
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/AEE9F9E6326011ED9031BC4FC4F9AE02.roa
File: AEE9F9E6326011ED9031BC4FC4F9AE02.roa (raw, json)
Hash identifier: r+lrx7WpAI1BilPAcnEksEUaCu2KnCEQLhymAPB2i1s=
Subject key identifier: 3F:F0:87:EB:62:08:CF:B7:FA:1F:C3:84:F0:5D:34:BE:F4:30:A0:2F
Certificate issuer: /CN=A91D1216/serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002
Certificate serial: 0456
Authority key identifier: 6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/AEE9F9E6326011ED9031BC4FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:39:35 +0000
ROA not before: Wed 10 Dec 2025 23:08:29 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 58511
IP address blocks: 58.96.158.0/23 maxlen: 23
125.254.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl
rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:10:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1110 (0x456)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1216, serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002
Validity
Not Before: Dec 10 23:08:29 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a46bc7-7a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:41:3f:75:29:e8:6d:69:06:04:3e:ae:70:f5:
e1:ee:98:b5:49:64:91:c2:f1:aa:67:88:6a:24:94:
4f:bd:1f:5d:6c:4f:e9:12:e1:75:aa:ff:a7:ab:cf:
a3:5f:53:11:42:48:bb:d2:db:92:1e:45:16:f6:71:
17:6b:1e:69:4d:9a:07:bb:d5:c3:ef:2d:db:d0:11:
40:78:d1:66:70:93:55:63:90:d8:72:69:f7:de:fa:
8b:30:aa:e7:16:19:05:d0:c3:97:a5:e6:0a:75:9e:
a3:1a:07:64:d1:c2:50:db:1a:68:01:ac:89:a5:1c:
88:0b:ec:01:5f:03:ec:55:d4:e9:c5:15:2a:e9:b0:
da:a0:a2:ec:ab:17:6f:e3:93:4e:b0:f0:41:0f:e0:
70:ff:0b:5f:ae:40:13:d0:86:90:0a:eb:6e:18:63:
71:73:7e:02:af:da:db:ac:58:a5:98:4e:74:40:14:
a5:87:91:32:ae:4c:e7:a7:ec:26:92:e0:13:46:bf:
9b:0c:85:3f:08:d4:71:bb:26:8b:7e:72:2b:97:b0:
c5:42:e5:4d:58:78:72:d1:1f:b5:6c:7f:18:86:30:
8f:9d:f3:96:2b:18:0d:2d:9c:32:5f:78:8b:e0:3d:
f6:1d:72:d2:cb:35:7e:7d:d3:d3:ac:a2:e6:15:6b:
c5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F0:87:EB:62:08:CF:B7:FA:1F:C3:84:F0:5D:34:BE:F4:30:A0:2F
X509v3 Authority Key Identifier:
keyid:6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/AEE9F9E6326011ED9031BC4FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
58.96.158.0/23
125.254.64.0/18
Signature Algorithm: sha256WithRSAEncryption
93:a3:eb:c9:e0:e2:45:25:21:3a:bb:84:d9:93:a3:5f:f8:38:
ec:82:d4:8d:29:3c:93:1e:1e:0a:2e:fb:60:8e:32:0e:69:90:
e7:88:3b:7d:dc:d4:86:0d:ab:20:4b:47:56:cb:c2:5a:fd:02:
b7:f1:75:b6:34:e3:5c:65:3c:2c:89:f4:de:2e:c4:4b:47:ff:
e3:5b:d6:db:24:82:25:a3:48:72:f8:4d:bc:cd:18:fe:34:f1:
80:ae:e1:86:c3:49:83:77:0b:7c:96:3c:fc:92:e5:6a:67:0a:
70:57:78:9f:83:2e:29:25:7b:bc:70:c7:77:19:88:a9:d1:4b:
93:9b:c6:c4:5e:30:d3:48:e5:36:79:5c:c0:64:12:4f:a2:af:
5d:d5:50:51:ea:2a:ec:44:8b:80:da:af:44:4a:71:20:19:70:
5a:b1:eb:64:52:c9:e5:02:40:fb:7c:ad:0f:29:c7:6a:37:61:
8a:3b:95:76:97:99:10:04:f6:28:4d:f5:da:56:d8:63:01:a3:
9c:16:93:6f:81:65:b4:c7:e8:b7:7e:9f:64:bb:b6:86:3f:43:
84:30:48:2e:ff:92:c1:9b:2b:3e:4e:f5:5f:9c:6a:04:b9:12:
91:74:24:64:3b:38:95:2f:cd:41:37:64:9a:c2:22:21:de:99:
80:96:18:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:04 2026 by rpki-client