
$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/5C4E5A6EB9E511EB9717B256C4F9AE02.roa
File: 5C4E5A6EB9E511EB9717B256C4F9AE02.roa (raw, json)
Hash identifier: wW2NNDoiiggQLts6yoRWeEta8EfkfmkpuQXd4IRvuj4=
Subject key identifier: 25:93:D3:75:EF:C5:A9:AB:35:62:C9:15:47:DF:E1:C7:9A:AF:C0:1B
Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial: 11E8
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/5C4E5A6EB9E511EB9717B256C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:16:53 +0000
ROA not before: Wed 20 Aug 2025 17:57:26 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 142281
IP address blocks: 2404:f4c0:f9c0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:32:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4584 (0x11e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Validity
Not Before: Aug 20 17:57:26 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a48294-7baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:58:1f:a1:da:43:04:45:15:b0:40:08:e5:32:
eb:e5:ac:6b:b0:20:ff:c1:39:6f:12:1a:b9:f1:c5:
eb:85:ee:5c:f6:5b:89:47:b3:bc:8b:d1:d8:00:78:
52:d1:a9:2c:be:b5:c4:bd:f9:f4:a6:fb:ed:c8:67:
16:dc:69:f9:92:29:96:0e:38:17:27:c4:36:86:33:
96:0c:6c:64:bb:b9:df:8e:b3:45:bc:0c:62:36:5d:
0f:1e:2e:d0:08:bc:49:2f:36:63:4b:41:7d:78:9d:
e0:7f:0d:76:d5:72:a6:3d:3b:13:b0:6f:46:83:b9:
f0:ee:5e:70:09:37:33:70:33:c3:9e:02:b1:29:05:
9d:51:da:e4:70:a3:73:5c:30:dc:2f:45:ad:63:65:
8b:30:37:cf:1c:64:ad:e6:d2:33:c1:a3:39:fc:b0:
1e:23:9d:a6:47:9c:bd:32:46:2e:2d:22:a0:6c:62:
16:28:f3:c1:0e:2c:97:50:9b:9b:b7:15:4e:45:f7:
31:67:c2:7e:86:fd:bd:bf:e0:3a:32:3e:e6:8d:ab:
89:dd:38:40:19:48:e5:4e:20:37:14:20:d9:5b:4f:
d5:5f:8c:d3:15:dd:d8:18:0a:f0:c1:40:a2:9f:a0:
27:1f:d9:7a:47:29:73:e4:65:68:ae:e7:84:a5:ab:
8d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:93:D3:75:EF:C5:A9:AB:35:62:C9:15:47:DF:E1:C7:9A:AF:C0:1B
X509v3 Authority Key Identifier:
keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/5C4E5A6EB9E511EB9717B256C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2404:f4c0:f9c0::/44
Signature Algorithm: sha256WithRSAEncryption
c6:0b:e2:7f:fc:c7:93:a8:5e:a0:5f:54:ad:17:a5:92:c0:2e:
f7:8a:c6:64:ba:a1:b3:c5:b7:83:b3:55:2a:80:14:ca:29:24:
a9:7f:f7:22:4a:19:6d:45:9d:b4:99:f9:fe:1f:67:00:1a:3c:
08:0a:b9:f2:10:4d:30:5b:12:36:26:0e:01:9d:b1:ce:8b:6b:
9c:62:bd:f1:10:92:fb:fd:37:16:68:21:2f:b8:36:70:58:e3:
05:ab:62:d0:7f:b0:8d:cf:b2:06:36:ee:d3:d3:c7:35:e8:74:
ff:f3:66:1b:3d:fa:86:e2:0f:16:28:f6:fa:75:29:49:da:72:
1c:94:fe:22:de:6e:75:36:89:ce:3d:9a:fc:53:05:b0:f5:d3:
4a:59:cb:3b:77:63:9e:91:25:e4:b4:55:d5:e8:06:e6:60:aa:
6a:60:e1:d8:c6:8a:64:f4:1e:b7:1f:28:ae:32:c1:70:b9:1a:
81:20:bd:6a:49:94:04:53:33:98:2c:ee:ef:72:39:0a:9f:46:
a8:91:3e:11:15:8a:71:52:6f:54:d5:5b:bc:d4:fb:89:9c:c6:
0e:1c:8f:b8:3e:4b:4d:51:e3:b8:6c:d1:78:bb:69:68:e4:cc:
41:71:a8:50:f2:0c:fb:bb:7f:b9:37:e6:b3:b7:5f:a2:5c:47:
bf:d7:9c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:49:59 2026 by rpki-client