
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/0B725F44496D11EF9F7F2116C4F9AE02.roa
File: 0B725F44496D11EF9F7F2116C4F9AE02.roa (raw, json)
Hash identifier: GLn2NuIf/rdBlKE3RuKG6Jbz+UwBmcRgc2vk3s4p7rY=
Subject key identifier: B5:BB:0D:F9:29:37:E7:35:0C:DB:9B:A3:16:D2:F9:06:66:07:B9:97
Certificate issuer: /CN=A91E1604/serialNumber=E2F17737B84C1F67869C03A47F8C419FD420016C
Certificate serial: 013E
Authority key identifier: E2:F1:77:37:B8:4C:1F:67:86:9C:03:A4:7F:8C:41:9F:D4:20:01:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/0B725F44496D11EF9F7F2116C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:36:00 +0000
ROA not before: Mon 23 Jun 2025 05:25:25 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 152919
IP address blocks: 2401:a8e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl
rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 318 (0x13e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1604, serialNumber=E2F17737B84C1F67869C03A47F8C419FD420016C
Validity
Not Before: Jun 23 05:25:25 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a5a050-122f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2f:79:57:11:55:42:eb:08:4f:90:3e:df:d0:
ad:2d:33:39:57:6e:4b:49:e5:f6:18:32:fb:34:06:
93:57:de:2f:b0:de:24:01:8a:ce:e5:43:0f:8e:ee:
ea:07:5b:97:c9:23:05:db:ab:12:f9:cf:17:57:36:
57:e2:80:1a:ee:ee:38:a5:07:15:4c:c4:aa:04:f3:
d4:7c:fa:98:6a:be:c3:6e:e8:4a:7f:23:e2:32:f7:
9f:53:05:b5:8f:24:0e:11:69:dd:23:ed:72:ab:7d:
a7:48:3f:8a:3f:f8:f7:12:69:d2:1e:f7:94:24:8c:
86:40:30:dd:dd:c2:eb:ee:7e:e3:62:bc:95:61:50:
0a:40:ed:32:bf:6d:80:cf:d1:fa:65:f7:df:71:b2:
2c:f9:f8:2b:02:04:86:6e:fe:ca:35:bb:f0:88:bc:
71:ea:06:6e:b0:a3:1c:23:12:e8:34:f1:7e:70:69:
bb:b9:0c:08:ba:31:7d:e1:b5:93:a4:22:d7:07:0e:
9d:5f:dd:85:6b:ba:16:3c:1f:76:67:e5:79:41:a6:
0c:5d:33:20:e5:45:97:76:9e:90:53:c8:7b:9b:72:
d8:e6:17:d4:37:18:06:52:6d:9b:a5:51:77:93:27:
8e:43:60:bb:2b:44:ef:28:85:e3:b3:4e:a8:49:be:
8c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BB:0D:F9:29:37:E7:35:0C:DB:9B:A3:16:D2:F9:06:66:07:B9:97
X509v3 Authority Key Identifier:
keyid:E2:F1:77:37:B8:4C:1F:67:86:9C:03:A4:7F:8C:41:9F:D4:20:01:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/0B725F44496D11EF9F7F2116C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:a8e0::/32
Signature Algorithm: sha256WithRSAEncryption
6b:d6:0c:59:f2:02:3f:78:82:76:58:6f:86:7a:4d:89:f5:77:
e7:a1:d5:0e:38:af:3e:79:df:84:c9:eb:5f:16:fd:bb:03:0a:
22:73:1a:13:19:43:8f:75:b2:5a:87:ec:4f:2b:2f:dd:29:0f:
d6:43:f9:f5:67:0d:dc:58:86:1f:c8:bb:a4:87:12:16:f4:57:
db:b9:2a:9a:99:cb:62:6f:1b:dc:d2:c6:3e:ed:a2:63:9b:e3:
46:bb:16:3f:85:9c:51:67:bc:00:d8:63:84:d6:f6:54:8c:12:
cc:cf:47:3d:08:d7:fa:da:11:79:f6:ba:92:50:cc:49:ec:29:
ba:10:3f:8d:cf:d0:7f:8b:47:d9:fc:fc:fc:4b:7f:65:20:70:
ec:3b:2b:60:66:d1:e6:27:6e:8b:c8:fa:fa:2d:b4:ab:8d:6c:
fc:0b:4b:7b:29:20:68:9a:a5:3f:fe:a7:1f:c5:d4:17:72:2a:
35:04:16:27:9e:f5:db:a2:60:9e:66:c4:3a:98:e1:ea:9e:e5:
90:a0:59:2d:79:56:69:28:7e:22:ed:ff:b1:92:b3:74:3e:10:
f0:ef:a9:b3:7b:8c:d9:d3:a7:84:3c:71:a2:a7:b4:01:87:08:
4b:c6:0c:b8:9e:71:a9:22:1e:97:37:44:40:dd:f4:9e:a0:29:
72:62:0b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:36:34 2026 by rpki-client