
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/D2FA5DBE6C1E11EEBB9EAB7AC4F9AE02.roa
File: D2FA5DBE6C1E11EEBB9EAB7AC4F9AE02.roa (raw, json)
Hash identifier: J6Y3ZNT+bC1GeTc3d3jK1qQ4TJKGsID3LkvkrzzuZw0=
Subject key identifier: 7F:5D:8D:55:B9:9F:6E:D0:BB:8F:FF:3C:7A:08:0F:5A:D1:2A:C9:DA
Certificate issuer: /CN=A91BBCAF/serialNumber=27B2E662914822136B0962DBB5BA447C253F521B
Certificate serial: 01C8
Authority key identifier: 27:B2:E6:62:91:48:22:13:6B:09:62:DB:B5:BA:44:7C:25:3F:52:1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/D2FA5DBE6C1E11EEBB9EAB7AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:23:03 +0000
ROA not before: Wed 15 Oct 2025 07:01:17 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 151960
IP address blocks: 36.50.51.0/24 maxlen: 24
2001:df3:6c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl
rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456 (0x1c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBCAF, serialNumber=27B2E662914822136B0962DBB5BA447C253F521B
Validity
Not Before: Oct 15 07:01:17 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a41387-3918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6e:db:17:28:6d:14:d3:40:cd:6c:a2:cc:2b:
70:58:4e:8e:97:3d:85:50:e8:f5:b5:ee:69:30:a3:
2e:77:d5:9e:c0:d9:65:65:05:a3:0e:fd:0f:5e:09:
90:e0:51:2a:99:4e:68:9b:4b:43:b3:56:ab:e2:85:
24:b7:54:c3:73:87:64:80:b5:fa:ed:75:5a:e5:8c:
b0:40:30:82:12:a1:6e:57:74:11:9f:f2:ed:13:89:
d8:b9:bf:e6:f1:22:26:5c:84:5d:4d:bf:80:31:31:
b3:e2:1d:93:5b:24:63:a3:05:8e:dd:7c:72:24:d9:
1b:e6:27:c5:e8:9d:4b:34:2a:0c:c7:a5:79:a5:b5:
13:06:ba:3a:0f:61:f5:0b:df:34:a7:aa:72:35:37:
41:f7:be:ed:60:a8:d0:f0:32:58:7f:44:b8:84:38:
f7:f2:7b:1a:13:e5:f3:ae:bd:c0:10:1d:3f:b5:c6:
ff:1a:78:6c:d0:d2:df:87:7a:f2:54:db:74:14:e9:
72:17:17:f9:f3:65:75:4c:bd:6e:4b:7e:63:fc:16:
fc:a4:aa:ab:2a:93:c7:e4:a4:8a:b0:d3:a8:f9:9b:
05:cd:f6:6d:3d:85:c3:12:54:14:6d:67:41:2e:a6:
49:78:5e:11:8a:eb:2c:ad:73:0c:27:04:77:18:70:
eb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5D:8D:55:B9:9F:6E:D0:BB:8F:FF:3C:7A:08:0F:5A:D1:2A:C9:DA
X509v3 Authority Key Identifier:
keyid:27:B2:E6:62:91:48:22:13:6B:09:62:DB:B5:BA:44:7C:25:3F:52:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/D2FA5DBE6C1E11EEBB9EAB7AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
36.50.51.0/24
IPv6:
2001:df3:6c0::/48
Signature Algorithm: sha256WithRSAEncryption
7b:5f:58:bc:76:16:98:bf:85:8f:8b:76:3f:59:c6:98:28:9d:
96:ff:06:0d:7e:41:06:04:5a:10:44:79:bf:1a:b3:7f:da:a3:
1d:3c:ed:7a:c6:80:59:b8:9f:f7:9b:0c:8a:4b:73:1f:20:86:
12:9c:ae:fd:ff:3b:06:3a:7e:14:bd:f6:32:53:be:4f:b3:6c:
a3:00:c1:86:66:2f:92:67:ba:99:08:69:9b:3c:ee:8b:a1:87:
44:a8:cd:1d:7b:f2:44:32:09:9a:42:b4:40:f5:c9:0f:78:c0:
33:53:53:46:02:fb:c7:42:24:f8:1a:37:8a:e2:0b:93:11:5a:
92:df:e8:3d:65:93:33:e2:11:09:51:06:45:01:e8:e7:60:41:
4b:7d:bc:8b:f6:62:1d:8a:18:15:37:a4:d7:d1:be:77:a6:12:
e7:38:4a:8b:fe:71:1f:38:f2:43:3c:df:dd:24:5e:ce:ff:99:
88:0c:fe:4c:79:35:19:4d:8a:cb:9e:47:ba:e3:8b:db:bb:d4:
e8:0f:72:0d:32:74:e4:f6:e6:74:83:57:09:e7:ca:27:3f:ac:
8d:a1:51:cc:78:b4:31:75:84:b6:7a:4f:a9:10:73:ba:9d:aa:
1b:21:0d:e8:26:c2:c4:fb:49:c3:24:ba:ab:41:b7:53:10:30:
33:0c:47:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:32 2026 by rpki-client