
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/B6CFF1B2D5F911EFB9B1055CC4F9AE02.roa
File: B6CFF1B2D5F911EFB9B1055CC4F9AE02.roa (raw, json)
Hash identifier: Ysmnx+Alr4YrwHh6sZ9OnpdIziCxFikyW2oh0JOmi6E=
Subject key identifier: 9B:5D:0D:F5:A7:01:33:1A:C5:45:8B:60:04:33:76:C3:7D:11:65:3B
Certificate issuer: /CN=A91C022C/serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A
Certificate serial: DC
Authority key identifier: D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/B6CFF1B2D5F911EFB9B1055CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:03:08 +0000
ROA not before: Sun 19 Jan 2025 00:09:57 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 153377
IP address blocks: 2001:df4:ec40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl
rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C022C, serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A
Validity
Not Before: Jan 19 00:09:57 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a3f2bc-dea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0a:3a:2c:80:a7:09:6f:55:14:bb:2c:af:66:
21:de:6a:0a:30:17:85:b1:b5:d1:d1:3f:a3:f1:cb:
bd:f4:61:f5:51:68:7f:f7:1f:cc:d3:ef:7d:9c:fd:
eb:7c:c6:30:41:06:0c:09:e3:c5:00:0c:ee:25:45:
94:5f:6f:3a:d3:48:e3:eb:78:2e:63:c8:79:57:86:
29:21:e1:fb:3a:e6:72:a4:a4:b1:97:33:8b:81:4a:
ea:16:9c:1f:b7:00:85:1c:f7:02:09:66:59:04:6e:
d7:49:56:be:12:fa:af:5d:a5:44:9e:0c:6f:d4:ff:
b4:2d:88:d9:99:bf:40:b2:d2:68:3f:db:da:3f:61:
2e:95:9f:a2:61:b9:91:0d:af:34:4f:e9:d1:56:86:
da:23:d1:71:68:38:5b:e5:46:c3:c3:ab:e4:36:c0:
68:19:7c:32:e8:10:fc:e2:36:3f:62:ee:2c:e9:27:
0b:1f:9c:94:6f:be:e7:11:f4:ae:e8:05:38:8b:16:
2f:c0:8c:a6:a0:fa:27:56:43:7c:dd:a0:88:ff:11:
82:e9:09:49:53:4d:e4:64:73:c4:b1:b8:e2:7a:f6:
2b:39:86:bb:5f:12:94:a1:06:43:9e:c0:d9:0f:cb:
85:90:d5:42:0b:5a:39:0d:5b:36:f7:02:3a:d8:36:
46:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5D:0D:F5:A7:01:33:1A:C5:45:8B:60:04:33:76:C3:7D:11:65:3B
X509v3 Authority Key Identifier:
keyid:D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/B6CFF1B2D5F911EFB9B1055CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:ec40::/48
Signature Algorithm: sha256WithRSAEncryption
35:80:61:ff:1b:6e:b9:67:df:1e:26:03:1e:85:e4:f8:39:34:
1a:b2:82:2c:df:70:0f:b3:fa:ea:9f:0c:4c:2a:95:b1:85:c4:
dd:cf:d4:76:2e:1b:b0:1d:74:c7:73:4d:10:db:90:f9:87:8c:
8c:2d:1e:16:d5:b9:fc:94:74:db:26:b4:b2:a1:05:46:cf:a0:
65:b5:d6:e3:49:51:86:56:91:7f:1a:5a:c5:27:be:fe:7d:ab:
07:ce:b9:34:36:d4:43:92:0e:e5:b8:98:2e:95:2f:52:d8:61:
eb:bd:df:5c:99:c4:fd:05:05:3c:65:ee:c4:7c:09:82:d1:6b:
50:32:97:a5:8d:6a:51:86:85:a9:10:a4:65:84:b7:cd:71:86:
7b:ad:99:43:c8:b8:d2:34:0c:b6:16:fb:21:01:63:fd:04:d4:
44:cd:a0:b4:e7:fd:0d:e2:d5:20:2e:82:61:58:fc:33:b1:1d:
a6:a4:8f:e1:84:bf:db:dd:a9:fe:e0:62:83:ef:40:84:75:79:
43:fc:d7:59:e0:ac:9d:5e:fb:4a:03:06:d4:57:b6:70:ca:3d:
b1:4c:b2:2a:9e:a6:eb:f0:cc:3f:c8:40:88:70:e0:e0:33:3a:
1d:3f:6a:c1:95:63:1d:f7:08:8d:13:a6:b3:02:09:4a:5a:71:
d1:6c:e0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:13:10 2026 by rpki-client