
$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/D0E4A1946AB211F0976F001AC4F9AE02.roa
File: D0E4A1946AB211F0976F001AC4F9AE02.roa (raw, json)
Hash identifier: mZq4ESa3sYKUhMXlPEh614v/+7uhBeYVmsv4x4LdoBk=
Subject key identifier: E9:C6:98:42:AC:A9:B0:D1:40:06:48:DE:ED:EE:45:4E:BF:89:55:5B
Certificate issuer: /CN=A91685E9/serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA
Certificate serial: 86
Authority key identifier: F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/D0E4A1946AB211F0976F001AC4F9AE02.roa
Signing time: Sun 27 Jul 2025 06:27:49 +0000
ROA not before: Sun 27 Jul 2025 06:27:49 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 142419
IP address blocks: 2401:e920:fffd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl
rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:36:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91685E9, serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA
Validity
Not Before: Jul 27 06:27:49 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=6885c6e5-403a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2a:3c:1b:27:78:8c:8b:79:35:c8:79:bb:16:
ed:5d:fe:60:10:2b:66:2f:46:16:1c:d4:b4:54:50:
f5:0c:c4:30:fe:9e:63:ba:c3:d1:35:8b:38:7f:56:
74:3b:6b:87:25:56:64:9c:92:6c:e7:6f:fe:e0:e1:
57:94:1e:85:7f:1b:b0:33:f8:27:42:72:54:9e:c0:
8d:c3:b9:0e:35:bb:83:c7:dd:4b:8f:6c:9a:d6:04:
98:df:27:42:2f:1a:60:6f:66:72:10:e9:2a:1e:dd:
f2:1e:91:3f:7c:4b:d4:4a:bd:21:1e:3d:e5:ed:8e:
66:8f:bc:5f:c0:b5:d7:bb:50:d0:bb:a8:5c:08:38:
46:a9:25:5d:ec:d3:60:3b:06:3e:11:ac:31:e4:6a:
97:8e:01:17:56:8b:11:91:f1:36:8f:67:e0:88:f6:
bf:63:b4:56:bd:20:fc:92:63:26:bf:8e:48:11:99:
a6:6e:fd:94:aa:29:4b:d3:e6:a5:6a:d8:a8:b8:b5:
1c:c9:26:61:91:0e:8c:3e:0e:ac:ce:80:61:35:2e:
90:16:d1:0f:76:c7:58:f6:48:ba:5a:43:53:da:3e:
67:02:2b:8c:66:ca:4e:89:61:65:48:0a:5f:3c:d0:
b3:cc:40:24:c2:a2:b3:5d:dc:3a:c7:bc:6b:92:a8:
d9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C6:98:42:AC:A9:B0:D1:40:06:48:DE:ED:EE:45:4E:BF:89:55:5B
X509v3 Authority Key Identifier:
keyid:F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/D0E4A1946AB211F0976F001AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:e920:fffd::/48
Signature Algorithm: sha256WithRSAEncryption
82:18:e4:fc:30:b3:d7:10:8b:86:51:66:82:e7:6d:20:80:59:
cc:39:82:c8:4b:46:bd:32:62:9a:09:d9:99:4c:d7:6e:0e:7a:
af:8b:0b:93:55:f5:fb:80:52:3a:df:0e:3a:ff:2d:e3:45:ac:
f1:f8:5a:1c:ad:ef:3f:04:82:ff:87:9e:b1:19:16:d9:37:ca:
59:fc:3a:e0:c6:e9:d8:99:a2:f0:7b:b2:67:f3:36:1a:71:e2:
ab:c5:d1:cd:53:7a:a6:52:11:51:73:f1:7e:66:7e:61:92:4a:
36:68:f2:71:06:72:5f:0a:fa:cb:ec:fd:bf:75:8a:61:3a:ee:
b2:e4:5e:62:dc:c0:b2:68:22:dd:10:51:ae:1b:2f:d5:f8:11:
00:b0:b4:35:12:87:ba:16:8a:f4:1e:c1:b8:1b:75:46:48:53:
69:0a:c5:51:d4:8e:cf:ed:d0:8b:7c:bd:fa:75:f7:97:67:8a:
8e:8a:e4:43:34:c4:b4:91:25:86:c7:35:6f:57:ef:3b:31:4f:
f7:b7:0d:ea:37:ce:3f:7d:9e:c5:be:be:f1:43:53:46:31:d6:
20:9c:34:85:aa:ad:45:e2:a4:80:fc:17:ab:91:28:8c:46:51:
ec:1d:c5:a0:99:9c:25:5f:3f:f0:72:00:dd:09:91:a1:1a:53:
59:38:8d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:20:07 2025 by rpki-client