
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/B66603C6025C11F0BDF41912C4F9AE02.roa
File: B66603C6025C11F0BDF41912C4F9AE02.roa (raw, json)
Hash identifier: s0YLQUUux0JfPCWhHOCECaROC0aoZyjenv1Zq/q9xu4=
Subject key identifier: 13:DF:36:EF:0F:08:30:6D:66:CB:AA:CD:8C:2F:43:5C:D0:C6:5B:96
Certificate issuer: /CN=A91B38F5/serialNumber=4FF54DEABAD494559251012AA5AC222950CB261E
Certificate serial: BA
Authority key identifier: 4F:F5:4D:EA:BA:D4:94:55:92:51:01:2A:A5:AC:22:29:50:CB:26:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/B66603C6025C11F0BDF41912C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:17:42 +0000
ROA not before: Thu 15 Jan 2026 06:24:52 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 133464
IP address blocks: 2001:df4:cac0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.crl
rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:08:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B38F5, serialNumber=4FF54DEABAD494559251012AA5AC222950CB261E
Validity
Not Before: Jan 15 06:24:52 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a42056-9347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ee:6c:94:e0:1e:c2:e0:8a:b6:1e:aa:b6:43:
77:42:2f:45:7d:99:4c:ee:69:04:bb:66:03:77:90:
db:a6:62:e3:eb:e1:81:44:b0:2c:15:bd:4e:6c:c8:
dd:56:bf:1b:8d:8b:47:3f:cf:bd:ad:16:33:12:bc:
07:ae:d2:22:96:b0:97:5e:b4:73:ce:73:c1:22:ba:
5a:6a:4b:66:d3:56:48:90:04:21:59:e4:54:05:aa:
01:36:7c:d1:6b:8d:2d:ce:51:d7:7b:e5:be:0c:3b:
4a:3f:8b:1c:a3:b4:74:fd:af:a3:37:a6:10:8c:5d:
82:5c:d1:aa:8c:ca:6e:c6:7f:8b:04:04:94:ee:36:
6b:8c:f6:d6:fa:a5:d6:59:52:93:70:01:0a:9a:1a:
f8:55:5d:42:bc:30:d7:a3:4f:df:87:c2:1c:df:a1:
ed:a9:ab:7b:f7:bc:ff:f6:6a:82:ad:2d:87:73:aa:
d2:9d:a3:db:a3:ac:a9:3d:3c:ba:8f:33:d1:6b:ba:
84:9f:ef:b5:93:93:4d:db:76:7c:6b:98:64:f2:0e:
fb:c5:05:99:c2:8f:70:a5:32:1a:52:42:ee:c2:98:
e8:75:b1:60:7b:c1:c0:80:ec:83:8c:44:aa:f6:e5:
54:8b:95:ba:27:70:29:22:2d:49:a0:a8:60:06:86:
3a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DF:36:EF:0F:08:30:6D:66:CB:AA:CD:8C:2F:43:5C:D0:C6:5B:96
X509v3 Authority Key Identifier:
keyid:4F:F5:4D:EA:BA:D4:94:55:92:51:01:2A:A5:AC:22:29:50:CB:26:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/B66603C6025C11F0BDF41912C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:cac0::/48
Signature Algorithm: sha256WithRSAEncryption
2c:2c:2a:0b:79:2f:e5:f6:db:57:09:53:3b:cc:72:82:34:96:
0e:d9:3c:75:e1:25:a7:02:9f:76:de:64:e7:e1:fa:0a:84:6f:
32:11:b6:d2:ee:41:eb:54:f6:9e:d6:39:87:aa:4c:75:3e:e7:
f3:55:a0:d7:4b:f7:14:ef:e0:03:2a:12:bc:38:34:01:5b:e0:
25:92:7a:3b:60:ef:31:4a:68:f4:c8:77:4f:4e:d6:f7:66:01:
52:e0:14:7f:19:a7:4f:67:04:6c:79:bc:a7:5d:ac:6c:b0:1b:
00:e0:43:a7:a7:80:53:da:c6:d9:25:2d:16:05:8b:f4:da:fd:
b9:05:31:84:b3:b5:8c:1e:e5:9d:89:23:ee:f8:68:23:3f:81:
0a:a7:ec:54:ed:99:f2:77:25:99:b4:e4:c6:33:22:81:e1:21:
1e:63:1c:49:c5:72:0b:df:e7:ad:2d:df:46:58:2e:44:6f:c4:
12:06:e0:89:3d:b7:5b:13:96:dd:f8:23:19:14:20:80:55:f4:
46:44:58:7f:4f:d5:c7:be:53:71:a7:39:55:b2:9c:35:47:ae:
75:22:56:42:f8:3a:d5:90:dd:31:3d:17:88:c6:81:35:f3:3e:
81:65:7b:25:ef:77:c0:ff:2b:31:48:6a:5e:c6:64:98:da:bd:
3e:ec:dd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:16:49 2026 by rpki-client