:
75:57:70:66:59:ac:29:9a:70:27:89:ef:b6:9d:6d:37:f7:9b:
fc:5f:83:5c:79:0e:73:09:74:1a:d6:15:f5:a9:8b:27:f6:b6:
6a:38:2b:63:f1:a7:32:a8:6e:a2:7c:9e:40:0a:3d:7a:f3:e8:
2c:5e:fc:97:54:d1:95:86:40:3a:02:0f:32:9f:d5:7b:b3:23:
7d:5f:c8:07:d2:a3:68:cc:d6:6e:4f:57:0e:ab:3c:4d:a9:39:
cc:a7:c1:74:a4:9b:8e:c8:5d:bd:fa:21:f4:fd:09:9f:62:93:
71:aa:c6:aa:50:7e:46:ef:2c:bc:3d:f6:ad:f4:f6:0b:4a:f3:
17:87:9f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:26 2026 by rpki-client