
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/65552C3AE8D411ED8D0FAD45C4F9AE02.roa
File: 65552C3AE8D411ED8D0FAD45C4F9AE02.roa (raw, json)
Hash identifier: D7Y0D/y/CKTIEfmEtpoWEBzYAJ2qa9qCceCAIRlHBxE=
Subject key identifier: 08:B8:4D:5C:66:4F:19:32:F3:AE:4F:6E:57:8B:5D:E6:5C:96:31:DC
Certificate issuer: /CN=A91A395C/serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C
Certificate serial: 358F
Authority key identifier: 0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/65552C3AE8D411ED8D0FAD45C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:38:34 +0000
ROA not before: Wed 14 Jan 2026 15:10:56 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 142435
IP address blocks: 2403:5000:187::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl
rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13711 (0x358f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A395C, serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C
Validity
Not Before: Jan 14 15:10:56 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a4799a-49f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f7:81:a2:af:92:8a:96:d2:e1:16:89:8a:ce:
a8:19:2f:e3:4a:46:01:44:10:4e:83:9e:95:52:43:
cb:a7:fc:56:f9:bc:17:de:7b:53:d0:33:ae:2c:46:
88:18:ab:3b:c2:a8:f4:9d:3c:d9:49:b4:eb:e1:4c:
03:9b:9b:5c:d0:2d:95:3b:74:c3:31:c7:cd:6f:a0:
fd:a1:7f:35:ae:6b:ee:2f:cd:37:17:ef:28:10:cb:
fd:ae:aa:89:93:01:5f:03:3a:65:68:5b:63:10:78:
86:6c:a8:00:3c:d6:fa:0a:74:6e:64:7d:34:0d:8f:
9c:7a:90:4b:e0:a9:4c:73:50:84:3b:77:4e:86:2e:
b3:8d:d6:63:b9:44:4c:fb:49:36:39:4c:f4:51:57:
52:fc:f7:5d:56:6d:b3:a5:5d:10:47:c2:5b:62:b4:
53:a0:a5:49:aa:67:83:d7:a1:27:88:83:d2:63:d3:
52:a1:33:5f:d6:2a:de:88:a0:ec:49:c9:a4:d5:78:
03:32:0f:7c:48:7a:8b:b8:28:2c:6b:e6:6b:f9:e5:
02:eb:1a:f9:07:97:23:4d:ba:cd:41:18:84:d6:0d:
0f:45:d2:41:bc:8b:61:de:2c:28:dc:64:47:f3:75:
1e:a0:82:b9:4d:63:26:68:25:25:d3:e4:f5:b7:4f:
bd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B8:4D:5C:66:4F:19:32:F3:AE:4F:6E:57:8B:5D:E6:5C:96:31:DC
X509v3 Authority Key Identifier:
keyid:0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/65552C3AE8D411ED8D0FAD45C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2403:5000:187::/48
Signature Algorithm: sha256WithRSAEncryption
70:0f:1c:8b:41:5a:a4:07:7a:3e:bc:6e:a9:76:00:12:fc:35:
88:94:3c:fb:1d:f8:78:e1:7c:21:e5:98:e3:3d:f2:80:58:65:
6a:c8:90:ac:94:f5:a5:9a:79:83:b5:f5:1f:7b:f3:1e:cc:6b:
3f:4c:fc:ce:e9:e7:89:05:c5:37:b6:e0:67:c3:cf:ea:05:11:
24:b4:68:15:3e:20:32:2a:d6:6c:79:84:70:d6:44:b2:95:0f:
0d:a5:b3:a3:27:16:2c:eb:a6:b7:f3:80:23:ea:d0:12:5a:e1:
b4:57:9b:1f:32:9b:99:6a:a5:0e:a5:8d:12:b6:8c:75:08:ec:
93:33:27:8d:a1:be:5c:e6:3a:62:e5:ab:ac:25:8a:7e:f5:de:
ee:5c:27:17:c0:d8:3e:4d:36:a0:c8:12:93:4f:cd:cf:a6:ce:
83:10:62:e1:b2:54:0e:94:a1:86:84:c8:bc:53:38:49:2b:b7:
9e:6a:5a:9b:d8:07:bb:d3:4b:e8:59:f1:7d:13:2e:e5:bf:02:
7e:60:84:16:8b:53:c3:0a:ef:5f:6e:64:4d:54:b5:41:c5:a6:
96:b6:0b:49:08:f3:6a:8b:1f:da:d0:ae:8c:f9:a6:7c:2e:8f:
dc:07:d8:00:59:bb:78:50:08:f6:be:c3:4a:40:53:90:9b:78:
55:f5:7a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:35 2026 by rpki-client