
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/234A6D0E6E8911F0AEEA0B14C4F9AE02.roa
File: 234A6D0E6E8911F0AEEA0B14C4F9AE02.roa (raw, json)
Hash identifier: n5o+gpjxSM1mfGq/OK/47I4GgkJ3B65F/QWpVAxrvm0=
Subject key identifier: B5:EF:96:1C:A0:D4:7B:7C:3E:CC:35:0F:B7:D0:6B:BE:1C:71:57:C2
Certificate issuer: /CN=A91A6F56/serialNumber=6ACA1129B238C7A1F1791B75CD49AD6BD6ADFA77
Certificate serial: 74
Authority key identifier: 6A:CA:11:29:B2:38:C7:A1:F1:79:1B:75:CD:49:AD:6B:D6:AD:FA:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/234A6D0E6E8911F0AEEA0B14C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:21:03 +0000
ROA not before: Fri 13 Feb 2026 06:26:42 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 153529
IP address blocks: 2001:df4:efc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.crl
rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6F56, serialNumber=6ACA1129B238C7A1F1791B75CD49AD6BD6ADFA77
Validity
Not Before: Feb 13 06:26:42 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a4211f-f845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4e:22:10:e0:cf:e6:2d:ea:5e:d0:99:ab:4e:
2a:f4:5c:8f:50:45:2d:96:7b:1e:b9:8b:d3:ec:d1:
69:76:a9:f4:31:b8:5c:02:a3:36:15:03:dd:8b:56:
53:cc:03:66:65:a4:78:05:78:81:b2:ed:c4:a3:27:
d0:d3:cf:19:66:bb:bb:09:03:b0:c8:46:dc:c2:7f:
4f:d6:a0:96:a6:6f:ed:f1:a0:d4:39:d5:81:07:0c:
42:76:ae:b4:10:c7:5a:9a:d1:79:36:90:21:da:40:
7a:9f:e8:f5:2d:48:56:83:5d:8c:82:4b:12:3a:e3:
d9:8b:2b:5f:48:16:c2:a6:29:63:a9:fa:e2:e9:90:
2c:bf:4a:ac:35:d0:0d:ec:7a:37:95:6f:e9:eb:83:
7f:73:20:eb:77:c4:b1:34:cf:14:a3:a0:b0:f6:94:
8d:75:b8:ba:91:b8:e9:e7:08:75:e1:b0:24:32:41:
13:c9:ff:42:f1:2b:88:10:0e:d0:e7:7a:56:f7:ba:
af:c0:26:00:19:97:c5:5b:ce:02:0f:a9:56:ee:1f:
98:58:b3:b3:12:91:f1:9c:f0:31:9d:d7:42:a2:5e:
3c:e6:45:2e:6c:62:b0:5e:e4:8e:9d:ae:0b:d4:bf:
61:e8:2c:3a:6f:6d:5b:06:6d:a4:2d:41:b5:f0:0e:
eb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EF:96:1C:A0:D4:7B:7C:3E:CC:35:0F:B7:D0:6B:BE:1C:71:57:C2
X509v3 Authority Key Identifier:
keyid:6A:CA:11:29:B2:38:C7:A1:F1:79:1B:75:CD:49:AD:6B:D6:AD:FA:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/234A6D0E6E8911F0AEEA0B14C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:efc0::/48
Signature Algorithm: sha256WithRSAEncryption
b1:3d:45:db:aa:46:02:d7:e4:d7:48:75:4f:ac:68:6b:72:d1:
37:27:51:72:73:4b:30:47:d5:33:c9:79:a4:8b:c0:f1:34:76:
8e:a4:8b:64:d9:a2:96:b4:17:d3:0e:a9:47:68:5e:43:a3:7a:
cb:fc:39:91:18:5f:5c:67:42:25:95:b0:db:8b:9b:51:44:53:
22:d4:81:be:79:0f:52:89:86:62:ff:e7:df:7f:14:88:ea:d2:
5e:49:47:be:39:2c:c3:8e:04:3d:ab:70:74:ae:0b:b5:83:95:
0d:51:85:5f:45:db:60:ce:de:f5:eb:54:94:d1:21:e6:59:97:
77:7a:3b:b8:ed:38:0c:82:a0:c3:03:7b:4f:5a:0f:c0:49:80:
42:5c:ec:62:8b:29:d7:dc:40:13:77:22:b8:ce:c1:4a:de:3c:
32:a2:66:12:7a:b5:47:2c:ad:4b:7b:dc:84:6c:73:82:28:bb:
8a:9d:f9:d4:3a:34:4b:ac:fe:0e:46:fa:7f:36:df:b8:14:34:
60:85:d3:72:b0:ec:56:1c:b4:1c:52:b3:66:1b:b6:a0:3a:e3:
08:94:ad:47:d2:d6:bc:2a:fc:fa:c3:ba:08:76:93:e6:a1:88:
c7:89:d2:c5:f3:ad:80:48:a5:29:6d:a1:9b:1a:2a:46:b1:75:
08:13:ca:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:49:33 2026 by rpki-client