
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/7B31D5E4CD0B11F0A1E66D5FC4F9AE02.roa
File: 7B31D5E4CD0B11F0A1E66D5FC4F9AE02.roa (raw, json)
Hash identifier: NnPs85doUGI8wBjuyfyV3CMN9xCSIH8SHzO99MPJ70I=
Subject key identifier: 9E:A6:83:2C:6C:AD:C0:25:15:60:02:6B:CB:EC:94:9B:43:58:58:AD
Certificate issuer: /CN=A91A470C/serialNumber=199D4BE0608A56F50480C0AD2645DAD7B6900259
Certificate serial: 46
Authority key identifier: 19:9D:4B:E0:60:8A:56:F5:04:80:C0:AD:26:45:DA:D7:B6:90:02:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/7B31D5E4CD0B11F0A1E66D5FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:11:14 +0000
ROA not before: Mon 08 Dec 2025 15:50:43 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 154386
IP address blocks: 2402:3b20::/32 maxlen: 32
2402:3b20::/48 maxlen: 48
2402:3b20:1::/48 maxlen: 48
2402:3b20:2::/48 maxlen: 48
2402:3b20:3::/48 maxlen: 48
2402:3b20:4::/48 maxlen: 48
2402:3b20:5::/48 maxlen: 48
2402:3b20:6::/48 maxlen: 48
2402:3b20:7::/48 maxlen: 48
2402:3b20:8::/48 maxlen: 48
2402:3b20:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl
rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:59:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A470C, serialNumber=199D4BE0608A56F50480C0AD2645DAD7B6900259
Validity
Not Before: Dec 8 15:50:43 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a3d882-6200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5c:87:c6:06:38:7b:07:50:24:6d:88:f4:82:
92:bd:ab:4e:13:ef:ca:0e:01:7c:13:76:1d:8f:96:
4e:5d:5d:c9:bc:1b:f7:af:ea:68:f0:68:1f:4a:46:
0a:35:ba:68:f8:0c:59:01:9a:d5:64:a1:6f:4b:d0:
2e:0b:d8:91:17:65:2d:85:0f:be:3b:6d:46:67:a6:
4c:9e:ee:c1:c5:a1:91:80:50:de:0b:99:ae:14:b4:
7a:5e:f4:0b:83:bb:48:61:df:e0:47:f7:32:0b:86:
00:4e:fe:d6:da:9d:45:0d:62:59:68:a2:84:9f:2a:
a3:c8:05:2f:64:68:05:09:1e:d4:d1:82:d5:91:d5:
82:84:59:c6:df:01:b3:26:76:78:48:4c:02:7e:91:
a7:36:b8:aa:0c:fa:34:a8:12:04:0b:6e:35:db:25:
1b:01:a1:97:50:11:97:e6:c7:78:84:0d:ae:cf:f3:
cc:aa:27:4a:f5:4f:b8:cc:e8:5b:e4:15:d8:76:4b:
1f:e1:fc:8a:4c:fb:f0:99:2e:5f:30:e9:c0:0e:00:
64:2d:0e:01:f9:76:9a:f5:8e:35:3a:fa:43:7c:48:
ce:8e:2f:d8:01:03:9f:85:d0:35:a8:2a:fa:99:6d:
5d:7e:dd:3f:76:a7:5c:e5:66:a7:14:a9:23:f4:a7:
53:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A6:83:2C:6C:AD:C0:25:15:60:02:6B:CB:EC:94:9B:43:58:58:AD
X509v3 Authority Key Identifier:
keyid:19:9D:4B:E0:60:8A:56:F5:04:80:C0:AD:26:45:DA:D7:B6:90:02:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/7B31D5E4CD0B11F0A1E66D5FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:3b20::/32
Signature Algorithm: sha256WithRSAEncryption
18:8a:87:51:a4:f8:ce:cf:da:e3:12:0e:cd:73:e2:67:0b:77:
52:76:d3:29:0c:ab:93:33:a0:49:4c:f8:05:bf:cd:2e:e8:ed:
e2:cd:57:a6:dc:c8:4f:52:dd:1f:d1:5e:b4:23:8d:c9:d0:9e:
6e:3e:12:eb:1b:ef:f8:70:ca:8c:7a:89:4f:c6:ed:fb:ec:1e:
7d:e6:18:09:d8:c5:f2:42:c0:64:49:74:9d:03:66:a2:91:29:
21:b9:62:79:3d:77:c7:da:81:be:d7:e0:6a:16:22:89:4a:94:
b5:8c:59:96:b8:fd:c7:e3:09:dc:3f:8d:72:3b:7b:03:91:a3:
6d:d1:0a:d6:ea:e2:ea:d1:15:e3:eb:eb:14:42:06:b8:6f:6d:
82:8c:2d:48:41:0f:7d:f2:4e:d9:83:fd:55:07:f2:0a:f4:f3:
26:56:f7:87:a8:89:dc:20:2c:a6:aa:e0:97:18:0b:8a:b9:b9:
cc:91:0d:ab:a8:31:ef:e9:28:c4:83:3f:b1:e6:f4:30:91:73:
50:aa:61:67:92:3a:d7:1a:eb:c6:b1:3b:91:2d:40:99:df:e6:
c0:71:77:b6:1d:29:dd:0a:ca:74:61:3e:65:2d:a2:0c:45:fa:
ea:81:c7:3a:f9:98:4e:5f:45:e9:f2:02:30:a5:ce:73:a9:c2:
dd:3f:1d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:43 2026 by rpki-client