
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/0EB302DCEA5B11EFABB07C6DC4F9AE02.roa
File: 0EB302DCEA5B11EFABB07C6DC4F9AE02.roa (raw, json)
Hash identifier: yxcEwj+JBBXiVTX+aFQc5ddxq/vEi232S7B1rwDfWO0=
Subject key identifier: F6:81:84:36:6B:14:CB:5B:AE:3A:3D:BD:84:47:CD:29:31:E8:26:32
Certificate issuer: /CN=A91A91CB/serialNumber=8966423EE2A415631F7AF314E4D884007A8468B6
Certificate serial: C9
Authority key identifier: 89:66:42:3E:E2:A4:15:63:1F:7A:F3:14:E4:D8:84:00:7A:84:68:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/0EB302DCEA5B11EFABB07C6DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:16:38 +0000
ROA not before: Wed 21 Jan 2026 05:25:16 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 7575
IP address blocks: 2001:df4:c7c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.crl
rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:22:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A91CB, serialNumber=8966423EE2A415631F7AF314E4D884007A8468B6
Validity
Not Before: Jan 21 05:25:16 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a42016-2713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d6:e2:d3:6e:90:31:4f:8f:0c:1e:7b:62:37:
e5:8f:b8:aa:96:47:de:c6:63:5d:f9:39:85:cb:d9:
99:03:d7:83:c2:25:d4:00:2c:17:9c:a1:77:01:59:
a4:a4:c7:f6:f4:36:e8:11:ea:55:7d:a4:f4:cc:17:
39:71:45:e8:a0:83:12:f4:bd:26:bf:d1:cc:a4:cd:
29:96:e1:3f:b6:96:cd:16:6b:19:00:7a:e2:8a:78:
1f:d5:1b:1c:e9:af:fa:2f:13:cc:be:f1:35:ad:a3:
e6:c4:38:61:f1:52:68:6c:41:c4:33:ba:94:f6:0e:
a5:b6:8b:2f:82:b0:67:a9:1f:45:f6:fd:96:b8:32:
8f:c5:d3:f5:03:ee:99:49:e3:f8:87:a9:b5:26:69:
36:2f:be:7e:b0:c0:78:e3:af:77:ef:e9:06:5d:49:
b8:e7:ac:62:e3:89:26:c1:2d:6e:e5:d0:bb:a5:d1:
94:c9:76:c5:95:8d:3b:af:c6:71:18:56:0d:af:5e:
2d:76:8f:60:ed:9d:d6:78:7d:a3:d6:14:68:f8:8d:
28:d4:15:65:b7:bc:fd:20:3f:e7:ae:4c:17:81:86:
c9:a9:44:92:9f:54:08:8b:ce:bd:be:8e:07:b4:1a:
e0:b1:16:a6:c5:4a:34:40:59:56:b5:50:0d:3d:e8:
af:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:81:84:36:6B:14:CB:5B:AE:3A:3D:BD:84:47:CD:29:31:E8:26:32
X509v3 Authority Key Identifier:
keyid:89:66:42:3E:E2:A4:15:63:1F:7A:F3:14:E4:D8:84:00:7A:84:68:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/0EB302DCEA5B11EFABB07C6DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:c7c0::/48
Signature Algorithm: sha256WithRSAEncryption
07:e2:71:17:db:0f:48:bf:7a:05:4f:79:9f:91:35:d7:21:68:
5f:63:5a:52:ff:15:16:97:86:f2:f7:07:f9:47:a3:91:85:36:
d9:40:27:26:07:fc:02:2a:5e:66:84:c1:b6:45:16:96:49:3c:
31:1d:15:ba:b3:37:b4:01:06:21:15:bf:bd:3a:55:29:09:d8:
3d:76:f6:19:ce:6b:dd:03:fe:81:ce:79:5c:8e:f7:94:ee:50:
6a:cf:6f:a0:38:5b:e5:0e:c1:9a:7f:9b:60:f0:94:f1:09:68:
7a:e5:db:95:96:18:4f:fb:7b:a1:90:74:06:c4:1d:7c:27:89:
c9:16:d3:29:ab:1f:67:aa:df:3c:c4:c8:af:60:ff:22:46:ff:
88:b8:3a:0b:86:ad:a3:93:08:29:ba:d6:18:a7:bc:8c:bd:4a:
17:81:3f:58:df:9c:26:fe:6b:94:64:7c:93:bf:38:6a:c6:78:
e4:9f:e7:99:60:ae:e6:66:ed:87:32:65:90:01:9b:8c:9d:a4:
84:f2:e2:b9:ec:4a:7b:64:48:a3:50:a4:e2:54:6d:61:36:36:
bc:c9:03:c0:c5:05:ab:22:52:c7:0d:02:87:7d:63:a3:93:b3:
bb:05:c4:89:6a:08:12:4c:ad:a6:df:c6:3a:30:96:b0:12:50:
7b:68:79:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:24 2026 by rpki-client