
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/97FE22F2DA4B11F0BA2C614F91D3641D.roa
File: 97FE22F2DA4B11F0BA2C614F91D3641D.roa (raw, json)
Hash identifier: meSaXfy9Mn0t+YNYp1oUPT5CPQbfKIf4ebcPD5fFufY=
Subject key identifier: 27:12:CC:E0:8A:94:48:2E:4D:F8:E3:35:12:D3:E8:82:4A:6A:34:E3
Certificate issuer: /CN=A91C05AD/serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB
Certificate serial: 030D
Authority key identifier: F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/97FE22F2DA4B11F0BA2C614F91D3641D.roa
Signing time: Mon 02 Mar 2026 14:03:12 +0000
ROA not before: Tue 16 Dec 2025 06:51:06 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 138926
IP address blocks: 2402:3b60:2380::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl
rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 781 (0x30d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C05AD, serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB
Validity
Not Before: Dec 16 06:51:06 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a598a0-a34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:65:ad:c1:98:dd:47:bb:2f:82:b4:b8:e1:f1:
dd:9e:de:32:9c:1d:5f:03:b9:11:ce:cf:20:63:71:
8f:74:6b:98:78:b2:0a:28:7e:ae:03:b2:34:46:68:
37:5c:f3:6b:bb:97:95:d0:c8:07:6f:89:3a:b0:89:
0d:17:a3:6d:db:f3:94:0f:1a:8d:7e:ce:2c:13:a0:
a2:b4:56:b8:54:4a:b8:3d:0c:dd:50:2e:08:82:70:
86:26:ae:b0:c3:7e:92:ca:f7:bd:b5:a1:06:8d:db:
80:76:c8:1e:17:02:f6:f3:bb:96:49:92:ea:05:59:
7f:fc:66:2b:c0:27:cf:51:c1:be:c7:b2:1a:9c:b2:
71:fc:67:8a:d8:9a:4e:4b:16:c2:01:3d:d0:b5:29:
01:45:ed:9e:ef:d2:55:53:60:46:d9:43:bf:45:e1:
a4:28:f0:6b:a1:81:e5:37:7d:c9:ac:4c:93:04:1d:
d2:98:dc:8d:ff:80:e0:79:e6:b8:c4:ca:17:c1:51:
22:24:af:17:c8:3d:57:03:dd:d2:aa:04:5f:62:11:
55:5b:4e:86:a4:65:76:cc:57:46:bd:cc:6e:36:05:
9f:16:27:92:56:55:55:a1:8d:ed:90:87:67:c0:9b:
4e:3c:fb:ca:29:bb:56:86:96:ea:1a:14:2b:1e:9e:
f0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:12:CC:E0:8A:94:48:2E:4D:F8:E3:35:12:D3:E8:82:4A:6A:34:E3
X509v3 Authority Key Identifier:
keyid:F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/97FE22F2DA4B11F0BA2C614F91D3641D.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:3b60:2380::/48
Signature Algorithm: sha256WithRSAEncryption
ad:75:23:19:b1:a6:0c:e3:a7:6c:56:56:be:71:f9:5b:11:7f:
f4:e2:26:0a:e2:fc:1a:4e:30:b4:01:bf:8d:91:22:5f:da:88:
18:55:26:d4:9a:9f:4e:41:3b:d0:bc:43:a1:9d:e2:91:da:ce:
65:c7:6f:f2:5a:7e:f5:6f:22:ce:42:30:28:12:e9:65:45:97:
75:dc:37:e6:de:84:af:d3:1b:2d:2c:1b:98:33:29:ee:44:97:
c4:b4:d5:8c:5c:0b:3d:bd:77:7f:df:7e:e8:0b:86:07:4a:4d:
5e:da:d4:6b:f2:3a:33:59:98:76:29:24:5e:23:e6:fc:08:3e:
20:9e:4f:b0:6c:a5:79:d3:e4:0e:4f:d3:97:df:5b:63:38:13:
9a:5f:ef:b3:8a:90:81:d5:8e:d3:6b:49:7c:80:fd:21:1e:d6:
42:e4:5e:61:8a:7b:c5:c3:3d:2b:61:0e:10:72:42:18:5e:e6:
9b:5b:6c:ec:0f:6e:28:5c:c8:31:f0:9f:cc:f8:12:f8:30:5c:
b0:70:09:32:dc:db:d3:0e:a3:e0:a7:7f:ec:e8:d3:40:31:b7:
b5:ef:a0:d4:94:91:f2:9d:ba:22:1e:5c:73:34:27:ef:c4:40:
83:92:6d:92:1f:2a:d4:15:62:57:a0:4a:51:fb:4c:90:7b:a7:
83:b3:22:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:02:30 2026 by rpki-client