
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/652F27C2268611F1B4DA1002B4833773.roa
File: 652F27C2268611F1B4DA1002B4833773.roa (raw, json)
Hash identifier: QkOdZG5FEv1Rbj8Iadwbn2v0UhPZuJkr7YpdV1fhrP8=
Subject key identifier: 87:51:82:23:98:40:59:FE:C0:17:8E:2F:B5:FB:73:15:DD:5A:18:75
Certificate issuer: /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
Certificate serial: 11FF
Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/652F27C2268611F1B4DA1002B4833773.roa
Signing time: Mon 23 Mar 2026 07:03:29 +0000
ROA not before: Mon 23 Mar 2026 07:03:29 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 38136
IP address blocks: 2404:7ac0:4000::/34 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl
rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:10:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4607 (0x11ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D16A3, serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
Validity
Not Before: Mar 23 07:03:29 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69c0e5c1-c96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:75:90:5f:98:df:97:57:18:5e:3f:68:ca:04:
c6:4b:f7:c1:e3:b6:fe:8b:2a:f4:77:24:00:87:7a:
21:62:0b:8c:84:76:ce:bc:1b:68:43:26:a1:12:89:
f5:78:1c:ea:47:bd:8c:04:93:6d:90:d9:63:0f:fe:
e3:f1:12:01:13:de:5c:42:21:b1:a1:f6:20:4a:9b:
c2:62:38:79:7c:db:a3:df:52:d5:01:34:7f:94:78:
52:e5:f7:9a:99:e2:ab:87:ca:2b:1e:51:af:7c:b2:
0d:e1:98:9e:3d:c1:9f:ce:5f:ab:1e:ce:bf:94:92:
57:db:00:bb:6d:04:de:80:72:ac:e0:dc:ae:c1:06:
08:f5:4d:9a:0b:87:ff:d7:4c:51:fa:0c:f2:4e:68:
13:5c:a7:8a:b1:c8:51:96:86:a8:46:25:db:b0:1d:
5d:c5:39:62:7d:bf:2d:30:9f:4e:41:60:75:ed:8e:
4e:6b:b3:09:87:7c:70:46:b7:45:6c:1f:75:3c:ed:
1f:92:71:9d:8e:d3:50:38:ec:7e:96:20:0e:bb:ca:
ef:59:2c:ec:cb:65:59:75:17:2b:4c:fe:e5:10:ad:
72:5e:fa:27:e3:ee:83:32:5c:f1:a3:db:71:04:d4:
22:9c:f5:93:17:a1:3c:54:8c:38:89:40:37:8d:41:
b2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:51:82:23:98:40:59:FE:C0:17:8E:2F:B5:FB:73:15:DD:5A:18:75
X509v3 Authority Key Identifier:
keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/652F27C2268611F1B4DA1002B4833773.roa
sbgp-ipAddrBlock: critical
IPv6:
2404:7ac0:4000::/34
Signature Algorithm: sha256WithRSAEncryption
65:ab:9d:63:46:54:95:8b:56:1e:4c:b8:15:89:8b:6c:f2:04:
03:c0:2b:dc:ab:87:4a:32:90:5a:af:2a:d3:a2:b4:33:23:4f:
7b:7b:70:70:55:e0:4b:bb:fd:9f:c9:90:98:d1:c0:37:80:cb:
11:81:f2:75:7e:c6:38:27:a1:23:83:05:71:b2:0e:f0:3a:a7:
e2:3f:41:1e:b6:30:1b:b7:81:f1:9b:0c:ce:14:3c:5b:26:52:
a1:a0:de:66:22:fb:c9:5d:6f:1f:6c:21:dc:5f:cb:3c:23:28:
d8:75:af:5a:0f:a9:4d:fe:17:97:14:e3:40:ed:56:74:b1:c4:
96:dd:83:54:c8:73:2c:24:fa:be:39:56:ab:df:04:03:65:4f:
18:55:a1:87:e7:78:43:f5:48:c9:d3:dd:58:cb:8c:89:2c:30:
f1:ef:8e:03:0a:b5:c9:32:71:bf:1c:40:5f:53:67:12:12:d1:
f1:3e:3b:1f:19:1d:c6:45:96:84:c3:b2:ce:07:ed:e1:bc:a3:
45:c4:5c:e5:e3:b3:d4:99:83:c9:ee:de:63:05:3b:7b:ea:18:
97:95:48:5b:b3:e0:0c:34:c2:3c:67:52:ff:17:6a:c5:e8:aa:
e7:71:5f:02:c1:48:39:db:95:07:9a:29:0b:a0:17:04:47:ac:
d4:a2:8f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:31:06 2026 by rpki-client