
$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/B9286BC4F33711EEAAA34C78C4F9AE02.roa
File: B9286BC4F33711EEAAA34C78C4F9AE02.roa (raw, json)
Hash identifier: UIF18yXEMKB6Xi+ID1n3xjpnZMc0AimyXBIjScTOYBA=
Subject key identifier: 4B:27:81:BD:5B:AC:63:F7:E6:C5:9F:FA:22:36:7A:F6:44:84:44:39
Certificate issuer: /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Certificate serial: 314E
Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/B9286BC4F33711EEAAA34C78C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:54:19 +0000
ROA not before: Wed 30 Apr 2025 15:52:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8220
IP address blocks: 2405:2000:1006::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12622 (0x314e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Validity
Not Before: Apr 30 15:52:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a47d4b-a84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3a:b8:ea:0b:0c:fa:30:2d:3a:0a:0b:4d:df:
8b:e3:07:04:ae:49:57:2b:09:c4:97:28:fb:3f:24:
29:8f:62:7c:75:4f:2b:92:46:c6:0c:e4:23:4e:86:
19:27:e6:51:f8:55:bc:d5:c5:dc:d9:37:6f:ad:dd:
f6:14:4c:df:05:5c:70:b1:8d:fc:26:14:e2:5b:ac:
7f:05:42:fe:ed:6a:69:cc:e4:4e:60:13:43:44:22:
e3:d6:2f:de:00:9c:fc:aa:5d:f5:f7:20:8a:e7:c6:
b3:76:de:df:c7:5b:0b:ed:c5:3f:fa:3f:41:c5:84:
50:50:eb:30:8e:0a:53:cb:82:46:1d:da:74:d5:a9:
b7:88:18:d6:a4:84:76:e8:c7:ed:c7:b6:1a:76:a8:
93:57:27:01:0d:14:d9:6a:c2:32:81:d9:41:f3:29:
05:50:eb:49:cc:c0:0f:7b:4a:1c:6a:95:95:6f:21:
96:dc:a1:fc:8c:2a:c4:6c:cb:6a:6e:b8:c9:63:7a:
8d:bb:14:94:7d:0a:78:07:18:30:43:68:91:8b:f9:
0b:7d:e8:9a:66:8d:73:6f:6e:5c:17:51:85:4a:9b:
53:3e:0d:c5:9b:4c:db:93:66:2d:50:90:a3:1a:59:
84:57:7e:87:31:90:f8:03:1f:01:ce:31:9b:59:4c:
bb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:27:81:BD:5B:AC:63:F7:E6:C5:9F:FA:22:36:7A:F6:44:84:44:39
X509v3 Authority Key Identifier:
keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/B9286BC4F33711EEAAA34C78C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:2000:1006::/48
Signature Algorithm: sha256WithRSAEncryption
9f:0e:70:e3:44:a6:76:b2:43:7a:c2:c8:75:a8:41:35:3a:12:
f1:56:3b:e5:ac:5b:d5:1f:90:23:49:d7:4e:fb:bc:36:c2:10:
f7:5f:c5:c2:cb:94:ff:0a:14:16:21:54:97:c0:f8:96:b6:9b:
b6:9e:c2:98:22:40:a0:6f:26:f8:07:11:33:bb:4f:9f:e4:af:
99:f4:3e:6e:31:26:f8:6b:6f:3c:ed:88:c3:c9:22:fd:b0:11:
88:aa:93:b6:ec:c4:0b:44:a0:af:af:4a:13:74:86:49:6b:dd:
26:be:e8:39:c6:95:48:ba:5c:95:35:48:00:bb:6a:96:b0:34:
f1:46:4a:65:b6:39:e5:af:c7:77:61:d8:c7:2b:af:f7:bf:d2:
a1:c2:ed:ae:88:42:d4:e8:2d:c1:fb:91:5a:9d:ba:28:79:9d:
d5:92:c1:d2:72:a1:ef:c1:95:9e:aa:c6:82:4d:4c:05:2d:b4:
27:a3:71:c7:64:80:41:6c:58:d6:f5:04:07:e6:1d:74:ca:42:
68:1e:32:f7:2c:8a:45:71:d0:0a:30:8b:2d:fd:16:e6:e0:56:
c8:71:45:37:46:5d:e4:8a:dc:5b:47:00:e0:1d:83:e0:2a:cb:
96:98:84:e6:57:c5:6e:70:2e:78:d0:3c:23:5d:50:b7:b9:bc:
ce:8d:e1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:33:17 2026 by rpki-client