
$ rpki-client -vvf rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/87C9E3FE3F6D11F0951BB23CC4F9AE02.roa
File: 87C9E3FE3F6D11F0951BB23CC4F9AE02.roa (raw, json)
Hash identifier: Ro1WYvBGHNUPbIY7IvUqpCvewp4A9RwhtkxBRjwWeZc=
Subject key identifier: 32:F9:FE:58:A3:56:38:F1:53:20:36:DB:A7:EC:11:19:1C:0F:0C:00
Certificate issuer: /CN=A91104D1/serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52
Certificate serial: 115E
Authority key identifier: 18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/87C9E3FE3F6D11F0951BB23CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:20:55 +0000
ROA not before: Sat 20 Dec 2025 17:15:21 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 775
IP address blocks: 2001:fd8:29f8::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl
rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4446 (0x115e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91104D1, serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52
Validity
Not Before: Dec 20 17:15:21 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a47577-fcf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:31:4d:cd:ae:7d:13:6f:8a:32:5c:7b:ed:91:
1c:ab:53:37:bd:da:72:66:7a:8b:96:d1:3f:0e:5e:
f3:be:5a:f4:35:4b:4c:5b:7e:3f:1f:13:87:c9:1f:
4f:30:0f:11:30:59:d6:34:4c:f1:c6:28:3d:ae:88:
83:ff:90:ad:68:1b:8d:5d:9f:8a:a7:53:49:07:4c:
9d:7e:eb:4a:97:6c:f9:32:61:f3:ce:8f:f2:c3:4e:
1e:e1:37:85:e3:71:f8:26:e6:ee:46:bf:62:72:97:
9c:03:93:97:86:57:48:cd:ca:aa:cd:25:18:bd:27:
10:55:38:d0:72:15:d9:b8:a6:e7:ac:db:a0:0e:d8:
e6:d0:c8:62:db:09:08:56:3b:95:53:ed:04:0a:cd:
1b:11:eb:ad:91:d5:47:57:99:d1:c7:60:c9:33:55:
84:df:02:aa:0e:e7:de:a4:4f:a2:1a:28:fa:78:4a:
7e:c2:94:57:bf:b3:bd:09:61:ee:e1:95:bb:c0:dc:
57:c3:48:f5:88:42:25:43:6e:77:7f:b1:3f:b2:b8:
ab:da:0b:5a:ab:98:01:17:9c:c6:01:08:3e:ec:ff:
f6:de:c8:e5:ac:68:36:38:91:4f:cf:b3:18:0a:27:
13:af:ac:fa:84:89:c1:f8:7c:a4:82:d1:84:c8:fa:
47:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F9:FE:58:A3:56:38:F1:53:20:36:DB:A7:EC:11:19:1C:0F:0C:00
X509v3 Authority Key Identifier:
keyid:18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/87C9E3FE3F6D11F0951BB23CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:fd8:29f8::/46
Signature Algorithm: sha256WithRSAEncryption
bf:89:2f:ea:3e:02:a8:25:d9:a3:8e:54:4a:a0:2b:1f:24:5f:
48:3a:2a:e5:09:f5:4b:75:d0:0a:74:99:bc:58:39:e6:f4:64:
66:2b:5c:a6:04:dd:02:75:91:8a:4a:65:c4:43:18:39:21:70:
9c:cb:0c:17:08:f9:bc:d9:2c:bc:f6:36:d7:16:1f:cd:4b:39:
82:13:23:91:fe:18:fe:ba:13:dd:9a:18:71:a0:b5:93:eb:81:
69:4f:71:af:6d:1f:59:c0:e4:2b:ca:7e:2e:24:5a:1e:7d:f0:
12:c1:8c:70:6b:bd:bc:72:c9:5a:3e:e6:44:e1:95:a0:5d:ee:
61:aa:0e:61:35:b7:3c:36:ab:17:98:94:2e:58:e0:ef:59:25:
c3:c6:7a:67:3c:a1:49:48:ad:66:2e:d6:f5:2f:fa:52:6a:a0:
fb:9b:bc:2a:38:8a:90:49:ae:ab:e0:12:f0:e1:38:d3:44:c6:
0f:ff:29:08:ca:65:e0:c7:fe:36:eb:07:02:aa:79:f7:52:01:
fe:f3:88:ce:e6:04:6f:a5:a7:8c:c2:0d:24:ae:71:ca:c5:70:
ea:4a:e1:0a:5a:ab:38:b2:99:63:97:e8:a4:7a:ae:10:be:a7:
6b:28:5f:ae:6c:c0:da:56:dc:ab:b7:c6:f7:bc:ca:99:51:14:
d8:b2:8b:15
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICEV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA0RDExMTAvBgNVBAUTKDE4RUY0MzI3OEQ0NjMzMUU5QUFGMEZENzcyQTczMjgw
RDEzQUFBNTIwHhcNMjUxMjIwMTcxNTIxWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzU3Ny1mY2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApTFNza59E2+KMlx77ZEcq1M3vdpyZnqLltE/Dl7zvlr0NUtMW34/HxOHyR9P
MA8RMFnWNEzxxig9roiD/5CtaBuNXZ+Kp1NJB0ydfutKl2z5MmHzzo/yw04e4TeF
43H4JubuRr9icpecA5OXhldIzcqqzSUYvScQVTjQchXZuKbnrNugDtjm0Mhi2wkI
VjuVU+0ECs0bEeutkdVHV5nRx2DJM1WE3wKqDufepE+iGij6eEp+wpRXv7O9CWHu
4ZW7wNxXw0j1iEIlQ253f7E/srir2gtaq5gBF5zGAQg+7P/23sjlrGg2OJFPz7MY
CicTr6z6hInB+HykgtGEyPpHBQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFDL5/lij
VjjxUyA226fsERkcDwwAMB8GA1UdIwQYMBaAFBjvQyeNRjMemq8P13KnMoDROqpS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDREMS9FRjA5NThFRTQ0
NUUxMUU5OTI5MjREODdDNEY5QUUwMi9HTzlESjQxR014NmFyd19YY3FjeWdORTZx
bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dPOURKNDFHTXg2YXJ3X1hjcWN5Z05FNnFsSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTA0RDEvRUYwOTU4RUU0NDVFMTFFOTkyOTI0RDg3QzRGOUFFMDIvODdDOUUzRkUz
RjZEMTFGMDk1MUJCMjNDQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcCIAEP2Cn4MA0GCSqGSIb3DQEBCwUAA4IBAQC/iS/qPgKoJdmjjlRK
oCsfJF9IOirlCfVLddAKdJm8WDnm9GRmK1ymBN0CdZGKSmXEQxg5IXCcywwXCPm8
2Sy89jbXFh/NSzmCEyOR/hj+uhPdmhhxoLWT64FpT3GvbR9ZwOQryn4uJFoeffAS
wYxwa728cslaPuZE4ZWgXe5hqg5hNbc8NqsXmJQuWODvWSXDxnpnPKFJSK1mLtb1
L/pSaqD7m7wqOIqQSa6r4BLw4TjTRMYP/ykIymXgx/426wcCqnn3UgH+84jO5gRv
paeMwg0krnHKxXDqSuEKWqs4spljl+ikeq4QvqdrKF+ubMDaVtyrt8b3vMqZURTY
sosV
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:14:51 2026 by rpki-client