
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/01607012DD3711EC9EF48256C4F9AE02.roa
File: 01607012DD3711EC9EF48256C4F9AE02.roa (raw, json)
Hash identifier: JLuibLFe2igwYYBnUOCMg1rvtCWv2EtsXGaKbROLXRs=
Subject key identifier: 02:7A:07:3D:E9:B3:32:9B:48:2A:D5:AC:BF:C6:C7:03:58:E1:EC:EA
Certificate issuer: /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Certificate serial: 040D
Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/01607012DD3711EC9EF48256C4F9AE02.roa
Signing time: Wed 18 Mar 2026 18:44:16 +0000
ROA not before: Wed 18 Mar 2026 18:44:16 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2407:30c0:100::/43 maxlen: 48
2407:30c0:120::/48 maxlen: 48
2407:30c0:140::/43 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:25:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1037 (0x40d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Validity
Not Before: Mar 18 18:44:16 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69baf280-9cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ab:6e:fa:8b:01:13:35:5c:9f:6b:08:c2:8c:
4d:79:84:f2:d7:b3:60:40:a7:c3:ae:a0:bc:4f:50:
0b:52:de:26:17:77:c2:46:1c:23:59:d9:7f:39:ee:
31:dd:eb:0d:fb:42:39:9c:93:25:5b:c6:3b:e7:0e:
c4:c9:7a:60:cb:f6:3b:70:50:06:39:55:f3:07:3b:
71:b3:ec:5f:3a:83:8c:a8:49:11:de:c2:73:22:54:
f2:7e:8c:7d:93:56:74:47:c2:43:fe:3a:ef:15:ca:
b0:63:98:87:13:62:6a:55:2c:3e:ea:95:5b:56:5c:
9f:33:30:26:d8:1b:8a:9f:a2:ab:d9:7f:48:f8:bd:
73:f1:d3:31:2e:9f:ed:a4:03:6f:b0:d3:1d:30:81:
bb:f0:be:16:3c:e5:b9:46:ca:58:b3:89:9a:11:5c:
0f:c9:71:d2:5e:17:d8:3b:7e:ee:1c:f1:47:38:4b:
2c:32:bf:9d:8b:bc:79:cf:14:1a:77:3f:ca:f2:c3:
dc:75:e9:13:58:1e:05:8f:ee:38:b9:8a:c3:9a:64:
07:5a:ed:72:8d:c1:16:b3:f9:0b:cc:20:ee:20:03:
8b:8a:d2:ea:1b:b7:3f:5d:a1:16:ec:f5:cb:86:e3:
4e:b7:78:27:bb:7c:0e:ad:03:91:b9:a7:6e:61:ce:
b5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7A:07:3D:E9:B3:32:9B:48:2A:D5:AC:BF:C6:C7:03:58:E1:EC:EA
X509v3 Authority Key Identifier:
keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/01607012DD3711EC9EF48256C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2407:30c0:100::-2407:30c0:120:ffff:ffff:ffff:ffff:ffff
2407:30c0:140::/43
Signature Algorithm: sha256WithRSAEncryption
2b:ec:e9:72:81:0a:73:7b:a7:a4:63:be:44:b1:a2:91:18:6d:
39:71:07:99:75:a0:8e:c9:64:5e:b4:e2:3f:c6:fc:57:58:96:
27:3b:f6:c1:40:00:e3:a2:b9:be:c3:50:bb:87:14:86:28:86:
e2:89:3c:5e:1c:48:5a:51:93:0a:f2:65:dd:95:64:63:dd:c1:
9a:c9:75:1f:c2:81:82:62:59:32:f7:6c:37:46:a5:9a:bf:06:
cb:fb:a2:85:65:55:15:4d:1e:65:17:e1:36:03:32:ef:28:fc:
05:af:2c:bc:e2:aa:79:61:51:32:68:b3:8c:b3:de:d5:2d:72:
f2:ca:ea:17:62:a7:3a:7d:b5:72:1f:89:cd:db:d6:51:14:c7:
5f:0c:ea:de:94:9a:0a:50:8d:21:c7:e6:1c:11:92:6f:21:6c:
13:d7:6b:da:67:34:2d:ef:d2:12:e0:98:39:3a:41:7d:c2:d6:
e3:9b:74:ed:fd:53:88:28:06:f1:04:bb:d6:ac:57:03:8d:71:
18:ca:f2:86:4b:d8:0c:06:68:44:2c:c0:89:a1:11:97:50:f1:
c0:e9:21:5b:55:eb:33:75:cf:0d:56:47:6c:14:54:c4:db:21:
79:8d:73:3d:cf:94:86:46:c1:63:1b:5c:28:0b:e7:cb:91:c5:
dd:5c:dd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:39 2026 by rpki-client