
$ rpki-client -vvf rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/2B2AA83249DA11F0ADC32972C4F9AE02.roa
File: 2B2AA83249DA11F0ADC32972C4F9AE02.roa (raw, json)
Hash identifier: cEUEz4swZGMGZahekLc6oG/X0ehuva4u6t5NQTHIMUo=
Subject key identifier: 1E:0E:7E:76:61:2F:7D:5E:93:D5:50:4C:44:75:F4:52:06:A2:F1:9B
Certificate issuer: /CN=A91458BD/serialNumber=78C4919ECF9959BF7134E35DD5E42CDEAB42D548
Certificate serial: 060D
Authority key identifier: 78:C4:91:9E:CF:99:59:BF:71:34:E3:5D:D5:E4:2C:DE:AB:42:D5:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eMSRns-ZWb9xNONd1eQs3qtC1Ug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/2B2AA83249DA11F0ADC32972C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:53:10 +0000
ROA not before: Sun 15 Jun 2025 11:16:22 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 136151
IP address blocks: 2001:df2:6080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.crl
rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eMSRns-ZWb9xNONd1eQs3qtC1Ug.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1549 (0x60d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91458BD, serialNumber=78C4919ECF9959BF7134E35DD5E42CDEAB42D548
Validity
Not Before: Jun 15 11:16:22 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=69a40c86-106d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e7:df:f8:bb:19:00:83:30:1d:b8:6b:06:29:
12:d7:1a:1e:38:b5:0c:f1:85:94:70:61:ae:7f:a6:
3a:53:c0:57:14:f3:9f:88:d4:ff:5a:17:e9:60:4f:
61:93:4a:ae:a5:59:19:a3:2c:88:f0:67:23:79:24:
fb:64:06:1f:e0:07:61:9b:20:9f:d0:44:00:b7:29:
6f:90:02:a1:df:7c:99:6f:e4:67:f3:56:b5:f3:06:
42:d8:e6:26:b7:56:e6:92:d8:a5:b3:43:ea:b8:70:
41:19:e4:05:3e:2f:33:f4:7a:70:a0:5e:24:8f:03:
58:10:e6:95:77:cd:db:75:fe:83:03:be:1e:5f:70:
f9:3d:f5:62:57:ca:17:82:ea:5a:a6:88:a2:5a:75:
c0:f7:be:9a:9c:3e:3c:e8:2b:e3:aa:5d:e3:e3:25:
de:eb:17:1f:2a:ef:75:ad:e4:a6:50:7c:26:64:85:
91:29:83:3b:5c:0b:e4:fc:e3:8a:12:42:37:ba:e9:
55:65:a5:9e:0d:49:ec:a1:ed:b9:70:de:b1:2f:a9:
98:67:48:86:3d:09:33:ca:75:7c:0f:7c:8c:d8:18:
70:0c:41:8d:57:8d:58:88:a5:0d:e5:f9:18:81:8e:
4a:94:c4:dc:4e:22:da:15:13:06:8d:26:49:ae:fa:
ff:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0E:7E:76:61:2F:7D:5E:93:D5:50:4C:44:75:F4:52:06:A2:F1:9B
X509v3 Authority Key Identifier:
keyid:78:C4:91:9E:CF:99:59:BF:71:34:E3:5D:D5:E4:2C:DE:AB:42:D5:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eMSRns-ZWb9xNONd1eQs3qtC1Ug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/2B2AA83249DA11F0ADC32972C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df2:6080::/48
Signature Algorithm: sha256WithRSAEncryption
3a:1d:89:5f:96:69:33:4e:cf:bc:aa:3e:4c:7d:d9:e9:b5:31:
32:26:cb:ed:a1:cd:d2:00:df:08:d8:95:18:c2:1b:65:13:67:
13:e0:8b:49:ff:e5:38:77:5e:27:68:d1:44:a5:48:42:1d:7c:
d1:cd:49:6f:41:2e:08:2e:27:58:61:7b:87:9e:96:31:9c:b5:
06:3a:6f:0e:c9:a7:ed:11:ec:c8:e8:c1:a5:57:43:d7:26:ca:
72:de:c0:08:26:45:b0:49:25:f7:67:37:47:94:72:49:cd:d2:
ca:97:b4:8b:21:6e:bf:8a:ea:0f:0d:53:93:a2:55:aa:fd:87:
a7:2f:24:63:a7:08:24:eb:c4:29:6a:96:78:f2:5b:fa:b6:bd:
a7:82:51:d3:e7:44:16:cb:e6:18:8c:68:98:c4:ed:a4:87:d3:
88:c2:fd:b0:63:c7:94:94:a5:e2:77:0e:72:f7:20:51:c9:8e:
aa:63:be:c2:9b:e1:cf:41:64:a1:29:5f:61:9b:80:a2:15:20:
12:85:89:06:a1:19:b3:fa:37:4c:5c:60:74:eb:b4:b6:65:97:
12:3e:f6:d0:45:22:f4:22:73:45:af:ec:44:e3:db:ed:88:24:
42:4e:5a:1c:01:bf:32:73:64:1c:ca:1b:a3:b0:c9:0d:e8:11:
f7:ad:02:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:17 2026 by rpki-client