
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/F042F19A911311EF9A1A7F54C4F9AE02.roa
File: F042F19A911311EF9A1A7F54C4F9AE02.roa (raw, json)
Hash identifier: IYfrmkXj2ACflCUxznIdR4k4x5Hn31JP6Azde1AKBz4=
Subject key identifier: 65:04:98:9C:74:6A:5C:2C:C9:42:A5:C0:62:5E:EC:0B:0C:A0:9B:6A
Certificate issuer: /CN=A91EFCFF/serialNumber=EBFBD4CB9B58AC082D3F382987A597A58C96BA91
Certificate serial: 0119
Authority key identifier: EB:FB:D4:CB:9B:58:AC:08:2D:3F:38:29:87:A5:97:A5:8C:96:BA:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_vUy5tYrAgtPzgph6WXpYyWupE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/F042F19A911311EF9A1A7F54C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:10:51 +0000
ROA not before: Mon 01 Sep 2025 06:25:32 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 142165
IP address blocks: 2401:bfe0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.crl
rsync://rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_vUy5tYrAgtPzgph6WXpYyWupE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:03:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281 (0x119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFCFF, serialNumber=EBFBD4CB9B58AC082D3F382987A597A58C96BA91
Validity
Not Before: Sep 1 06:25:32 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a59a6b-a704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9d:eb:ef:a1:8f:1c:6e:f2:b7:9e:90:cb:7a:
73:63:04:25:9d:54:e6:61:10:89:dc:3f:47:61:68:
ee:43:08:6a:48:9b:7e:a1:84:00:28:24:23:5f:95:
76:83:9d:19:ad:ba:23:9e:10:8b:e5:79:38:d5:30:
02:57:c4:99:3a:0b:6a:50:6c:72:a1:06:f5:ec:b6:
c2:90:f6:1c:75:9c:0f:4a:f4:22:a7:93:87:e4:f3:
65:62:3e:2f:1e:4e:04:78:eb:9f:eb:fe:bc:e7:97:
b7:54:ae:ff:be:09:6d:2a:4e:6c:37:ad:c0:17:b2:
23:bf:cd:49:e8:4e:f4:99:ed:20:43:87:0c:72:10:
1c:ba:7a:21:18:af:ad:eb:5c:72:19:d6:fc:d5:62:
41:a0:4d:98:08:a2:be:ae:27:9c:b1:f7:9f:3e:6f:
c2:6f:e8:0d:ea:0c:88:55:cb:15:e9:7d:09:bd:d3:
8a:57:0e:fb:c1:65:36:c8:d5:a2:6f:fb:21:11:73:
7d:d4:66:c9:af:23:21:4f:0d:85:b3:ee:f7:f5:b2:
2a:65:db:d2:34:f6:f6:9e:0a:8c:8a:d3:46:e4:d5:
d1:bc:1d:81:3a:c7:32:c3:87:c5:70:bb:46:86:76:
79:17:6c:05:87:76:15:f8:a6:e1:00:c4:c9:21:b2:
a1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:04:98:9C:74:6A:5C:2C:C9:42:A5:C0:62:5E:EC:0B:0C:A0:9B:6A
X509v3 Authority Key Identifier:
keyid:EB:FB:D4:CB:9B:58:AC:08:2D:3F:38:29:87:A5:97:A5:8C:96:BA:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_vUy5tYrAgtPzgph6WXpYyWupE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/F042F19A911311EF9A1A7F54C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:bfe0::/32
Signature Algorithm: sha256WithRSAEncryption
76:dd:e3:52:72:b3:5f:4a:1f:fa:35:29:ca:d7:2b:65:23:90:
d7:47:ef:dd:05:01:33:c5:9c:c5:5e:b9:66:1a:e7:7e:17:89:
25:1c:5a:08:6f:36:48:03:ff:1c:26:92:8c:7a:bc:a3:cb:d5:
da:b3:89:91:fa:f3:ba:05:7e:32:68:97:f5:ec:4b:92:0a:a3:
b8:8a:a5:7b:dc:38:13:60:ea:21:e1:4e:81:6f:45:6f:88:46:
63:c5:44:48:f8:ce:a9:1e:18:69:fd:76:78:aa:94:0d:f6:14:
1c:01:ba:b4:3a:2a:ba:84:06:b3:65:a1:27:d1:48:62:46:0f:
41:3c:18:56:51:bf:9e:49:ca:df:47:ef:46:5d:47:47:bf:d5:
40:51:9e:37:6f:c7:b5:90:a4:de:71:e7:0a:f3:8f:86:2e:35:
2a:3f:1f:64:c3:a7:a2:ab:fd:f5:1e:67:0c:72:56:24:58:de:
de:32:54:cd:a5:95:d1:d9:f4:d7:1d:76:82:01:d0:22:2c:79:
b6:92:0e:ea:60:8c:46:89:59:de:8f:3a:a8:65:00:89:70:98:
c3:80:5e:c8:1a:f4:85:ec:94:32:c8:39:81:2c:b6:14:e0:06:
fe:af:b8:f4:0b:7e:1d:f5:35:9d:ae:b4:9b:14:93:cb:d8:3a:
ce:f0:f8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:05 2026 by rpki-client