
$ rpki-client -vvf rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/9DB343D0DA5A11F08EBD209195D3641D.roa
File: 9DB343D0DA5A11F08EBD209195D3641D.roa (raw, json)
Hash identifier: K4XiYN7uH6PXH+TWqEnfNdtc33D2of2HPVK6LyFx184=
Subject key identifier: 95:BC:F9:2B:6C:B2:B8:6F:57:E3:61:E8:AF:50:FC:23:3F:1D:FB:FF
Certificate issuer: /CN=A91519CC/serialNumber=49649E94F6CA3DBDC1FFCE99FF1BBCAB8CD0AA5C
Certificate serial: 2B
Authority key identifier: 49:64:9E:94:F6:CA:3D:BD:C1:FF:CE:99:FF:1B:BC:AB:8C:D0:AA:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SWSelPbKPb3B_86Z_xu8q4zQqlw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/9DB343D0DA5A11F08EBD209195D3641D.roa
Signing time: Sun 01 Mar 2026 05:53:02 +0000
ROA not before: Tue 16 Dec 2025 08:38:38 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 154434
IP address blocks: 2001:df6:7340::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/SWSelPbKPb3B_86Z_xu8q4zQqlw.crl
rsync://rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/SWSelPbKPb3B_86Z_xu8q4zQqlw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SWSelPbKPb3B_86Z_xu8q4zQqlw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91519CC, serialNumber=49649E94F6CA3DBDC1FFCE99FF1BBCAB8CD0AA5C
Validity
Not Before: Dec 16 08:38:38 2025 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a3d43e-e2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a7:8e:85:d7:3e:52:d2:10:2c:50:f2:ae:a4:
83:de:c3:15:6f:f3:9f:b2:b4:15:52:0a:fa:06:53:
c5:17:51:e7:52:9f:dc:8b:22:db:8c:82:0f:c9:d9:
14:fb:5d:81:c5:7a:61:a3:39:bc:07:30:b0:01:ea:
55:30:ee:14:5b:a3:15:77:c6:6d:1f:6d:1d:5b:73:
62:53:06:36:2b:2f:f5:33:e0:2f:1b:4b:40:7f:31:
62:42:6c:97:dd:78:88:6a:3a:cf:cd:61:23:09:03:
28:3e:a6:24:64:ac:cb:0d:20:31:4d:f8:a9:19:95:
bd:93:97:dc:23:70:01:24:a4:4b:8d:df:6d:9c:a7:
2d:76:32:5e:5e:f3:f6:66:eb:a3:69:ab:ea:66:4c:
a2:ac:aa:1a:84:f4:d5:c8:8c:9b:0d:4f:71:8d:77:
dd:c1:bd:4c:2f:36:e1:c3:a9:4c:9c:5c:71:e2:7d:
43:51:b4:51:0b:e6:43:21:0c:dd:84:87:bd:58:b0:
11:0b:f9:86:30:a8:7e:9f:00:5c:6d:9d:ce:45:2e:
65:f8:24:03:49:15:29:58:18:03:c2:f0:b1:da:c1:
21:1c:5f:54:f3:e5:00:b5:e0:c2:51:12:11:ae:22:
51:4a:3b:a2:e4:43:68:30:28:ac:4c:90:c9:5e:46:
b6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BC:F9:2B:6C:B2:B8:6F:57:E3:61:E8:AF:50:FC:23:3F:1D:FB:FF
X509v3 Authority Key Identifier:
keyid:49:64:9E:94:F6:CA:3D:BD:C1:FF:CE:99:FF:1B:BC:AB:8C:D0:AA:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/SWSelPbKPb3B_86Z_xu8q4zQqlw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SWSelPbKPb3B_86Z_xu8q4zQqlw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/9DB343D0DA5A11F08EBD209195D3641D.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:7340::/48
Signature Algorithm: sha256WithRSAEncryption
b7:66:c2:95:0a:f1:95:75:7c:29:fb:8a:fa:7f:1c:9d:1c:7c:
7a:14:72:bc:15:2e:cb:a9:ec:d5:27:af:1f:ee:63:05:80:ac:
f0:22:91:af:33:23:96:d1:f4:f1:8d:8e:98:58:6a:49:d9:17:
f3:ce:53:9b:d9:09:2e:e1:32:af:99:03:9e:59:c2:a5:e7:b2:
d8:da:15:36:b3:82:d2:2b:9f:cd:06:05:4f:50:d9:3c:87:a1:
38:da:0a:f8:c0:2b:cd:f4:23:0b:7c:3d:1a:0e:33:8a:f0:13:
53:72:e8:64:f1:ca:95:28:61:95:9d:a7:9c:d3:32:49:9b:6b:
51:22:99:e0:e4:5e:ab:8f:1c:d1:43:ae:6a:42:85:95:85:77:
a8:88:75:38:d6:ba:ce:3c:08:18:14:50:19:e3:90:72:b9:a8:
f8:d4:8b:a0:24:24:0d:b6:21:f3:e9:2d:87:f7:07:37:79:bc:
76:e3:fa:22:91:f8:ea:01:ca:e2:0e:f7:c5:51:b3:a8:e3:b5:
70:76:17:3a:20:59:39:ac:bc:f4:8b:2a:ae:df:9c:7b:3f:b4:
fc:d1:82:b0:74:2e:66:4a:4c:a7:62:6f:e7:9f:4c:0d:c8:9d:
f5:80:38:2d:73:c9:ec:92:ed:21:99:75:69:f9:e7:75:17:51:
8b:8b:30:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:11 2026 by rpki-client