
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/D9D5455006AD11F1A15422A90B3D8C67.roa
File: D9D5455006AD11F1A15422A90B3D8C67.roa (raw, json)
Hash identifier: 9mXmmqDvRyQw4N2RkVpMeSLK2aerK/OHjHDytxXqiIA=
Subject key identifier: 74:B8:09:BE:06:35:18:6D:EF:48:9D:27:1F:4D:EA:C8:9C:97:22:06
Certificate issuer: /CN=A91EA0F7/serialNumber=82CA104DC5F2AFF533FBF68CF298F40FBD481F04
Certificate serial: 9E
Authority key identifier: 82:CA:10:4D:C5:F2:AF:F5:33:FB:F6:8C:F2:98:F4:0F:BD:48:1F:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/D9D5455006AD11F1A15422A90B3D8C67.roa
Signing time: Mon 02 Mar 2026 14:57:06 +0000
ROA not before: Tue 10 Feb 2026 18:25:18 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 154131
IP address blocks: 2001:df5:f640::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl
rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA0F7, serialNumber=82CA104DC5F2AFF533FBF68CF298F40FBD481F04
Validity
Not Before: Feb 10 18:25:18 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a5a541-8aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:74:de:af:cc:cd:a9:43:02:57:94:75:eb:f9:
6c:45:d5:f0:9c:79:e8:fd:c1:30:df:17:81:33:e0:
59:e1:bf:73:f9:a2:07:92:3b:80:ef:f6:6e:e5:a9:
48:07:16:77:7d:4d:a0:73:27:8f:1f:c3:9a:69:d1:
6b:7d:b2:32:90:60:8b:85:64:25:57:b7:4a:0c:50:
69:2e:96:b7:40:1e:da:d1:39:84:5b:28:55:52:ee:
69:9a:03:6c:cf:27:89:27:bb:ba:14:60:cf:54:92:
93:63:ed:6f:c4:58:64:f9:ab:5d:30:ac:d7:0b:23:
1f:d4:5d:d4:38:28:d1:a0:6a:db:a9:0f:ab:0a:3f:
ac:03:e3:c6:17:ce:57:a7:e4:59:76:f4:58:7e:56:
51:76:36:39:56:11:bd:bc:3d:30:4a:31:52:4f:79:
a2:4f:26:9b:68:14:4f:64:62:17:2d:f7:a8:f1:21:
7d:dd:7b:de:f2:1d:5e:d4:56:49:40:18:0d:6e:3c:
62:b6:5e:44:98:f6:a1:ef:47:82:85:a5:f1:eb:57:
9a:6e:2b:92:d6:a4:7b:28:cd:cb:57:16:59:d5:61:
3c:a0:0a:02:5c:cd:1b:d6:75:da:4b:43:f6:36:01:
05:ae:6a:b3:ae:72:8c:97:50:60:62:1b:0c:70:8c:
de:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B8:09:BE:06:35:18:6D:EF:48:9D:27:1F:4D:EA:C8:9C:97:22:06
X509v3 Authority Key Identifier:
keyid:82:CA:10:4D:C5:F2:AF:F5:33:FB:F6:8C:F2:98:F4:0F:BD:48:1F:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/D9D5455006AD11F1A15422A90B3D8C67.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:f640::/48
Signature Algorithm: sha256WithRSAEncryption
38:9a:de:2e:36:6a:85:2b:6e:4d:a0:eb:b2:61:31:7a:96:e6:
d8:05:e4:d9:0f:65:f2:97:78:27:e6:01:36:a5:01:82:c3:9b:
db:57:95:69:4c:25:59:2c:b3:98:83:2c:e9:f6:6e:55:e4:90:
db:53:ad:f9:1c:09:6c:70:72:b8:de:68:2a:a3:af:74:34:71:
24:9c:c0:93:6c:ae:7f:33:46:ac:64:01:32:c1:70:e3:c1:1c:
30:5c:85:3a:7f:86:1c:fb:24:ef:be:61:1a:3b:44:ec:1c:0c:
d4:1d:4a:e0:f3:f8:3a:0c:c2:a9:17:92:fb:25:b3:f6:da:66:
2f:18:a7:f9:29:b0:9c:b4:93:53:8b:fb:35:b8:b7:37:25:60:
71:24:1e:9a:57:f8:c4:17:9a:85:69:04:e9:a9:6d:6c:21:43:
b6:50:03:cf:2e:e0:2d:4c:4b:fb:e5:de:70:51:50:3c:8f:f8:
ad:4c:d8:75:0b:ce:bd:c4:c4:c2:96:f1:19:6f:3b:7e:e1:d7:
2f:39:32:8d:e0:6f:1b:94:46:a1:0e:7a:c8:03:39:b0:8d:43:
03:45:94:98:f6:ad:4e:10:e9:01:88:09:fa:40:68:c4:37:c4:
5b:b5:39:95:33:5b:2d:52:d3:09:33:04:12:c0:cc:4f:d7:94:
c0:1d:fb:8e
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUEwRjcxMTAvBgNVBAUTKDgyQ0ExMDREQzVGMkFGRjUzM0ZCRjY4Q0YyOThGNDBG
QkQ0ODFGMDQwHhcNMjYwMjEwMTgyNTE4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1YTU0MS04YWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtXTer8zNqUMCV5R16/lsRdXwnHno/cEw3xeBM+BZ4b9z+aIHkjuA7/Zu5alI
BxZ3fU2gcyePH8OaadFrfbIykGCLhWQlV7dKDFBpLpa3QB7a0TmEWyhVUu5pmgNs
zyeJJ7u6FGDPVJKTY+1vxFhk+atdMKzXCyMf1F3UOCjRoGrbqQ+rCj+sA+PGF85X
p+RZdvRYflZRdjY5VhG9vD0wSjFST3miTyabaBRPZGIXLfeo8SF93Xve8h1e1FZJ
QBgNbjxitl5EmPah70eChaXx61eabiuS1qR7KM3LVxZZ1WE8oAoCXM0b1nXaS0P2
NgEFrmqzrnKMl1BgYhsMcIzeqQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFHS4Cb4G
NRht70idJx9N6siclyIGMB8GA1UdIwQYMBaAFILKEE3F8q/1M/v2jPKY9A+9SB8E
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTBGNy8wRDhDQzlENjc2
NkMxMUYwOUZDQTE5MkRDNEY5QUUwMi9nc29RVGNYeXJfVXotX2FNOHBqMEQ3MUlI
d1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dzb1FUY1h5cl9Vei1fYU04cGowRDcxSUh3US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUEwRjcvMEQ4Q0M5RDY3NjZDMTFGMDlGQ0ExOTJEQzRGOUFFMDIvRDlENTQ1NTAw
NkFEMTFGMUExNTQyMkE5MEIzRDhDNjcucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN9fZAMA0GCSqGSIb3DQEBCwUAA4IBAQA4mt4uNmqFK25NoOuy
YTF6lubYBeTZD2Xyl3gn5gE2pQGCw5vbV5VpTCVZLLOYgyzp9m5V5JDbU635HAls
cHK43mgqo690NHEknMCTbK5/M0asZAEywXDjwRwwXIU6f4Yc+yTvvmEaO0TsHAzU
HUrg8/g6DMKpF5L7JbP22mYvGKf5KbCctJNTi/s1uLc3JWBxJB6aV/jEF5qFaQTp
qW1sIUO2UAPPLuAtTEv75d5wUVA8j/itTNh1C869xMTClvEZbzt+4dcvOTKN4G8b
lEahDnrIAzmwjUMDRZSY9q1OEOkBiAn6QGjEN8RbtTmVM1stUtMJMwQSwMxP15TA
HfuO
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:59:08 2026 by rpki-client