
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/309268DCBB7E11E9AFB49C42C4F9AE02.roa
File: 309268DCBB7E11E9AFB49C42C4F9AE02.roa (raw, json)
Hash identifier: YmGFgwUypcFh5OijZSTGp22AvvVEqAYggryXmPGaV1g=
Subject key identifier: 67:F1:57:E0:13:7C:16:41:BF:1B:BF:98:CB:04:7C:25:03:34:60:1F
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 36C1
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/309268DCBB7E11E9AFB49C42C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:45:39 +0000
ROA not before: Tue 02 Sep 2025 15:01:25 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 24183
IP address blocks: 2403:cc00:a000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 14:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14017 (0x36c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: Sep 2 15:01:25 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a48953-f8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9c:48:50:f7:c7:53:50:93:3a:81:f2:ec:c7:
eb:17:e8:63:f0:9c:4b:59:4c:ba:3e:45:f2:22:d7:
52:83:5f:31:47:7f:32:b3:1c:b3:9d:12:d9:d8:0f:
90:0a:ab:62:9c:1a:68:7c:7a:10:7c:aa:22:38:50:
01:73:df:d6:0b:d9:51:bf:80:6e:70:d7:a4:ec:97:
a7:ca:aa:d2:21:ed:cc:34:01:ed:9e:7e:7b:4a:1e:
a4:dd:81:6d:96:29:1d:e4:e5:d5:5d:62:41:86:b6:
46:0d:2c:36:62:16:d7:a6:5a:40:06:da:45:29:da:
cf:2d:26:11:4f:13:e6:e4:71:0a:fa:26:e2:f5:0a:
ef:53:88:3d:c8:e6:fd:bf:c9:09:3a:2f:17:ad:a4:
a0:8a:7f:57:37:7a:e3:34:b2:6c:b2:d1:84:a7:a4:
7e:79:bf:2b:67:77:be:b7:bd:11:d9:90:49:d6:3c:
35:3b:07:9a:8c:53:95:2e:5e:05:ba:9d:2b:cd:ba:
22:fc:fc:eb:6e:20:39:1e:c4:ed:8d:f1:5b:f2:a5:
54:12:58:6c:e8:ea:d7:f5:57:f3:70:91:2d:a2:7f:
e8:e5:84:97:69:f9:b2:97:ea:12:b0:b4:62:11:a3:
d9:5a:05:af:f0:7b:34:40:58:c7:d8:6b:15:99:f4:
ef:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F1:57:E0:13:7C:16:41:BF:1B:BF:98:CB:04:7C:25:03:34:60:1F
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/309268DCBB7E11E9AFB49C42C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2403:cc00:a000::/36
Signature Algorithm: sha256WithRSAEncryption
1e:22:cd:66:7e:67:08:32:fe:7d:6e:0b:15:9a:8b:f2:86:07:
c1:68:0a:f7:17:84:d7:70:b1:53:ed:54:17:d1:43:38:a3:59:
83:3b:bb:ec:e5:f5:5f:1f:bb:1b:a6:66:04:67:cb:19:7f:6a:
bd:14:49:73:15:5c:a6:6c:f8:f0:52:99:ca:aa:3a:cf:1f:fa:
2f:5d:f3:72:ff:52:a6:48:b0:1f:eb:db:05:83:cd:e5:5b:9a:
1e:df:d5:cc:ba:25:50:9b:67:56:ad:55:5e:89:19:d3:17:71:
34:34:d4:1c:50:3c:16:50:6e:41:87:5f:31:0b:82:a3:61:a9:
40:36:d3:81:90:c8:26:68:45:82:5f:47:d1:c5:47:ed:be:59:
ca:6c:13:0d:9c:34:9a:7d:18:fe:3c:1e:09:1e:10:b6:fb:f1:
09:86:60:c0:c5:23:2b:fd:e4:c3:23:49:dc:85:ed:fa:6e:00:
68:2b:fb:a1:33:ab:94:ae:f9:77:58:4e:f9:af:fb:7e:63:63:
b9:51:4b:78:16:a5:33:71:ca:24:6d:02:71:0a:d8:d7:c6:ad:
65:5f:09:9c:c9:47:95:4a:50:c8:b8:55:84:55:d2:21:a2:0b:
70:1b:d6:b7:56:45:bd:13:cd:fc:94:40:e5:4e:7f:3d:98:93:
be:53:89:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:20:51 2026 by rpki-client