
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/5E4EF73E409011F0986B1F68C4F9AE02.roa
File: 5E4EF73E409011F0986B1F68C4F9AE02.roa (raw, json)
Hash identifier: lbwk8mNKjMeoW18suzzRQjcBAL5Bd/eKgngvQTadOm8=
Subject key identifier: 85:B3:E7:8E:6D:12:5C:92:C9:00:BE:B0:80:95:E5:DF:7C:81:4A:83
Certificate issuer: /CN=A91A7B36/serialNumber=34F0F8CD87B88C4F520E46FB95D2DB84FA043362
Certificate serial: 8F
Authority key identifier: 34:F0:F8:CD:87:B8:8C:4F:52:0E:46:FB:95:D2:DB:84:FA:04:33:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/5E4EF73E409011F0986B1F68C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:07:34 +0000
ROA not before: Fri 13 Jun 2025 03:36:18 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 153908
IP address blocks: 2402:ce0::/32 maxlen: 32
2402:ce0::/36 maxlen: 36
2402:ce0:1000::/36 maxlen: 36
2402:ce0:2000::/36 maxlen: 36
2402:ce0:3000::/36 maxlen: 36
2402:ce0:4000::/36 maxlen: 36
2402:ce0:5000::/36 maxlen: 36
2402:ce0:6000::/36 maxlen: 36
2402:ce0:7000::/36 maxlen: 36
2402:ce0:8000::/36 maxlen: 36
2402:ce0:9000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.crl
rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:51:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7B36, serialNumber=34F0F8CD87B88C4F520E46FB95D2DB84FA043362
Validity
Not Before: Jun 13 03:36:18 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a3e5b6-5634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d2:4d:1a:11:ef:e4:b6:17:07:80:c7:3d:3d:
dd:f6:03:46:7a:9b:76:17:43:28:b8:69:16:b1:56:
74:42:3d:8a:79:70:aa:c7:4d:06:74:f0:d6:04:f8:
b4:18:15:ff:a3:44:39:28:be:1e:09:f6:29:fc:0b:
a0:49:2b:7b:64:41:08:a1:88:2f:97:fb:4a:71:73:
5f:a5:0a:84:31:35:21:91:88:a4:06:15:99:ac:32:
a4:6d:23:64:4a:1a:64:c9:51:2d:8f:44:40:c4:07:
29:12:69:f0:bc:07:5b:0f:69:92:80:0f:c9:47:2f:
48:d7:11:16:f8:2b:81:76:b2:03:7e:88:ae:db:0b:
e1:d2:9a:e5:d9:82:9b:49:2a:a6:b2:ac:2f:46:19:
7c:55:4b:c1:b0:75:29:30:db:51:a3:85:84:46:32:
86:ef:ff:c1:5a:dc:f6:f7:cd:28:03:f6:e4:41:ee:
12:7e:45:05:b0:5d:9c:3f:fd:8a:a6:5d:de:4a:d8:
7e:0d:d4:49:36:fb:87:8d:fe:49:8a:e5:db:43:f6:
a2:2d:ca:87:43:23:a8:63:48:73:30:04:bd:b0:79:
d7:71:ee:93:f0:7c:b0:73:4b:9d:62:5b:ab:06:41:
0f:1d:d0:79:32:55:bc:a6:a6:9c:ea:f6:c5:c1:db:
02:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B3:E7:8E:6D:12:5C:92:C9:00:BE:B0:80:95:E5:DF:7C:81:4A:83
X509v3 Authority Key Identifier:
keyid:34:F0:F8:CD:87:B8:8C:4F:52:0E:46:FB:95:D2:DB:84:FA:04:33:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/5E4EF73E409011F0986B1F68C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:ce0::/32
Signature Algorithm: sha256WithRSAEncryption
33:16:7b:16:c1:07:05:f1:a0:8c:e9:99:96:99:a1:ea:a5:b7:
0f:59:01:4c:c3:67:f7:a8:36:88:9b:91:1e:97:5c:17:46:41:
3e:ec:ef:9f:c9:78:9b:d9:b7:04:ce:6e:6b:5a:ba:36:bd:61:
a8:d8:a9:30:d8:f2:0f:1d:ef:f5:39:f2:73:5a:c1:7d:9b:22:
2d:f4:e2:d5:37:cf:63:18:7f:e5:35:a3:60:63:3b:9c:33:f1:
c3:c4:7a:af:c3:81:6c:67:0f:00:c8:7f:70:c3:28:e3:3f:ab:
af:4b:59:83:48:6f:e6:ac:7c:c7:f1:61:6c:d4:a7:27:6c:9f:
ae:b9:23:75:b2:55:0a:95:0f:c0:7c:79:89:0b:9e:f2:a3:ff:
a9:c8:98:e6:da:6a:a0:10:48:62:1b:1f:64:e8:11:9e:64:8b:
37:74:fd:3d:49:53:8f:94:0e:c6:85:8f:9a:75:87:14:e7:2b:
2e:21:00:60:3a:d2:25:b3:b6:e7:bc:a9:18:41:94:2c:a9:fd:
8c:58:b1:24:a6:ef:22:55:12:e3:57:d2:2a:77:6e:b2:d5:52:
d0:6c:fa:39:77:2d:65:38:3f:62:2b:2b:e1:5c:13:23:18:c0:
69:84:51:02:5b:3b:93:68:1b:80:2f:b3:3c:19:10:36:bd:8f:
d8:80:d0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:18 2026 by rpki-client