
$ rpki-client -vvf rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/BE608B1833DC11EF82BB2E27C4F9AE02.roa
File: BE608B1833DC11EF82BB2E27C4F9AE02.roa (raw, json)
Hash identifier: yGjZ2qr+BhGngGtcisuW8nAIXic6S3m8loWau7p/bRY=
Subject key identifier: 0B:AB:F5:3D:D9:3C:DB:1E:2B:24:F0:16:B6:32:5A:E6:6A:FA:AA:80
Certificate issuer: /CN=A91340D8/serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E
Certificate serial: 02D3
Authority key identifier: 1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/BE608B1833DC11EF82BB2E27C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:10:51 +0000
ROA not before: Sun 21 Sep 2025 02:20:08 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 36733
IP address blocks: 2001:df4:2a00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl
rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723 (0x2d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91340D8, serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E
Validity
Not Before: Sep 21 02:20:08 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4650b-f7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:37:81:5c:d5:61:94:8a:a9:b9:11:17:b0:0f:
95:71:ff:8b:27:3c:ef:5a:71:64:2d:41:ef:2d:e1:
0b:6d:14:65:69:11:33:92:df:e8:2f:6d:c2:44:29:
4c:56:b7:8c:51:99:ac:55:15:8b:13:da:f3:ac:56:
1e:0b:a8:9e:d0:5c:06:f9:5b:b8:88:5e:1e:3b:f2:
f0:18:62:ca:b8:50:1e:5a:fb:34:56:71:59:18:2c:
0b:11:57:08:75:36:04:24:1a:6c:12:f8:be:5d:01:
38:41:44:22:26:9c:0c:f2:ef:a9:39:d7:0c:0a:12:
5b:2b:c7:33:c6:01:63:37:ce:3f:ab:88:7f:e8:8f:
7e:d7:a9:6e:35:8f:86:c9:08:68:82:d8:74:81:44:
d2:65:5c:1a:2f:e2:1d:55:ab:78:c4:8a:07:d2:84:
6a:19:65:8e:7a:2d:df:d4:3f:ac:11:cd:43:09:db:
e3:71:cf:74:17:d9:65:fb:ac:32:8f:d2:75:79:c4:
7d:65:5b:0b:6d:de:ae:ef:3d:a8:bd:f9:de:67:dc:
7c:24:6c:3d:14:82:f2:b6:53:ac:4b:c0:bd:62:7a:
89:a2:5d:c4:14:5a:b1:d4:3f:be:fd:3a:2a:ab:59:
06:5e:d2:87:d4:a3:ac:5e:d4:fc:52:ab:e4:8f:4b:
24:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AB:F5:3D:D9:3C:DB:1E:2B:24:F0:16:B6:32:5A:E6:6A:FA:AA:80
X509v3 Authority Key Identifier:
keyid:1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/BE608B1833DC11EF82BB2E27C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:2a00::/48
Signature Algorithm: sha256WithRSAEncryption
99:32:8e:60:d8:f0:3a:46:9c:9f:fe:34:5d:b9:98:14:0c:4f:
e7:8d:8b:d4:b5:5f:7e:86:4e:26:bb:47:0e:8f:e7:51:76:92:
03:82:5c:c5:c1:72:49:f2:f6:aa:d0:bc:51:fe:ef:bf:8c:6c:
d0:13:ac:13:e6:c1:a5:27:8b:9b:b1:8f:36:2d:11:6a:b8:85:
2f:8a:eb:d5:14:15:ce:ae:2b:66:ef:7d:1b:73:a4:d8:90:93:
20:e1:50:64:2d:f3:11:23:89:18:64:8d:4b:4f:c7:12:a4:ab:
62:b7:fe:e4:fc:60:7a:4d:ac:37:1a:fc:f2:63:14:37:2e:4b:
d8:f1:6e:49:68:25:69:0e:de:70:20:92:83:b0:87:4f:71:c1:
79:78:6e:2d:30:f6:c5:a1:12:d7:af:7a:73:18:70:dc:97:91:
b9:ae:9a:d7:93:5c:01:b4:21:b5:fb:16:84:fc:89:a4:84:e1:
d8:b3:95:44:01:1c:5c:83:35:b5:7f:61:20:b1:88:d5:77:3f:
1c:54:ed:42:38:da:a8:18:58:44:be:3f:d1:cf:84:95:26:9d:
92:4d:ea:fd:7d:fb:09:45:2a:94:09:b4:8b:20:3b:23:fe:d7:
80:90:df:d7:16:02:d9:1e:23:75:a1:84:d4:6d:1b:b6:6a:5a:
1f:6e:1e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:12:01 2026 by rpki-client