
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/2B1D3BB2305811EA8D5B6479C4F9AE02.roa
File: 2B1D3BB2305811EA8D5B6479C4F9AE02.roa (raw, json)
Hash identifier: J7bgw3OjD+bEqGEXKo8Fs8Z0MR84T96zJE637Xnk50M=
Subject key identifier: A2:50:C5:D9:82:AC:0C:FB:E5:DA:DB:0F:99:C5:6F:47:0B:CC:25:CE
Certificate issuer: /CN=A91C6B27/serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8
Certificate serial: 0C54
Authority key identifier: 9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/2B1D3BB2305811EA8D5B6479C4F9AE02.roa
Signing time: Wed 08 Jul 2026 19:20:16 +0000
ROA not before: Wed 08 Jul 2026 19:20:16 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 55552
IP address blocks: 202.52.42.0/23 maxlen: 23
2001:df0:a5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl
rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3156 (0xc54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6B27, serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8
Validity
Not Before: Jul 8 19:20:16 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4ea2f0-7002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9d:99:51:1e:2f:e1:da:4a:39:10:79:f9:eb:
3e:dc:d3:69:f6:0a:00:5a:24:bd:ab:89:8c:5b:82:
ea:13:a4:ce:61:96:26:b5:86:b2:83:11:d1:2e:4f:
a7:de:10:94:0c:3f:0d:ec:d1:36:aa:80:b5:88:3c:
51:6b:f3:6d:1e:7d:0b:49:84:48:c8:f1:70:38:8f:
f0:a2:46:0a:05:ff:ed:88:8f:ef:56:76:b6:e0:f5:
46:4c:d6:31:ab:3b:54:a6:53:c4:f1:b1:b8:a7:bf:
c8:0d:ec:36:b5:41:9b:0e:70:5e:6f:a3:f1:9b:d1:
68:1a:79:c0:fc:83:18:d9:67:33:33:9f:d8:de:23:
01:e9:07:f6:06:f3:87:59:98:0e:40:ed:28:64:7c:
d2:12:b2:a1:c6:bb:17:16:23:1e:2e:eb:59:08:8d:
7a:e6:fb:27:8b:df:f8:a7:89:e6:b4:c2:69:10:29:
a7:99:0b:63:28:b5:95:79:19:bb:2b:fc:54:b2:55:
c4:3a:54:f3:93:86:96:ed:b0:84:bb:26:57:e8:10:
89:6f:f3:4e:f8:eb:be:0c:ab:22:4b:00:0b:ae:aa:
54:67:82:f4:ba:47:28:68:c9:fe:9b:35:d9:40:3a:
61:33:a3:c3:77:64:0c:40:8f:cf:5a:9f:d6:60:97:
94:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:50:C5:D9:82:AC:0C:FB:E5:DA:DB:0F:99:C5:6F:47:0B:CC:25:CE
X509v3 Authority Key Identifier:
keyid:9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/2B1D3BB2305811EA8D5B6479C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.52.42.0/23
IPv6:
2001:df0:a5::/48
Signature Algorithm: sha256WithRSAEncryption
5b:87:38:7f:fb:18:92:cb:e4:0e:6a:23:b8:36:fb:16:44:91:
31:e8:02:3e:f6:3c:43:50:02:e1:d2:e3:c0:45:eb:28:b8:65:
2d:b0:2f:3f:1a:42:94:88:3a:fd:aa:a8:2f:fe:40:c3:af:4b:
4e:3d:51:3f:60:d5:3e:77:68:e4:f6:bb:42:b0:4f:0c:cd:73:
88:a5:3c:35:8b:ff:39:f7:d3:7a:5d:f8:1b:c7:d3:e2:80:29:
05:53:a0:99:ad:c1:1d:fd:f4:8d:39:39:3d:c5:b6:4a:de:a6:
ba:49:70:a9:01:c6:c7:84:1f:0b:2d:d6:a7:d1:63:7e:10:77:
bd:91:05:04:30:3d:56:26:93:db:43:d0:9c:d8:a5:80:66:68:
13:f6:0c:1a:40:fe:78:90:ce:fd:47:14:33:e1:80:07:b6:5f:
7f:e6:7f:7a:78:c6:32:98:e0:02:d6:72:54:ac:1a:e7:98:d4:
d0:7a:24:81:bd:91:b8:c4:3c:63:91:89:12:25:55:05:4f:85:
f7:0f:1e:62:72:26:ab:a5:c8:4e:b5:69:67:6e:c3:75:c5:b9:
95:46:4f:e7:07:c4:70:3d:39:9c:95:8b:82:d5:9e:82:98:88:
99:46:dc:86:1d:4d:6f:b2:a9:01:a8:6a:43:bd:6d:e2:5a:5a:
aa:f2:47:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:00:33 2026 by rpki-client