
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4781/E290476CA48D11F0AD97F016C4F9AE02/B2D021C8A55A11F094B38083C4F9AE02.roa
File: B2D021C8A55A11F094B38083C4F9AE02.roa (raw, json)
Hash identifier: R0qrAdmww4GRAq2qDqXgD5pff8It00X5dKQtLyS7hKg=
Subject key identifier: FF:74:B9:D8:86:A3:FC:23:43:32:93:74:0F:85:8A:CE:E6:6A:CC:E2
Certificate issuer: /CN=A91D4781/serialNumber=1EC66D906F7942DF3B77BFDEDDFD009FEB2BFD21
Certificate serial: 57
Authority key identifier: 1E:C6:6D:90:6F:79:42:DF:3B:77:BF:DE:DD:FD:00:9F:EB:2B:FD:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsZtkG95Qt87d7_e3f0An-sr_SE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4781/E290476CA48D11F0AD97F016C4F9AE02/B2D021C8A55A11F094B38083C4F9AE02.roa
Signing time: Tue 17 Mar 2026 11:42:56 +0000
ROA not before: Tue 17 Mar 2026 11:42:56 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 151660
IP address blocks: 2402:3120::/32 maxlen: 32
2402:3120:cafe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4781/E290476CA48D11F0AD97F016C4F9AE02/HsZtkG95Qt87d7_e3f0An-sr_SE.crl
rsync://rpki.apnic.net/member_repository/A91D4781/E290476CA48D11F0AD97F016C4F9AE02/HsZtkG95Qt87d7_e3f0An-sr_SE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsZtkG95Qt87d7_e3f0An-sr_SE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:19:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87 (0x57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4781, serialNumber=1EC66D906F7942DF3B77BFDEDDFD009FEB2BFD21
Validity
Not Before: Mar 17 11:42:56 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69b93e40-3d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:14:cb:d1:1d:9d:19:c0:52:28:38:5d:de:f2:
70:0a:70:6a:12:c3:d1:22:3c:a2:5a:72:52:f0:11:
34:8d:71:b3:61:10:3e:da:35:61:1f:7e:10:c0:f4:
7c:14:22:ae:34:b0:69:19:de:13:29:e1:a2:53:f0:
15:9e:35:64:a2:89:a9:0f:ca:cc:6a:42:8d:e2:e7:
1d:ef:01:8d:07:90:95:1f:8b:a9:35:0a:6c:12:de:
5e:1e:da:68:0b:14:7e:41:05:39:f7:fd:d9:a0:5c:
14:b6:07:ff:a5:c6:05:bc:3a:5f:e0:e7:59:7a:56:
dc:2f:5b:05:d8:66:06:27:67:fa:7c:c7:c1:70:47:
d3:48:ea:6d:09:eb:c6:69:4f:2b:9d:ce:fb:49:02:
ae:f2:51:55:77:70:3a:97:97:25:bd:17:3c:59:ae:
f4:13:8f:4b:7d:27:9d:c8:95:55:39:c9:2e:5e:0d:
19:c5:13:61:c4:e3:44:b1:1b:f9:ca:54:ac:4d:4b:
b8:c3:79:5a:4a:a2:3a:0a:e2:92:99:30:89:d6:eb:
53:10:ba:3d:66:73:50:f9:d2:fe:7d:44:29:85:b5:
1e:c5:ec:2e:1f:5c:fe:0c:aa:1e:26:95:1b:53:bb:
11:d0:a2:a3:9c:03:fb:e7:54:10:0b:a5:88:52:1a:
08:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:74:B9:D8:86:A3:FC:23:43:32:93:74:0F:85:8A:CE:E6:6A:CC:E2
X509v3 Authority Key Identifier:
keyid:1E:C6:6D:90:6F:79:42:DF:3B:77:BF:DE:DD:FD:00:9F:EB:2B:FD:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4781/E290476CA48D11F0AD97F016C4F9AE02/HsZtkG95Qt87d7_e3f0An-sr_SE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsZtkG95Qt87d7_e3f0An-sr_SE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4781/E290476CA48D11F0AD97F016C4F9AE02/B2D021C8A55A11F094B38083C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:3120::/32
Signature Algorithm: sha256WithRSAEncryption
a9:18:3a:35:1b:b1:1e:9f:2a:ff:80:93:d2:49:9a:1b:7d:5b:
68:62:7f:9f:f5:56:6e:79:33:25:a8:32:29:e1:82:4a:fc:79:
c0:9b:a7:65:98:5a:71:00:ef:19:21:61:60:e1:bc:10:55:57:
7d:ef:66:f5:15:07:e9:09:b3:a1:7c:c7:73:bb:5d:9b:34:e5:
8b:c1:c8:e6:f4:49:47:da:53:b7:23:c9:e4:b3:05:cb:56:58:
c6:6b:6f:00:5d:5c:db:43:23:16:1c:48:31:87:42:4c:65:c6:
07:02:51:b7:d8:22:46:8e:ca:90:2c:70:f6:5f:bf:d4:c0:59:
70:ea:8f:8f:91:70:87:06:fd:50:65:99:c2:aa:e5:54:ae:dc:
2a:c4:fb:bb:52:0d:7e:ee:53:d6:1a:11:35:0e:2f:9f:7a:97:
17:b1:37:31:64:12:94:b7:0e:50:eb:c2:fe:33:46:54:03:f2:
92:92:9a:40:65:df:86:c3:b1:a5:76:eb:4b:73:c4:fd:5e:58:
f2:a5:37:4b:3b:6b:0e:73:3d:6a:30:1a:f1:bd:f1:0f:c3:b4:
14:9f:2e:d4:de:e9:1e:77:64:ac:6d:e9:ce:44:ac:3f:44:6e:
59:35:98:f3:97:4d:9e:b8:c0:ac:d1:b6:37:04:64:d9:d2:3d:
01:40:33:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:15:32 2026 by rpki-client