
$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/5B58485AB9DC11EEA6B2DC1DC4F9AE02.roa
File: 5B58485AB9DC11EEA6B2DC1DC4F9AE02.roa (raw, json)
Hash identifier: de2C8Xu2sn4wIkObgdX6KvmUkB+P2+zRTh51LUtEnFY=
Subject key identifier: 0B:81:FB:1A:4B:21:7D:97:C2:6B:1E:3E:B0:5B:8A:F4:1E:8F:05:45
Certificate issuer: /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Certificate serial: 3142
Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/5B58485AB9DC11EEA6B2DC1DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:54:09 +0000
ROA not before: Wed 30 Apr 2025 15:52:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10103
IP address blocks: 2405:2000:1002::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12610 (0x3142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Validity
Not Before: Apr 30 15:52:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a47d41-b8e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fc:b2:70:ee:b2:0c:dc:3b:9a:da:d5:7f:c8:
fc:50:a1:74:d5:f3:2c:0b:98:c8:30:2d:e0:e6:b2:
09:3c:12:07:e8:26:7e:76:32:e0:eb:6e:62:3b:8f:
f2:66:73:b0:ea:bf:06:56:37:56:02:c0:ba:eb:66:
5d:d4:a1:86:af:e9:c6:5e:97:02:8e:83:e7:be:1d:
8f:0c:f5:af:56:c9:84:26:ae:96:81:9c:66:0f:55:
35:d3:b8:bb:fd:46:90:44:21:85:b7:fa:af:75:7e:
12:0c:24:e1:16:f8:61:7f:aa:bf:2f:d1:27:12:f5:
d4:d3:0d:46:c6:b1:78:b2:b2:3b:b4:3b:20:e0:6e:
e6:8b:42:16:25:a0:5d:b7:15:57:55:96:51:b6:2e:
23:e1:7c:55:25:62:a1:67:6d:09:df:53:47:e6:7a:
ee:12:45:af:30:ee:c5:28:20:36:c0:c5:67:08:85:
b2:37:44:c0:15:c5:aa:bf:4e:79:79:07:90:f5:b6:
7f:b8:98:09:49:15:45:3f:11:5d:1b:5d:5b:6e:75:
a1:99:5f:1a:30:ba:53:85:fb:1d:14:e9:66:da:84:
30:06:df:3f:d6:2a:bb:d4:77:7b:33:d2:01:17:22:
7f:c7:81:a4:47:d5:a0:be:7f:07:ce:9c:77:4c:b6:
82:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:81:FB:1A:4B:21:7D:97:C2:6B:1E:3E:B0:5B:8A:F4:1E:8F:05:45
X509v3 Authority Key Identifier:
keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/5B58485AB9DC11EEA6B2DC1DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:2000:1002::/48
Signature Algorithm: sha256WithRSAEncryption
80:44:fe:34:ff:5e:e9:4c:fb:8d:b9:70:5b:aa:46:c9:b3:12:
6b:76:01:e8:39:71:3e:aa:ae:21:d4:53:12:8f:54:45:ac:48:
57:9f:f5:9d:08:a7:32:3b:85:c7:18:0f:8b:3b:5d:90:23:68:
99:10:01:5d:fa:18:91:f1:e8:47:9e:34:8f:dc:b2:36:35:63:
20:96:82:0b:6c:c2:1f:f0:68:84:26:2d:8d:4e:75:48:9b:09:
48:76:d2:db:3d:62:35:9d:50:a6:bb:fe:87:a3:af:27:74:0c:
fc:f5:8e:82:cc:f4:6b:a4:9e:4d:86:90:99:b4:03:df:3b:bb:
bf:9d:3f:47:14:ef:86:d3:6c:f6:be:7e:10:60:de:76:bc:e2:
21:6e:b4:49:02:4d:f4:49:e0:16:50:18:e9:ba:1d:ed:3d:62:
bf:bc:5b:bc:24:d0:3e:b8:a2:77:59:8d:14:0a:e0:62:09:6e:
23:7a:ca:8a:9e:0c:bc:97:a9:f0:46:fb:f3:3c:53:c3:e4:55:
17:ee:9f:e1:68:6d:b1:9e:48:e7:44:42:2a:22:59:1c:f7:f5:
9f:6f:81:13:7e:d1:55:4b:69:14:24:45:6a:26:d8:13:f0:dd:
27:21:fd:9b:bf:71:a1:a7:a4:be:04:3a:70:8f:9b:b4:36:a2:
a5:f7:18:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:32 2026 by rpki-client