
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/C6425B12981D11F093FE8643C4F9AE02.roa
File: C6425B12981D11F093FE8643C4F9AE02.roa (raw, json)
Hash identifier: Kz8V1eSiDGWDbZsdehP0laCHo164yD6FxDqdCwG8HOs=
Subject key identifier: E4:51:FC:05:C7:41:37:7F:0C:AA:7C:1B:0B:43:76:27:B0:4B:F7:3D
Certificate issuer: /CN=A91BDC6D/serialNumber=53BE8128B9CFE87749847E6445FAAE1A8722C9D2
Certificate serial: 77
Authority key identifier: 53:BE:81:28:B9:CF:E8:77:49:84:7E:64:45:FA:AE:1A:87:22:C9:D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U76BKLnP6HdJhH5kRfquGociydI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/C6425B12981D11F093FE8643C4F9AE02.roa
Signing time: Fri 01 May 2026 08:41:05 +0000
ROA not before: Fri 01 May 2026 08:41:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38083
IP address blocks: 2403:3b00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/U76BKLnP6HdJhH5kRfquGociydI.crl
rsync://rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/U76BKLnP6HdJhH5kRfquGociydI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U76BKLnP6HdJhH5kRfquGociydI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:52:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDC6D, serialNumber=53BE8128B9CFE87749847E6445FAAE1A8722C9D2
Validity
Not Before: May 1 08:41:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f46721-d25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fd:7c:e2:c0:c4:3f:57:ab:34:9a:84:62:a2:
45:90:dd:64:43:af:08:aa:4f:69:43:5c:91:88:72:
39:fb:13:14:40:54:cd:10:ce:23:b0:52:67:93:8c:
a8:2b:f1:3b:03:e3:2f:96:08:d8:7a:7f:82:93:a9:
06:15:b9:03:08:e7:ca:44:2d:43:ce:48:29:c3:5e:
77:a8:b8:f2:90:0a:c4:23:21:9d:f5:31:75:d5:77:
fc:54:72:9e:8a:cf:54:89:fd:15:5c:a4:61:59:65:
9c:be:4e:86:57:14:af:ed:20:03:36:96:b2:b7:f5:
86:10:b9:92:60:d5:17:b2:b4:84:42:8e:55:f0:10:
d1:2c:f7:c6:92:dd:0d:45:29:8c:bb:55:62:72:43:
5f:0a:54:8f:25:dc:3e:cf:c7:f7:58:e4:18:d1:8c:
cd:a0:1a:ff:f5:0e:ed:00:16:8e:cb:8d:4b:90:fd:
89:78:a3:41:dd:6d:97:5b:b2:b4:9b:86:5c:b6:81:
a9:a4:99:88:52:12:0d:a1:fc:56:4e:45:1f:d3:c9:
bc:1b:1e:fc:29:8d:c6:01:20:98:37:4c:0a:92:16:
f2:b3:06:63:25:cb:2f:8d:b7:f6:75:20:79:ee:d0:
55:2c:eb:fb:54:7a:a1:9d:1b:fc:c5:e3:5f:94:dd:
69:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:51:FC:05:C7:41:37:7F:0C:AA:7C:1B:0B:43:76:27:B0:4B:F7:3D
X509v3 Authority Key Identifier:
keyid:53:BE:81:28:B9:CF:E8:77:49:84:7E:64:45:FA:AE:1A:87:22:C9:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/U76BKLnP6HdJhH5kRfquGociydI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U76BKLnP6HdJhH5kRfquGociydI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/C6425B12981D11F093FE8643C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2403:3b00::/32
Signature Algorithm: sha256WithRSAEncryption
2b:1a:49:71:fd:82:b0:af:37:cd:bf:5d:44:6f:3e:65:f3:84:
5c:ed:a7:0a:ea:d7:a1:1b:67:23:25:a4:97:c6:a6:84:a4:7a:
70:e6:9c:30:69:51:91:5d:88:9e:19:a7:73:81:5a:45:43:d3:
0a:d8:6c:d4:32:0d:32:2a:6d:dc:42:58:70:52:d1:e1:e1:98:
27:72:8d:49:ab:b6:cb:32:05:dc:54:72:55:a1:a1:60:c6:ae:
57:6b:da:9d:20:da:06:da:1b:36:6d:dd:44:98:04:95:88:a2:
73:cc:cc:ec:0d:6a:74:01:4a:67:81:79:61:ee:87:a8:9b:f9:
2c:0a:a6:35:53:82:05:cc:70:a2:70:fb:71:54:ec:9c:90:a2:
5c:04:2f:fd:30:48:0b:f7:a4:2b:96:82:e7:1d:ee:6d:f3:19:
12:05:95:d6:35:b7:eb:76:7f:60:60:c3:32:b8:47:09:d6:58:
67:15:7e:c9:cb:61:14:e1:9e:39:e0:a5:cd:4d:3b:f2:63:c5:
6a:4c:a4:57:0f:2e:88:c3:4d:81:ee:52:8a:1b:75:a1:ef:67:
31:5b:1c:f8:1a:ea:56:1a:10:1c:40:73:9d:65:01:f9:c6:3b:
34:ce:5d:29:f8:f7:56:7c:ba:80:b2:51:d7:3a:83:f9:d6:1b:
61:3c:ba:d5
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
REM2RDExMC8GA1UEBRMoNTNCRTgxMjhCOUNGRTg3NzQ5ODQ3RTY0NDVGQUFFMUE4
NzIyQzlEMjAeFw0yNjA1MDEwODQxMDVaFw0yNzA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5ZjQ2NzIxLWQyNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDa/XziwMQ/V6s0moRiokWQ3WRDrwiqT2lDXJGIcjn7ExRAVM0QziOwUmeTjKgr
8TsD4y+WCNh6f4KTqQYVuQMI58pELUPOSCnDXneouPKQCsQjIZ31MXXVd/xUcp6K
z1SJ/RVcpGFZZZy+ToZXFK/tIAM2lrK39YYQuZJg1ReytIRCjlXwENEs98aS3Q1F
KYy7VWJyQ18KVI8l3D7Px/dY5BjRjM2gGv/1Du0AFo7LjUuQ/Yl4o0HdbZdbsrSb
hly2gamkmYhSEg2h/FZORR/TybwbHvwpjcYBIJg3TAqSFvKzBmMlyy+Nt/Z1IHnu
0FUs6/tUeqGdG/zF41+U3Wl3AgMBAAGjggJhMIICXTAdBgNVHQ4EFgQU5FH8BcdB
N38MqnwbC0N2J7BL9z0wHwYDVR0jBBgwFoAUU76BKLnP6HdJhH5kRfquGociydIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJEQzZELzk3QkFFNTYwOTc2
NTExRjBCOEEyQ0MwQ0M0RjlBRTAyL1U3NkJLTG5QNkhkSmhINWtSZnF1R29jaXlk
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVTc2QktMblA2SGRKaEg1a1JmcXVHb2NpeWRJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
REM2RC85N0JBRTU2MDk3NjUxMUYwQjhBMkNDMENDNEY5QUUwMi9DNjQyNUIxMjk4
MUQxMUYwOTNGRTg2NDNDNEY5QUUwMi5yb2EwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkAzsAMA0GCSqGSIb3DQEBCwUAA4IBAQArGklx/YKwrzfNv11Ebz5l
84Rc7acK6tehG2cjJaSXxqaEpHpw5pwwaVGRXYieGadzgVpFQ9MK2GzUMg0yKm3c
QlhwUtHh4Zgnco1Jq7bLMgXcVHJVoaFgxq5Xa9qdINoG2hs2bd1EmASViKJzzMzs
DWp0AUpngXlh7oeom/ksCqY1U4IFzHCicPtxVOyckKJcBC/9MEgL96QrloLnHe5t
8xkSBZXWNbfrdn9gYMMyuEcJ1lhnFX7Jy2EU4Z454KXNTTvyY8VqTKRXDy6Iw02B
7lKKG3Wh72cxWxz4GupWGhAcQHOdZQH5xjs0zl0p+PdWfLqAslHXOoP51hthPLrV
-----END CERTIFICATE-----
Generated at Wed May 13 06:33:10 2026 by rpki-client