
$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/AF2D50BE562B11F0A2095579C4F9AE02.roa
File: AF2D50BE562B11F0A2095579C4F9AE02.roa (raw, json)
Hash identifier: GKfJ2kB3yXKiTx70mXKirnJ5shWw+x/l7CpoEVzirXk=
Subject key identifier: 76:85:20:57:74:A1:95:7E:29:77:68:4C:82:7D:DC:F2:E4:75:E4:D9
Certificate issuer: /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Certificate serial: 026E
Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/AF2D50BE562B11F0A2095579C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:15:28 +0000
ROA not before: Fri 11 Jul 2025 04:09:36 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 151420
IP address blocks: 2401:3fa0:1::/48 maxlen: 48
2401:3fa0:fc00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl
rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:25:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 622 (0x26e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91187FD, serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Validity
Not Before: Jul 11 04:09:36 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a47430-1f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:1e:13:f8:9b:28:b7:a6:96:82:18:d4:eb:7e:
86:63:8a:c9:eb:05:bd:94:cf:33:fe:08:ee:99:f3:
20:0e:cf:7d:72:77:a9:c0:bc:33:9f:f8:70:b5:72:
de:23:6e:20:e8:28:c5:57:05:d4:a5:c0:4b:b0:12:
7d:97:a2:45:db:ce:b0:96:04:b3:9e:3d:88:95:ea:
f4:ee:8b:d1:89:77:d6:d3:d7:34:53:92:ae:6e:a8:
b0:38:c7:8d:69:07:74:fc:a4:b6:09:85:6c:4f:28:
e2:a5:44:49:d5:2e:32:73:3b:89:66:5f:14:1a:46:
e6:3a:8e:43:ea:30:6a:67:28:45:ac:53:56:f4:88:
50:59:34:f7:8d:7a:0a:68:c1:e7:bc:42:6f:a9:c4:
fb:6d:90:3e:87:6f:bf:6c:d9:1d:c1:b3:43:31:17:
17:20:25:57:fe:e6:fd:22:88:dc:65:44:89:c7:29:
ff:82:ff:1e:99:de:75:fa:d7:7c:2f:61:eb:5d:1d:
46:9d:2c:7c:35:01:c0:3e:18:b7:42:fb:98:db:b0:
ba:5f:2c:38:67:ee:c7:5d:a9:95:64:6c:ca:47:e3:
ed:46:84:2b:59:86:77:ca:aa:d1:f0:13:23:10:19:
1f:3b:b4:57:33:a2:a4:a0:e6:c0:38:6b:95:39:72:
ff:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:85:20:57:74:A1:95:7E:29:77:68:4C:82:7D:DC:F2:E4:75:E4:D9
X509v3 Authority Key Identifier:
keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/AF2D50BE562B11F0A2095579C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:3fa0:1::/48
2401:3fa0:fc00::/40
Signature Algorithm: sha256WithRSAEncryption
8c:78:dd:8b:06:2c:57:98:3a:1d:57:7f:a4:5f:18:40:51:8f:
50:23:db:92:5d:88:f5:8f:d7:d0:9d:7b:52:da:4b:c3:a1:63:
f1:ec:f5:82:50:df:02:80:c1:56:ac:c2:b9:26:ae:af:4c:ea:
c5:f5:70:3c:e0:dc:b9:8a:3a:27:b1:c2:48:7d:34:f0:2f:7c:
20:39:4b:ce:8e:6d:7e:72:4e:fa:d1:2b:45:e0:72:6a:6b:da:
7e:37:a0:2d:03:75:0a:55:87:d2:ab:d8:4b:ae:09:93:6f:4d:
df:c4:40:84:92:0c:ee:6d:ea:62:ac:ed:2a:cc:57:58:6f:ed:
21:27:63:ec:e7:d3:26:db:90:c4:39:d8:fe:6b:1c:bb:1e:c7:
c1:c8:eb:08:33:09:61:8b:19:96:a1:5d:35:d5:b2:f7:3a:41:
59:2a:94:99:38:c1:4c:85:ed:24:e3:6c:a8:b0:0d:47:61:d3:
81:74:ee:53:5b:e7:57:b2:e0:c8:62:7f:8d:a3:23:07:7a:fe:
9a:ae:f1:db:7f:47:0c:d2:c4:1b:83:c9:67:f2:f4:10:77:96:
a5:da:1d:3f:85:36:c1:5c:e8:4e:69:d2:c7:d9:71:a8:86:a9:
8a:a1:63:48:26:8c:78:15:55:5e:48:d8:84:db:24:70:07:44:
e3:11:fe:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:13:20 2026 by rpki-client