
$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/B969078EB94B11EB8CFABC23C4F9AE02.roa
File: B969078EB94B11EB8CFABC23C4F9AE02.roa (raw, json)
Hash identifier: KmEu0JXVBtwzMz7EetZKwa8KqrgE2kj5+Y9cCaXraFo=
Subject key identifier: 7B:26:EC:F0:E1:A3:1D:0C:0F:F8:C9:44:C8:5B:BC:3C:85:77:FC:CE
Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial: 11E9
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/B969078EB94B11EB8CFABC23C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:16:53 +0000
ROA not before: Wed 20 Aug 2025 17:57:27 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 142282
IP address blocks: 2404:f4c0:fa80::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:32:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4585 (0x11e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Validity
Not Before: Aug 20 17:57:27 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a48295-c1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c3:ad:9c:90:f8:54:f5:e6:12:a2:5d:4a:ce:
3c:dd:3c:63:20:d7:b3:0a:b7:72:eb:3b:dd:01:1c:
d5:8d:a6:dd:11:b6:98:ea:56:7f:7e:18:9b:b7:07:
de:08:7f:02:1f:7f:6a:27:ae:76:6d:c1:4c:a5:6b:
a6:cc:2f:40:98:33:73:e8:7c:0c:20:6e:77:fc:33:
d3:1c:8e:d9:66:7e:35:f7:33:6c:af:d3:c7:55:db:
06:fd:74:1c:f2:ed:f2:43:28:9d:4a:61:cf:a3:ad:
45:8e:43:a7:79:50:da:5d:09:ba:42:84:49:0b:d7:
f9:7e:07:4c:1a:24:a0:a9:1d:25:1b:d9:77:9c:f9:
21:15:58:6e:8f:5e:56:46:0d:72:63:6f:ac:8a:7e:
d0:fd:e2:96:4b:d6:14:f3:ea:aa:0c:18:d3:cc:45:
23:ac:86:83:20:c6:00:a3:43:a7:18:8e:96:d7:28:
06:8a:c9:b1:00:f5:fa:15:b9:15:97:db:8b:2d:d5:
db:e5:22:57:75:bd:d9:f5:f7:12:90:ab:b0:89:9a:
1c:73:62:39:f8:54:ef:aa:80:f6:cf:e4:1e:8c:90:
3d:2b:34:40:3a:d3:96:0c:05:fd:95:73:88:9e:7e:
3c:8f:07:e4:91:ae:5b:45:f2:fc:42:e7:7e:db:15:
a5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:26:EC:F0:E1:A3:1D:0C:0F:F8:C9:44:C8:5B:BC:3C:85:77:FC:CE
X509v3 Authority Key Identifier:
keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/B969078EB94B11EB8CFABC23C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2404:f4c0:fa80::/44
Signature Algorithm: sha256WithRSAEncryption
d5:e0:4e:de:65:21:6d:d0:f2:a3:bb:94:a5:7b:0d:6d:38:92:
67:5e:7c:b4:9e:b5:b1:53:33:d0:3b:04:68:77:51:57:3f:e6:
e0:22:af:e8:52:23:32:40:70:13:f1:7f:bc:4d:75:28:46:fd:
8c:e8:1c:bd:3f:ed:ff:de:73:ab:a9:d3:50:d1:3d:29:e0:34:
f1:c4:6f:71:df:89:7c:92:2d:88:01:9f:2f:b7:49:05:83:d0:
d4:1b:e6:d0:ea:36:8c:a1:a9:84:9f:d1:a8:64:eb:0d:4f:45:
4c:81:dd:0b:8e:6e:78:5c:12:e1:fa:bb:f6:7e:5f:4d:6e:5d:
c9:10:d9:75:09:43:59:61:40:db:0e:01:50:5b:70:eb:98:02:
ca:1f:fe:33:01:65:22:0d:11:92:b0:34:28:f4:10:a5:7c:85:
27:10:db:a9:97:46:c0:42:f1:69:5c:39:a1:7e:03:ea:8a:5d:
b6:2f:7a:4b:e4:97:20:5e:06:b9:1e:94:db:c6:7a:c0:38:cd:
90:31:ec:64:4b:7c:36:fa:21:a6:32:43:d7:77:8e:51:e7:fc:
78:25:35:fe:e8:5b:33:6b:02:f2:f4:39:96:33:61:59:b6:26:
7c:d8:a1:92:df:bb:bc:4c:2b:56:30:dc:d8:be:a4:4a:97:1d:
f4:4a:0d:1a
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICEekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5
RDNGRDdCNjAwHhcNMjUwODIwMTc1NzI3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODI5NS1jMWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmcOtnJD4VPXmEqJdSs483TxjINezCrdy6zvdARzVjabdEbaY6lZ/fhibtwfe
CH8CH39qJ652bcFMpWumzC9AmDNz6HwMIG53/DPTHI7ZZn419zNsr9PHVdsG/XQc
8u3yQyidSmHPo61FjkOneVDaXQm6QoRJC9f5fgdMGiSgqR0lG9l3nPkhFVhuj15W
Rg1yY2+sin7Q/eKWS9YU8+qqDBjTzEUjrIaDIMYAo0OnGI6W1ygGismxAPX6FbkV
l9uLLdXb5SJXdb3Z9fcSkKuwiZocc2I5+FTvqoD2z+QejJA9KzRAOtOWDAX9lXOI
nn48jwfkka5bRfL8Qud+2xWlJQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFHsm7PDh
ox0MD/jJRMhbvDyFd/zOMB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE
RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll
MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODAzREIvMERDMzVEM0U4REQ0MTFFOUJGRTJDNTU2QzRGOUFFMDIvQjk2OTA3OEVC
OTRCMTFFQjhDRkFCQzIzQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcEJAT0wPqAMA0GCSqGSIb3DQEBCwUAA4IBAQDV4E7eZSFt0PKju5Sl
ew1tOJJnXny0nrWxUzPQOwRod1FXP+bgIq/oUiMyQHAT8X+8TXUoRv2M6By9P+3/
3nOrqdNQ0T0p4DTxxG9x34l8ki2IAZ8vt0kFg9DUG+bQ6jaMoamEn9GoZOsNT0VM
gd0Ljm54XBLh+rv2fl9Nbl3JENl1CUNZYUDbDgFQW3DrmALKH/4zAWUiDRGSsDQo
9BClfIUnENupl0bAQvFpXDmhfgPqil22L3pL5JcgXga5HpTbxnrAOM2QMexkS3w2
+iGmMkPXd45R5/x4JTX+6FszawLy9DmWM2FZtiZ82KGS37u8TCtWMNzYvqRKlx30
Sg0a
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:27:01 2026 by rpki-client