
$ rpki-client -vvf rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/2837843AA3E811EAB397F675C4F9AE02.roa
File: 2837843AA3E811EAB397F675C4F9AE02.roa (raw, json)
Hash identifier: mX70QQ2yE9wPh1hnIXZOciGYYAe5yUlr20YktwOYe68=
Subject key identifier: BD:88:C4:33:47:11:DA:64:F6:B2:30:84:F5:F2:1D:0E:C7:3A:79:93
Certificate issuer: /CN=A91972B6/serialNumber=95EAAFC24B5AF4B172B58BB01A701CFE196DA199
Certificate serial: 11AA
Authority key identifier: 95:EA:AF:C2:4B:5A:F4:B1:72:B5:8B:B0:1A:70:1C:FE:19:6D:A1:99
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/leqvwkta9LFytYuwGnAc_hltoZk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/2837843AA3E811EAB397F675C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:36:45 +0000
ROA not before: Wed 18 Feb 2026 17:15:15 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:7fa:0:1::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.crl
rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/leqvwkta9LFytYuwGnAc_hltoZk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:46:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4522 (0x11aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91972B6, serialNumber=95EAAFC24B5AF4B172B58BB01A701CFE196DA199
Validity
Not Before: Feb 18 17:15:15 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a44efd-33a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a9:d5:36:2b:55:44:f5:d0:00:0d:c8:4c:df:
69:f1:12:fc:2a:06:f7:f7:79:91:9e:e2:04:a0:9e:
5f:28:42:dd:75:23:5e:d5:4f:dc:a9:9e:cc:c9:ca:
ad:10:5d:63:2a:9f:0d:c6:34:46:44:d9:88:89:f9:
5f:1b:00:ee:46:96:cf:80:1b:01:31:db:40:f3:d2:
c6:60:5d:c1:51:47:4b:e9:dd:09:ff:64:e0:6d:fb:
ad:b2:a7:d1:f9:36:53:e9:90:3b:40:5a:e5:5b:6a:
cb:8d:89:21:46:dd:18:22:e2:3d:2a:c6:ca:bd:49:
38:33:01:d8:75:e8:de:db:e7:9a:45:f1:db:89:12:
56:83:0e:cb:83:e3:83:68:43:b3:36:ed:10:0a:a9:
7b:99:f4:73:47:7d:0b:ef:35:74:5d:6a:f9:1e:07:
b2:83:88:1e:15:07:d5:81:53:59:66:eb:a7:8b:ad:
aa:ef:eb:9f:42:71:75:e1:e8:4f:a7:87:13:7e:58:
2f:7a:b5:8d:b1:25:6e:c3:57:05:33:19:db:32:23:
f2:8f:21:ee:53:c6:d0:d6:df:67:64:d3:d2:5f:fc:
00:c3:d1:ad:08:3b:44:17:bf:9d:46:c4:c8:0d:ad:
8a:b2:fc:63:87:e4:4d:68:4d:43:9f:61:bc:08:c6:
e1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:88:C4:33:47:11:DA:64:F6:B2:30:84:F5:F2:1D:0E:C7:3A:79:93
X509v3 Authority Key Identifier:
keyid:95:EA:AF:C2:4B:5A:F4:B1:72:B5:8B:B0:1A:70:1C:FE:19:6D:A1:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/leqvwkta9LFytYuwGnAc_hltoZk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/2837843AA3E811EAB397F675C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:7fa:0:1::/64
Signature Algorithm: sha256WithRSAEncryption
24:49:34:ec:6a:1a:b7:61:d1:17:b5:98:8b:95:ac:0e:c9:77:
76:6f:4c:05:3c:28:d6:ec:d2:79:5f:ab:86:19:bd:80:e0:72:
94:4d:a0:94:42:d4:c0:da:e6:9c:c1:b2:76:df:9c:aa:91:0f:
81:d2:ef:c4:f4:bb:81:37:0a:b8:dc:a6:86:eb:56:42:d2:59:
1a:fe:b7:96:39:1e:a2:63:f8:2e:81:57:f1:39:02:77:fb:11:
a8:05:7f:73:65:8f:67:bb:17:a1:25:34:2c:b9:f8:1d:08:5c:
b0:ed:46:3c:fe:04:4d:65:22:b1:3a:e0:81:a4:7e:e9:3f:b3:
b5:db:9e:c7:43:d8:bd:f4:41:bf:aa:c2:5c:b9:70:ae:a9:88:
ff:e2:31:1d:9c:23:f7:68:60:ec:e2:ee:fe:c5:a3:ee:26:31:
33:81:59:36:79:1a:7e:1e:18:e7:2d:e3:68:a9:10:e9:c9:d2:
c2:fe:8d:af:70:f5:c6:76:71:75:ef:6a:c2:e9:3e:3c:19:07:
18:c8:e7:04:8d:25:09:a5:6d:7c:5c:19:f4:77:27:ce:8b:d5:
d0:d3:7a:5b:b0:6a:24:2b:72:38:24:fa:1d:fc:cb:c0:d2:42:
d4:fd:83:01:90:6d:8e:52:4c:07:48:63:c0:91:5a:66:c3:3c:
d5:32:9b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:09:42 2026 by rpki-client