
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/E2FEA6DA3E5411EF9B398D2DC4F9AE02.roa
File: E2FEA6DA3E5411EF9B398D2DC4F9AE02.roa (raw, json)
Hash identifier: 4maJF9WUbj7sjherc9bKMjHY3wXl4HcmhFEcf5r/F/Q=
Subject key identifier: D2:EC:61:91:B0:31:15:E9:54:7E:45:E5:8F:FA:41:3F:98:39:B5:60
Certificate issuer: /CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Certificate serial: 08DB
Authority key identifier: 3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/E2FEA6DA3E5411EF9B398D2DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:36:04 +0000
ROA not before: Fri 20 Feb 2026 21:18:46 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 7496
IP address blocks: 203.27.226.0/23 maxlen: 24
203.32.8.0/21 maxlen: 24
2405:8800::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl
rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:12:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2267 (0x8db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB7AB, serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Validity
Not Before: Feb 20 21:18:46 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a47904-cd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:11:1f:f1:8f:8b:c7:86:4f:2e:b1:fb:25:d8:
be:4b:b6:a2:b4:ef:14:15:36:83:2a:00:35:ff:75:
71:a7:61:2b:05:d0:86:12:52:aa:36:fb:84:58:85:
68:aa:eb:e3:c1:5c:d6:80:ab:40:41:5b:61:9a:9b:
fe:59:fa:a2:d0:1b:bc:f7:da:98:0c:bf:05:1f:d0:
21:55:74:88:96:a9:bd:e0:f1:dc:05:a2:20:7d:d7:
d0:b4:c5:69:e6:6a:4e:e2:69:ce:83:fc:a4:46:05:
f0:1a:71:be:e9:ad:30:94:1b:72:4f:e4:bb:73:e3:
91:d4:56:91:7d:a9:53:19:ea:00:58:1d:6a:a7:33:
b9:0e:41:d7:95:a4:3a:94:0a:98:85:0e:b5:a5:60:
e7:37:05:1d:ef:69:32:e6:a9:56:56:74:a5:d8:94:
75:45:0a:f2:3a:e5:3f:bf:a6:f3:89:9a:20:29:bf:
ac:8e:ee:6b:8a:0b:5c:d4:11:1b:d2:21:a2:4c:73:
d1:42:dd:66:23:db:8b:47:ac:91:e7:22:6f:f2:fd:
0d:ce:55:b9:21:ae:18:2a:81:36:44:8f:44:31:c8:
d5:6b:19:f7:74:e6:a4:1a:bd:e5:81:b5:49:21:99:
d1:32:80:03:58:c8:0d:41:60:c6:16:50:15:24:33:
8c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EC:61:91:B0:31:15:E9:54:7E:45:E5:8F:FA:41:3F:98:39:B5:60
X509v3 Authority Key Identifier:
keyid:3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/E2FEA6DA3E5411EF9B398D2DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.27.226.0/23
203.32.8.0/21
IPv6:
2405:8800::/32
Signature Algorithm: sha256WithRSAEncryption
b2:aa:3d:2f:b6:01:8c:a5:b5:79:4f:00:39:9b:2a:3d:fd:9e:
bc:ef:b4:58:3a:bb:2a:2a:8c:6c:cd:84:c9:50:82:40:1f:77:
20:ad:5c:fa:f9:42:90:8b:c6:d1:fd:a2:a9:bd:42:1b:0c:b9:
87:b3:fb:04:fd:cb:66:1e:f8:26:66:d9:12:db:7a:5e:20:23:
b0:e1:a1:65:44:cc:7a:ba:47:9a:e5:81:dd:ee:8c:44:95:cc:
12:48:ed:09:26:75:d3:47:41:a9:f7:0f:81:8f:64:14:35:d5:
fe:a9:da:29:bb:80:b2:ef:92:25:b0:ee:7e:5c:c5:71:a1:ab:
3f:1c:aa:7c:8f:78:8e:d1:01:4d:b5:dd:72:b9:02:10:0d:49:
89:b7:bc:f8:13:b7:f0:12:e7:5e:ed:3e:c8:f1:aa:22:36:1c:
60:15:63:62:6d:8e:13:50:8d:50:2b:0f:47:72:cc:ca:d9:e4:
c9:ae:e3:4d:4d:0a:f6:eb:90:3a:f4:5b:74:d3:5a:11:bd:fa:
71:9c:be:d2:28:71:1c:41:99:24:21:2c:a9:1e:f4:fa:f2:2e:
05:bc:e5:ba:25:af:6d:fa:db:0d:6d:dd:ff:9c:4f:e7:08:ce:
68:a5:7c:e6:ba:86:6c:80:33:43:8b:dd:5a:8e:e2:06:68:ea:
8d:12:8c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:15 2026 by rpki-client