
$ rpki-client -vvf rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/9B3FE178A7FA11EFA7886875C4F9AE02.roa
File: 9B3FE178A7FA11EFA7886875C4F9AE02.roa (raw, json)
Hash identifier: 06SEws58XW7oR/B1kLrdM8cXYL1VQytnNDDhEyxqoyo=
Subject key identifier: D0:B1:88:D6:60:EA:88:77:02:C2:FF:8C:CF:4B:03:E8:4F:B7:AC:84
Certificate issuer: /CN=A91380F7/serialNumber=0391D9A70E893E751BC61289C54417B87A104559
Certificate serial: F4
Authority key identifier: 03:91:D9:A7:0E:89:3E:75:1B:C6:12:89:C5:44:17:B8:7A:10:45:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/9B3FE178A7FA11EFA7886875C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:12:13 +0000
ROA not before: Mon 19 Jan 2026 05:24:38 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 139469
IP address blocks: 2001:df4:a6c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl
rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:11:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244 (0xf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91380F7, serialNumber=0391D9A70E893E751BC61289C54417B87A104559
Validity
Not Before: Jan 19 05:24:38 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a41f0c-4430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:58:02:2a:54:bf:e7:58:b6:76:c7:7b:d2:e1:
1b:ab:7f:2d:a1:84:96:ef:2c:eb:77:b8:9e:a6:23:
2b:d4:e8:2c:6f:c2:c3:bc:ad:4b:7c:84:39:24:ea:
45:2e:5f:eb:1a:eb:2f:a9:91:22:10:53:d9:7d:49:
8a:1f:a1:5f:75:1a:c9:31:80:0b:5a:cd:28:1f:08:
68:88:83:07:58:d3:39:d3:b9:01:07:50:4d:c5:11:
6e:85:68:6e:f9:7e:e4:38:29:10:51:4a:1e:b4:45:
12:98:56:fd:ce:bb:45:8d:ab:79:bd:e8:6b:91:17:
60:04:55:70:9a:d1:14:50:0a:2a:ba:b5:38:c7:d0:
91:f6:a6:a1:ca:d7:ac:33:6d:bf:f4:3b:18:93:56:
7c:9b:1e:32:85:8c:b5:d5:2a:b4:0b:b5:10:0c:e5:
e9:06:ff:04:e9:d4:63:12:7f:24:8d:a9:42:44:36:
82:10:3a:01:38:7a:a7:bc:07:75:ca:88:be:c1:71:
f0:b9:cd:ed:68:a8:54:85:26:73:9a:1e:42:a6:14:
ad:04:13:bd:71:76:d1:69:6b:12:43:70:27:82:6b:
86:fe:f3:80:10:58:d5:a0:d9:56:51:31:43:31:53:
af:c7:46:70:df:f0:b5:2c:97:6e:a1:10:83:24:b2:
38:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B1:88:D6:60:EA:88:77:02:C2:FF:8C:CF:4B:03:E8:4F:B7:AC:84
X509v3 Authority Key Identifier:
keyid:03:91:D9:A7:0E:89:3E:75:1B:C6:12:89:C5:44:17:B8:7A:10:45:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/9B3FE178A7FA11EFA7886875C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:a6c0::/48
Signature Algorithm: sha256WithRSAEncryption
6a:52:94:00:0a:88:ac:5b:69:6e:76:7c:b8:17:dc:b4:f1:e1:
76:05:ad:fe:3c:65:8d:06:60:d5:0a:1e:05:06:5d:6f:db:e9:
32:fa:1d:4c:de:8f:18:43:5e:99:74:ba:fb:b6:56:eb:03:d1:
69:5e:88:41:d9:2a:9b:5a:8d:61:52:f1:81:04:f5:f4:9c:16:
7f:70:47:ef:01:5c:03:66:6a:04:49:51:c2:5f:0c:fb:b8:af:
d5:9e:d6:91:62:0b:53:f3:1c:d6:b9:e5:8b:96:1b:49:52:60:
7c:8b:78:79:e7:92:87:71:61:f2:90:64:e7:27:dc:6f:1a:23:
fe:38:34:be:db:7a:09:80:1b:65:81:90:8d:f8:01:82:5e:3b:
c6:fa:fa:06:7f:e0:01:af:81:a7:3d:42:94:3e:03:04:94:dc:
d9:c5:32:1d:6b:c0:a9:54:47:23:f0:96:b4:8a:ae:45:d6:ea:
24:53:14:ce:40:4b:1d:21:2a:3a:ee:76:a0:0f:d8:27:c9:db:
d6:ab:13:8c:cb:30:2a:1c:7f:41:22:72:f1:42:e8:39:7c:07:
56:d6:f9:06:da:5f:b1:1f:bb:78:a7:5e:19:30:84:7c:c5:35:
ed:0b:48:c7:03:a4:20:95:24:bb:e9:f7:56:df:8b:d7:c9:59:
a4:89:9a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:26:04 2026 by rpki-client