
$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/02BCE50286AF11EF9EFFD52FC4F9AE02.roa
File: 02BCE50286AF11EF9EFFD52FC4F9AE02.roa (raw, json)
Hash identifier: HA8Kw92LD3QGPRWQy9en3UrEthfqY+7JRHJQJs+dCaQ=
Subject key identifier: F8:EE:45:6C:10:FA:17:3B:1D:08:B2:9B:FE:EA:19:A7:33:FB:3F:12
Certificate issuer: /CN=A91698EC/serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79
Certificate serial: 0156
Authority key identifier: E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/02BCE50286AF11EF9EFFD52FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:06:20 +0000
ROA not before: Thu 05 Jun 2025 05:15:11 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 140065
IP address blocks: 2001:df3:dec0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl
rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:18:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342 (0x156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91698EC, serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79
Validity
Not Before: Jun 5 05:15:11 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a41dac-cefd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2c:d9:b9:bd:b2:a5:49:f1:38:72:62:50:82:
0a:c0:2c:08:f2:6f:4c:3d:1c:14:c8:68:c1:1e:ef:
55:13:3c:96:42:03:70:27:b0:8b:f0:27:48:68:27:
13:e9:55:64:fd:a7:c2:e1:80:40:e2:78:09:40:68:
e6:37:8e:fd:f0:3d:d5:dc:f4:8f:9c:8c:ec:80:84:
37:f1:9d:4c:9e:5c:a7:14:2b:8a:a5:2a:f1:6c:e7:
33:dd:47:5b:c3:11:fa:96:c7:1d:3c:46:36:e3:6b:
b5:8d:83:1c:83:21:24:f5:f4:a8:4f:cd:7c:df:ab:
c3:90:77:59:80:88:26:92:96:2f:fd:18:6c:31:43:
98:fa:6d:73:e9:c2:67:d0:e2:e8:c2:c2:52:89:fd:
77:30:97:e7:de:cb:7f:09:f9:4d:31:d2:ef:cc:88:
f2:57:b2:2e:7b:ad:3d:6e:4d:4c:60:ac:bd:69:b0:
1b:ed:55:00:bd:ac:6b:d3:dd:b2:b6:6b:1a:48:c3:
9e:1c:b6:7f:4e:61:f5:26:00:9f:ba:c6:a8:c7:cb:
28:62:a1:bf:a8:7a:28:bc:42:1c:f6:83:2f:23:b6:
08:e6:8f:6a:10:4e:3a:01:2b:42:ef:4d:53:7f:a8:
4e:06:56:d3:f6:fc:22:fb:77:19:fe:de:10:f4:a4:
5c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EE:45:6C:10:FA:17:3B:1D:08:B2:9B:FE:EA:19:A7:33:FB:3F:12
X509v3 Authority Key Identifier:
keyid:E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/02BCE50286AF11EF9EFFD52FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:dec0::/48
Signature Algorithm: sha256WithRSAEncryption
a6:90:ab:ee:b6:da:97:55:0b:17:90:17:e8:eb:b2:8a:1c:49:
6a:79:6a:e9:35:cf:f5:10:2d:4e:63:05:bf:98:a6:ee:e9:17:
76:2f:e6:2f:af:b2:dd:e0:fa:54:ad:76:49:5a:f5:25:1c:1e:
b1:12:32:92:14:30:46:d6:a0:05:60:25:18:c2:1e:57:0e:bd:
d4:f1:9f:26:c6:69:67:55:34:01:cf:2b:1b:d3:20:5d:39:0f:
c1:93:7d:9a:e5:8c:8e:51:ad:aa:2e:a5:28:f8:65:35:81:07:
1d:25:e3:b5:3e:d5:e9:b2:14:99:ef:8b:6f:c5:87:29:00:b2:
51:87:da:8e:92:5b:a0:f7:d3:ac:fe:56:8c:e0:25:71:14:c9:
01:4b:c7:91:76:33:ac:cd:0c:d8:e9:b2:99:1b:77:43:43:02:
52:0e:f8:ea:90:2d:f7:b5:f8:c0:8f:55:b3:14:93:15:56:ad:
a6:be:38:04:26:d7:4f:58:39:7a:df:09:a8:8f:e2:8f:0c:2a:
c3:ae:4b:55:c1:92:bb:3f:22:7c:7f:0e:63:eb:0b:dc:e4:f6:
21:1b:1d:2d:7a:85:82:b2:ea:53:1b:f9:0c:a0:df:8a:0f:7e:
e5:fb:cb:ae:c0:42:6c:98:1f:e3:ad:58:2e:78:2f:58:31:16:
89:40:12:ff
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njk4RUMxMTAvBgNVBAUTKEU1OEYwRjUyQTREMkQxREU0NDY3NUFDQTE3NTU3QkY5
ODJFQzdENzkwHhcNMjUwNjA1MDUxNTExWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MWRhYy1jZWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjizZub2ypUnxOHJiUIIKwCwI8m9MPRwUyGjBHu9VEzyWQgNwJ7CL8CdIaCcT
6VVk/afC4YBA4ngJQGjmN4798D3V3PSPnIzsgIQ38Z1MnlynFCuKpSrxbOcz3Udb
wxH6lscdPEY242u1jYMcgyEk9fSoT81836vDkHdZgIgmkpYv/RhsMUOY+m1z6cJn
0OLowsJSif13MJfn3st/CflNMdLvzIjyV7Iue609bk1MYKy9abAb7VUAvaxr092y
tmsaSMOeHLZ/TmH1JgCfusaox8soYqG/qHoovEIc9oMvI7YI5o9qEE46AStC701T
f6hOBlbT9vwi+3cZ/t4Q9KRcQQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFPjuRWwQ
+hc7HQiym/7qGacz+z8SMB8GA1UdIwQYMBaAFOWPD1Kk0tHeRGdayhdVe/mC7H15
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OThFQy8yMUU1QTMwQTFF
RTExMUVGOTNGOTg1M0RDNEY5QUUwMi81WThQVXFUUzBkNUVaMXJLRjFWNy1ZTHNm
WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVZOFBVcVRTMGQ1RVoxcktGMVY3LVlMc2ZYay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Njk4RUMvMjFFNUEzMEExRUUxMTFFRjkzRjk4NTNEQzRGOUFFMDIvMDJCQ0U1MDI4
NkFGMTFFRjlFRkZENTJGQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN897AMA0GCSqGSIb3DQEBCwUAA4IBAQCmkKvuttqXVQsXkBfo
67KKHElqeWrpNc/1EC1OYwW/mKbu6Rd2L+Yvr7Ld4PpUrXZJWvUlHB6xEjKSFDBG
1qAFYCUYwh5XDr3U8Z8mxmlnVTQBzysb0yBdOQ/Bk32a5YyOUa2qLqUo+GU1gQcd
JeO1PtXpshSZ74tvxYcpALJRh9qOklug99Os/laM4CVxFMkBS8eRdjOszQzY6bKZ
G3dDQwJSDvjqkC33tfjAj1WzFJMVVq2mvjgEJtdPWDl63wmoj+KPDCrDrktVwZK7
PyJ8fw5j6wvc5PYhGx0teoWCsupTG/kMoN+KD37l+8uuwEJsmB/jrVgueC9YMRaJ
QBL/
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:48:34 2026 by rpki-client