
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/B91F8BF69EE211EF883C7D14C4F9AE02.roa
File: B91F8BF69EE211EF883C7D14C4F9AE02.roa (raw, json)
Hash identifier: hB5s2qufIKcxmxxLJrzVcvfXL+kLtVIyT9Qn22t9aq0=
Subject key identifier: 37:E7:FA:90:96:54:97:1A:4E:0C:C0:61:1A:4E:D4:BD:66:5D:7A:2E
Certificate issuer: /CN=A9190818/serialNumber=548430EAB88E4E378FB5005AFAE5CAB9C0007A1A
Certificate serial: 012E
Authority key identifier: 54:84:30:EA:B8:8E:4E:37:8F:B5:00:5A:FA:E5:CA:B9:C0:00:7A:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/B91F8BF69EE211EF883C7D14C4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:25:47 +0000
ROA not before: Thu 20 Nov 2025 10:30:16 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 153371
IP address blocks: 2401:ce20::/48 maxlen: 48
2401:ce20:1::/48 maxlen: 48
2401:ce20:2::/48 maxlen: 48
2401:ce20:3::/48 maxlen: 48
2401:ce20:4::/48 maxlen: 48
2401:ce20:5::/48 maxlen: 48
2401:ce20:6::/48 maxlen: 48
2401:ce20:7::/48 maxlen: 48
2401:ce20:8::/48 maxlen: 48
2401:ce20:9::/48 maxlen: 48
2401:ce20:10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.crl
rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:57:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302 (0x12e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190818, serialNumber=548430EAB88E4E378FB5005AFAE5CAB9C0007A1A
Validity
Not Before: Nov 20 10:30:16 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a581cb-0377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:53:ab:b4:4e:9f:51:93:90:61:d2:9b:22:58:
9d:3c:71:53:68:5c:3a:23:63:1c:ff:cc:f0:f6:db:
97:ec:6b:da:cb:16:35:65:ce:f6:9c:74:52:44:f2:
62:a7:af:ea:04:da:16:75:e0:01:d9:48:62:35:74:
53:aa:7e:f0:ea:86:ac:cb:39:23:27:ac:d7:dd:bf:
36:08:20:d3:e8:ba:ab:29:04:68:6f:af:30:ac:44:
b8:cf:59:db:a3:f8:92:05:7a:1e:87:68:be:8b:db:
2b:2a:5d:37:98:96:aa:c2:42:bf:22:bf:70:5d:d7:
a4:22:d4:7b:22:36:19:09:ee:b5:a5:01:b6:82:2c:
36:24:1b:d5:61:3c:3f:be:e3:d7:07:13:72:b6:5a:
28:97:0d:63:99:8a:74:3b:46:d9:db:7d:a3:5f:13:
c9:8c:9c:ce:97:a1:64:ef:ab:60:90:f3:5e:e2:7a:
25:d9:05:0e:40:17:ce:ee:fb:32:6e:59:d1:17:4a:
8f:89:9f:19:68:31:0d:77:af:f3:24:75:cf:3a:a4:
0a:81:fb:f2:42:c0:4f:3a:59:63:2d:47:8e:6d:9d:
5c:de:3c:7b:ae:5f:06:94:ed:43:ee:23:da:ea:f7:
7d:88:13:bf:ac:4b:6e:de:4a:97:0a:8e:50:be:ee:
16:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E7:FA:90:96:54:97:1A:4E:0C:C0:61:1A:4E:D4:BD:66:5D:7A:2E
X509v3 Authority Key Identifier:
keyid:54:84:30:EA:B8:8E:4E:37:8F:B5:00:5A:FA:E5:CA:B9:C0:00:7A:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/B91F8BF69EE211EF883C7D14C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:ce20::-2401:ce20:9:ffff:ffff:ffff:ffff:ffff
2401:ce20:10::/44
Signature Algorithm: sha256WithRSAEncryption
2c:1e:a8:53:a9:83:a9:0a:a6:06:46:09:d1:c3:db:a4:83:b9:
f7:62:da:22:0a:c3:fd:b2:4e:81:46:3f:8a:36:ac:61:a8:9b:
ef:41:c9:7f:e9:cd:29:8f:c9:61:73:ca:2c:43:17:01:0f:46:
ed:ea:47:6a:90:f3:28:a1:37:35:60:e4:4f:2b:cd:3f:78:f2:
f3:3a:e1:08:66:e1:95:8e:5a:c9:5e:96:ab:31:8f:88:cc:cf:
51:a2:ed:f9:e4:60:3e:c9:f5:6f:82:2a:39:1c:4a:99:42:93:
b1:87:62:bc:c4:9c:92:cb:c4:ef:0f:28:64:35:70:f4:8d:90:
63:78:66:c5:c1:a9:56:3d:55:79:fa:d8:5b:5d:ef:92:18:27:
c2:92:39:25:6f:44:8b:26:20:9a:4e:62:43:5a:5a:5c:ae:d4:
03:ff:76:31:a4:85:67:d5:99:1d:c8:54:fa:ca:46:79:42:c8:
58:2b:7c:b9:f0:43:59:c0:9e:48:69:66:51:1d:2a:9d:83:85:
6e:9f:6e:24:a9:bf:04:d3:67:ae:9d:ab:97:99:5b:5c:d3:63:
59:33:a9:bb:0e:d5:5c:10:bb:bd:11:45:de:22:e8:2d:29:69:
e6:9e:7e:a2:75:aa:9c:7d:d3:a2:8b:51:d9:7b:0b:26:8d:48:
1f:c6:50:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:51:57 2026 by rpki-client