
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/D633730A5AD711EF8665FF81C4F9AE02.roa
File: D633730A5AD711EF8665FF81C4F9AE02.roa (raw, json)
Hash identifier: +y5rCicZP5PLUrf/IaiEUvKxVk8tGpptOs2ZUbAFH7g=
Subject key identifier: F4:58:2C:AC:06:CD:53:A3:3B:3F:99:F6:C6:04:6C:53:23:1F:90:91
Certificate issuer: /CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D
Certificate serial: 01CC
Authority key identifier: 9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/D633730A5AD711EF8665FF81C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:22:27 +0000
ROA not before: Wed 03 Sep 2025 04:52:06 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 137527
IP address blocks: 2407:b140:ae5::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl
rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460 (0x1cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6D8B, serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D
Validity
Not Before: Sep 3 04:52:06 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a41363-eb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:12:3e:5e:1f:a5:e4:97:6e:6f:db:13:c9:9a:
64:8b:3d:ac:06:1a:80:31:b2:6a:bc:78:45:67:9f:
c4:99:7a:0b:9d:55:66:d9:34:50:bd:9b:b4:b0:c9:
a4:c1:d0:79:ce:65:70:5e:23:04:69:1d:7d:79:76:
da:1f:e1:2b:6f:ec:74:aa:b3:58:d2:01:2b:60:55:
89:fe:d5:65:e8:f4:4b:ab:e9:28:b1:4d:3a:3e:dd:
09:49:97:98:07:bc:be:ba:09:43:cd:7f:52:77:1d:
66:ca:c5:0f:5f:9c:36:9c:ea:d6:eb:b4:14:bb:e7:
22:de:62:a1:d3:c8:18:a7:d2:53:42:d1:27:f0:5b:
a0:64:b5:f2:7d:e0:7d:9e:4c:cb:31:df:3c:a8:31:
cc:01:42:9c:45:53:09:3b:d9:15:33:85:17:75:8e:
e9:78:eb:c1:cf:30:d5:d7:e5:43:a4:8c:30:39:4e:
83:ec:8a:90:01:ef:da:bd:8f:e1:99:8a:70:26:6f:
e6:fc:fd:f2:44:b3:14:2f:47:46:38:79:d3:f9:56:
7b:68:7d:8f:db:94:d7:12:78:58:cb:c1:73:85:28:
21:25:48:fd:f2:3b:1b:85:cb:15:f2:27:b6:14:68:
58:86:2b:0f:6e:e7:5d:26:50:f2:7a:74:5e:f2:e3:
11:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:58:2C:AC:06:CD:53:A3:3B:3F:99:F6:C6:04:6C:53:23:1F:90:91
X509v3 Authority Key Identifier:
keyid:9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/D633730A5AD711EF8665FF81C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2407:b140:ae5::/64
Signature Algorithm: sha256WithRSAEncryption
55:58:d0:88:50:5c:58:8c:c8:29:a6:29:93:87:58:b7:d6:90:
ca:f6:96:e7:7b:b6:15:15:b3:93:87:ae:db:cf:1f:d1:7b:0c:
e2:c5:5b:e6:f8:5d:4e:75:da:65:82:ce:e6:d1:a9:37:96:3a:
89:26:95:9c:fc:a1:a5:3c:ad:54:42:89:fe:b4:4e:27:2f:6f:
ad:52:a1:46:de:9c:28:ba:95:c3:f1:f1:9d:74:49:a2:fc:31:
57:73:b5:93:7d:bd:6d:27:62:89:78:86:0d:a8:a5:c9:80:74:
9d:c0:df:14:ce:30:a1:f3:8f:87:ca:5e:97:84:7d:67:4d:9e:
3a:26:5f:a5:2c:97:30:e2:8c:82:e1:c9:05:42:6b:a5:17:a1:
45:12:d7:83:0b:c5:ac:59:52:b0:05:fd:11:e0:e1:7f:9a:44:
54:76:50:b8:bc:5b:60:45:74:33:e5:e8:c6:bb:d3:d0:b1:1c:
a1:46:3e:80:10:f2:d3:29:9d:f2:10:22:06:05:3a:6e:f2:ca:
50:61:83:38:1e:43:fa:a8:73:18:54:0d:37:8f:c6:ca:e1:35:
e6:24:a3:ff:d9:82:d0:3f:0f:c7:52:af:ec:85:6a:7f:ae:ad:
58:09:0b:85:a9:19:5a:bd:96:d7:09:1e:0a:89:e5:04:ba:65:
23:4c:f3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:47 2026 by rpki-client