
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/38D25300639D11EFB668775FC4F9AE02.roa
File: 38D25300639D11EFB668775FC4F9AE02.roa (raw, json)
Hash identifier: Qj2e8JFy3G1Ijnc1ybFXUNaXhlpo6NRhbWYoFliMA3w=
Subject key identifier: 0B:90:55:38:96:95:E9:84:FF:68:84:CB:8B:95:26:37:B4:D6:13:3B
Certificate issuer: /CN=A91CA735/serialNumber=537B1BA1C01B48634738AA1159AE2B95590DDD91
Certificate serial: 0150
Authority key identifier: 53:7B:1B:A1:C0:1B:48:63:47:38:AA:11:59:AE:2B:95:59:0D:DD:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/38D25300639D11EFB668775FC4F9AE02.roa
Signing time: Wed 13 May 2026 05:34:02 +0000
ROA not before: Wed 13 May 2026 05:34:02 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 135102
IP address blocks: 2401:9ce0::/44 maxlen: 48
2401:9ce0:10::/44 maxlen: 48
2401:9ce0:20::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.crl
rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:34:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 336 (0x150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA735, serialNumber=537B1BA1C01B48634738AA1159AE2B95590DDD91
Validity
Not Before: May 13 05:34:02 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a040d4a-a333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1a:d1:09:c5:7c:9e:3b:e6:f0:54:ee:5f:68:
c0:8c:78:1e:6b:87:0c:f7:96:49:b1:af:5e:ad:38:
a4:6d:11:b8:06:af:2d:bc:8b:41:0c:b7:1d:93:4a:
0c:4f:99:df:0a:f9:77:8b:5d:a7:cd:c7:07:ef:96:
e3:18:22:2c:78:20:4e:6d:b9:47:a5:d6:07:bb:1f:
c8:84:83:95:b2:e7:03:3e:1b:49:ae:73:0f:18:f4:
35:6c:a8:cf:72:88:b7:ac:a2:1a:9b:f2:a1:e6:b7:
fc:8e:45:38:6a:3e:ea:89:96:80:ec:61:03:35:4c:
b5:fe:d7:e4:8c:22:6b:cb:ae:fe:6c:28:6f:68:be:
be:20:69:fb:e6:1a:fa:c8:dd:8f:58:21:81:18:e8:
88:0d:91:52:d2:7f:ee:55:7d:9b:59:e3:6d:f7:57:
7b:71:a5:ce:91:4c:d8:9d:b5:01:d8:c3:7c:b4:2f:
bd:fa:b7:db:e8:f8:35:7d:85:c6:63:40:2c:27:ce:
81:28:af:01:17:93:1d:04:1c:49:0f:8a:5a:58:9d:
0f:b3:7c:24:1d:cb:57:12:5b:cb:e8:c9:b4:b7:4f:
ad:9c:cc:f8:e9:31:1a:2c:31:69:7c:47:10:71:51:
22:b4:86:d1:68:6c:d7:fc:17:1a:12:77:9d:df:98:
98:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:90:55:38:96:95:E9:84:FF:68:84:CB:8B:95:26:37:B4:D6:13:3B
X509v3 Authority Key Identifier:
keyid:53:7B:1B:A1:C0:1B:48:63:47:38:AA:11:59:AE:2B:95:59:0D:DD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/38D25300639D11EFB668775FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:9ce0::-2401:9ce0:2f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
56:2a:5b:15:f7:2e:36:63:ef:d6:16:4c:68:8a:a0:9e:7b:5b:
8e:9f:df:6c:25:22:fe:9f:0b:17:01:1c:0b:93:7c:c2:22:53:
73:f2:d0:f1:d1:bf:e5:1b:cb:e8:a0:e5:42:bb:e8:ab:ff:a4:
a3:2b:5f:bb:d5:31:90:0c:e1:1e:3b:d7:ad:31:6d:2b:1c:ec:
ba:52:fd:45:64:fc:b8:a2:30:26:bd:14:21:95:52:30:47:ba:
7e:fc:4d:0c:4b:9e:b9:74:1e:46:4e:38:6e:93:ca:e1:37:ce:
75:85:01:a0:aa:b2:26:04:25:9a:79:08:7a:b0:18:20:3d:90:
71:50:fe:22:29:a3:e8:6e:a2:61:ea:de:86:5f:99:31:31:97:
1b:bf:e9:3c:80:e0:69:dc:79:f5:19:86:45:17:8d:c5:f4:09:
95:10:98:2e:f7:3e:aa:ec:2d:45:58:90:92:3f:7b:8a:17:0f:
60:7c:dc:24:9d:c6:b3:b6:4a:d9:82:42:da:50:e3:10:ea:b8:
86:73:4d:61:35:74:9e:89:44:af:3e:15:dc:15:e7:65:41:f2:
cc:87:48:a1:2e:fc:0e:92:6a:ee:cc:3b:8a:6a:98:15:c4:23:
ed:5e:80:9c:6b:10:3f:fe:47:fb:e3:96:37:1f:07:b7:8c:5b:
d4:79:4d:98
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0E3MzUxMTAvBgNVBAUTKDUzN0IxQkExQzAxQjQ4NjM0NzM4QUExMTU5QUUyQjk1
NTkwREREOTEwHhcNMjYwNTEzMDUzNDAyWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTA0MGQ0YS1hMzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvxrRCcV8njvm8FTuX2jAjHgea4cM95ZJsa9erTikbRG4Bq8tvItBDLcdk0oM
T5nfCvl3i12nzccH75bjGCIseCBObblHpdYHux/IhIOVsucDPhtJrnMPGPQ1bKjP
coi3rKIam/Kh5rf8jkU4aj7qiZaA7GEDNUy1/tfkjCJry67+bChvaL6+IGn75hr6
yN2PWCGBGOiIDZFS0n/uVX2bWeNt91d7caXOkUzYnbUB2MN8tC+9+rfb6Pg1fYXG
Y0AsJ86BKK8BF5MdBBxJD4paWJ0Ps3wkHctXElvL6Mm0t0+tnMz46TEaLDFpfEcQ
cVEitIbRaGzX/BcaEned35iY2QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFAuQVTiW
lemE/2iEy4uVJje01hM7MB8GA1UdIwQYMBaAFFN7G6HAG0hjRziqEVmuK5VZDd2R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTczNS9EMEU5QjFFRTYz
OUIxMUVGOUI0RDJBNURDNEY5QUUwMi9VM3Nib2NBYlNHTkhPS29SV2E0cmxWa04z
WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Uzc2JvY0FiU0dOSE9Lb1JXYTRybFZrTjNaRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0E3MzUvRDBFOUIxRUU2MzlCMTFFRjlCNEQyQTVEQzRGOUFFMDIvMzhEMjUzMDA2
MzlEMTFFRkI2Njg3NzVGQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAAjASMBADBQUkAZzgAwcEJAGc4AAgMA0GCSqGSIb3DQEBCwUAA4IBAQBWKlsV
9y42Y+/WFkxoiqCee1uOn99sJSL+nwsXARwLk3zCIlNz8tDx0b/lG8vooOVCu+ir
/6SjK1+71TGQDOEeO9etMW0rHOy6Uv1FZPy4ojAmvRQhlVIwR7p+/E0MS565dB5G
Tjhuk8rhN851hQGgqrImBCWaeQh6sBggPZBxUP4iKaPobqJh6t6GX5kxMZcbv+k8
gOBp3Hn1GYZFF43F9AmVEJgu9z6q7C1FWJCSP3uKFw9gfNwkncaztkrZgkLaUOMQ
6riGc01hNXSeiUSvPhXcFedlQfLMh0ihLvwOkmruzDuKapgVxCPtXoCcaxA//kf7
45Y3Hwe3jFvUeU2Y
-----END CERTIFICATE-----
Generated at Wed May 13 21:01:31 2026 by rpki-client