
$ rpki-client -vvf rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/31E9AEC6E30411EFBC0C3B2CC4F9AE02.roa
File: 31E9AEC6E30411EFBC0C3B2CC4F9AE02.roa (raw, json)
Hash identifier: uV8rFDqMxRMdCRvkDEsV2MUMii9vsIlS/hRAm+P4Yu8=
Subject key identifier: 0F:2E:A6:CF:5A:44:4D:3D:A6:95:E8:EC:AA:E4:28:19:CD:7F:C2:B4
Certificate issuer: /CN=A91706E4/serialNumber=6F7E58D0896389F7E7FE4E8795AA555D5C555188
Certificate serial: F6
Authority key identifier: 6F:7E:58:D0:89:63:89:F7:E7:FE:4E:87:95:AA:55:5D:5C:55:51:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/31E9AEC6E30411EFBC0C3B2CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:12:03 +0000
ROA not before: Thu 01 Jan 2026 05:24:37 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 141212
IP address blocks: 2001:df4:9fc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.crl
rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:49:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246 (0xf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91706E4, serialNumber=6F7E58D0896389F7E7FE4E8795AA555D5C555188
Validity
Not Before: Jan 1 05:24:37 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a41f03-75aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:28:e5:1b:ad:d6:bc:53:7a:1a:7a:1a:3e:a2:
7b:3a:f5:c9:13:c1:dd:a4:33:02:77:fa:c0:1e:fe:
de:b5:e0:c6:d8:29:24:c7:5d:75:3d:93:5e:65:76:
f9:cb:e8:00:db:c9:b3:54:8e:bd:e1:9d:79:d3:fb:
49:2f:9b:2b:7e:cb:28:2b:1a:c9:46:bb:d2:0e:f8:
49:a4:1e:24:39:ee:4d:92:08:4f:68:ae:97:de:02:
8e:03:c4:1f:75:d6:5d:b4:8f:9c:06:bf:2c:d4:49:
70:a7:ae:cb:fa:6f:e2:3d:e2:47:5b:9c:14:78:b7:
b8:d8:fe:b7:85:18:cc:6b:a3:58:26:07:46:b2:7d:
ca:ba:10:c9:f9:49:2d:ae:f9:9d:2e:d1:cc:62:97:
b3:77:31:ec:f9:c4:2a:03:7a:24:cd:0e:c2:30:4f:
df:ff:05:da:6f:36:bc:89:3d:7f:22:77:7b:87:6a:
da:d9:7e:cb:a0:f3:f8:4a:b5:d3:dc:04:24:26:8b:
d2:dc:82:19:d3:ed:52:4b:e4:3d:24:7f:e1:73:94:
6a:5f:a2:75:38:94:b2:85:2c:00:25:e7:61:55:63:
16:bb:fb:48:8a:35:00:8a:70:43:55:9c:20:7a:1c:
d3:f3:4c:1e:41:45:ac:68:5a:61:e4:7e:53:f9:51:
8a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2E:A6:CF:5A:44:4D:3D:A6:95:E8:EC:AA:E4:28:19:CD:7F:C2:B4
X509v3 Authority Key Identifier:
keyid:6F:7E:58:D0:89:63:89:F7:E7:FE:4E:87:95:AA:55:5D:5C:55:51:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/31E9AEC6E30411EFBC0C3B2CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:9fc0::/48
Signature Algorithm: sha256WithRSAEncryption
83:74:0e:e7:d8:eb:f5:75:f2:72:dc:2b:35:64:22:df:7a:93:
a8:01:c9:6c:37:a4:fb:c6:ed:e3:54:b9:25:24:93:75:4c:a4:
8b:14:7d:71:af:c4:4d:1b:05:84:d4:e3:67:24:84:b4:41:2b:
5e:f9:d7:4a:04:09:54:08:73:cd:f4:b9:c0:22:6b:70:9c:98:
07:f6:7a:d9:a7:17:c1:be:46:59:85:ce:fe:f1:44:d3:3b:d7:
42:a6:2c:62:c7:54:3c:23:53:61:6e:f6:57:9c:c9:80:ba:a1:
53:41:29:ae:94:fe:89:02:71:49:c1:73:0c:c0:c1:c5:af:e8:
aa:28:7f:53:23:6b:e5:29:c9:62:6d:2b:9f:59:bd:c6:47:47:
0e:8d:ef:78:e2:06:20:5c:db:a0:f0:ba:8a:5d:de:da:bd:bc:
49:14:e9:0d:3c:02:b7:b4:0b:7a:ec:0f:2a:ba:03:03:da:6c:
f1:92:ef:97:18:2f:1b:fe:2d:36:e8:79:9c:ff:bb:d8:86:8a:
e2:41:63:a7:74:03:b1:78:06:85:d3:cf:28:e6:5c:73:95:b2:
4f:e5:95:55:94:fd:70:fa:32:45:5d:59:c0:2b:7f:1f:15:8a:
a3:14:c3:68:df:e0:19:b2:fa:4e:77:01:b1:e5:ee:d4:93:f8:
bf:1a:92:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:11 2026 by rpki-client