
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/5FF7DA8AC9DD11EF9A19CE57C4F9AE02.roa
File: 5FF7DA8AC9DD11EF9A19CE57C4F9AE02.roa (raw, json)
Hash identifier: c4VFZAceUdJlng/FeQRaHeNTf/QP511PnqvINvkog+A=
Subject key identifier: BB:F6:AB:43:EE:40:E7:79:35:DA:B4:95:81:E0:B1:BB:4B:5D:59:3C
Certificate issuer: /CN=A91B23D9/serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1
Certificate serial: FF
Authority key identifier: 76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/5FF7DA8AC9DD11EF9A19CE57C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:27:05 +0000
ROA not before: Sat 17 Jan 2026 05:24:27 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 134606
IP address blocks: 2001:df4:bf40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl
rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:38:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B23D9, serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1
Validity
Not Before: Jan 17 05:24:27 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a59029-8e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7c:c2:55:41:5f:07:ef:39:9f:35:6f:00:eb:
19:ca:6e:1b:3c:31:13:66:c0:dd:65:b7:9b:96:9d:
40:f9:8f:89:bf:4f:a2:a6:05:67:e3:b7:6f:c0:90:
e0:2d:3f:82:35:f5:5e:f8:da:57:43:8a:86:ea:56:
d3:d6:85:c8:c9:34:19:d2:b0:27:4c:0f:33:87:98:
87:a5:22:dd:07:fe:cf:69:14:5d:b0:7b:22:5c:3f:
84:6b:25:c8:f8:b0:5e:48:8d:43:3f:86:ea:91:26:
e0:4a:d8:e3:85:32:b2:8c:2d:f6:33:e5:bb:2c:4e:
77:70:16:28:e5:d5:42:05:27:09:d3:4d:c0:71:d3:
cf:18:bb:9f:f0:6a:90:7d:a4:3f:c9:0e:d3:d3:e8:
f6:2a:da:e1:15:22:37:5e:9d:83:c9:36:77:07:45:
40:4c:6b:03:4d:76:a8:bf:50:28:77:fc:dc:4b:5d:
59:85:2d:24:92:b2:0a:34:0e:b2:e5:9b:6e:99:73:
90:62:5e:68:43:1a:5a:ae:b9:7a:49:ad:84:02:d0:
a7:04:ca:f0:10:35:54:fe:9e:40:52:fa:e9:28:6e:
bb:f6:15:64:b3:a1:39:bf:54:e0:67:b5:a9:f2:c3:
ae:a2:8a:9a:c3:0b:a0:f0:d2:2d:5f:80:40:c9:1d:
cb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F6:AB:43:EE:40:E7:79:35:DA:B4:95:81:E0:B1:BB:4B:5D:59:3C
X509v3 Authority Key Identifier:
keyid:76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/5FF7DA8AC9DD11EF9A19CE57C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:bf40::/48
Signature Algorithm: sha256WithRSAEncryption
af:7c:75:6e:7f:f3:42:1b:5d:9f:20:49:f1:91:f6:77:41:a9:
49:75:0f:dc:19:ff:42:b2:2d:47:8a:cd:94:9a:07:d1:49:d7:
bc:5d:9a:98:14:eb:9b:3a:64:21:bf:e3:7b:7f:1b:da:a0:74:
9f:d6:2e:cc:88:a3:cb:33:26:6c:40:7e:5c:ce:5f:2a:78:6f:
bd:6b:08:2e:4e:f6:83:94:b3:ac:97:83:2b:16:6f:09:4b:8b:
1a:37:cc:5f:d0:43:ea:5b:e5:57:5e:43:0d:22:a6:59:b7:bc:
88:9a:1c:15:6d:84:20:93:c5:ff:46:c0:d9:5e:81:4c:5f:6f:
7e:34:a2:64:03:7a:c7:3e:79:ac:75:7b:ee:cd:0a:a0:62:64:
f8:4d:46:7a:20:ac:dd:55:5a:7e:57:ee:0c:18:bc:46:8b:9f:
72:47:4c:97:22:e5:4f:b6:00:33:16:7d:ad:11:eb:a3:b3:96:
79:d1:64:22:c4:17:8e:75:99:a7:c0:6a:1a:4b:74:d8:39:76:
cb:3b:87:ac:cd:05:fb:32:6c:56:29:17:9b:58:49:0d:8d:d4:
bc:e6:1c:bd:58:0c:7c:31:06:cd:08:a1:c0:94:b7:a3:26:23:
80:6d:c0:d8:28:59:11:39:f9:e3:21:4c:da:6c:e3:c5:54:30:
07:15:f9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:26:43 2026 by rpki-client