
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/D127B58CF8EF11EEA2537576C4F9AE02.roa
File: D127B58CF8EF11EEA2537576C4F9AE02.roa (raw, json)
Hash identifier: FTc+Hs44wLCfI16eufvD/5pqhnWCuERsYpEr92WUtL8=
Subject key identifier: DC:FD:3A:4B:BD:27:BD:6F:19:F3:22:52:EB:0E:B9:F1:36:7D:A2:C5
Certificate issuer: /CN=A91A95AB/serialNumber=D79FFA772375AEB4021A8FF5182FEAAA325928FD
Certificate serial: 08ED
Authority key identifier: D7:9F:FA:77:23:75:AE:B4:02:1A:8F:F5:18:2F:EA:AA:32:59:28:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_6dyN1rrQCGo_1GC_qqjJZKP0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/D127B58CF8EF11EEA2537576C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:05:05 +0000
ROA not before: Mon 28 Apr 2025 15:21:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56196
IP address blocks: 2404:9980::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.crl
rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_6dyN1rrQCGo_1GC_qqjJZKP0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2285 (0x8ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A95AB, serialNumber=D79FFA772375AEB4021A8FF5182FEAAA325928FD
Validity
Not Before: Apr 28 15:21:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a48de1-ad56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d9:91:11:8b:7d:5d:fd:f8:0c:f4:dc:c9:ae:
bf:2c:b9:7e:5b:00:73:f1:9a:0d:22:ae:73:6b:3d:
b1:e1:d3:0b:bd:c5:0c:09:a0:41:d5:42:8c:e4:10:
9f:79:d7:3b:cd:5f:46:3e:2b:a1:b5:41:35:58:2a:
ec:15:b7:10:53:c5:c8:8f:f4:0d:b4:05:bc:a5:39:
58:a8:e2:77:c0:28:b2:0a:3a:36:53:8a:d4:cc:b5:
a4:e2:2d:2e:2b:1b:d7:c1:27:96:61:75:17:c5:cf:
f3:69:68:62:b5:87:ef:30:84:2c:3a:8a:de:5f:cc:
9a:e3:fd:9b:30:d9:dc:ca:15:cd:42:5c:91:a7:fe:
1f:e5:ee:ea:08:3c:e4:91:b6:00:56:93:bd:b9:a8:
17:b0:aa:f0:23:ed:37:f6:13:80:84:65:75:ca:f3:
4c:e2:c2:0b:1f:85:63:32:d0:02:fd:cc:0b:9c:2c:
a2:8c:6c:3f:06:65:2f:28:0e:19:0c:76:12:0f:27:
e9:94:46:72:ec:4b:b4:76:ab:f8:d7:60:7e:23:0d:
60:c9:37:2e:d3:9b:4f:a3:51:d6:08:c3:41:53:a6:
b4:3e:79:9e:f6:80:a6:e3:a1:3d:f0:82:d8:07:d5:
8d:a4:6a:c8:2b:80:a6:bf:bd:36:17:db:59:57:5b:
fe:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FD:3A:4B:BD:27:BD:6F:19:F3:22:52:EB:0E:B9:F1:36:7D:A2:C5
X509v3 Authority Key Identifier:
keyid:D7:9F:FA:77:23:75:AE:B4:02:1A:8F:F5:18:2F:EA:AA:32:59:28:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_6dyN1rrQCGo_1GC_qqjJZKP0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/D127B58CF8EF11EEA2537576C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2404:9980::/32
Signature Algorithm: sha256WithRSAEncryption
98:b9:29:28:87:0b:6d:82:4a:d6:14:a7:91:05:49:70:d9:1c:
a9:b6:6d:bc:16:96:60:a9:97:cd:d4:a1:e4:df:e9:a4:1c:5a:
ce:f6:8c:17:dd:a6:e1:cd:d1:42:9f:58:2b:02:1b:33:5d:cd:
af:4d:85:3f:55:80:ed:22:c3:93:1b:2d:75:f5:57:e6:82:77:
2e:c3:cc:ba:b0:b0:c7:b3:42:9f:71:14:c3:a9:10:59:6c:db:
9f:2b:e8:9d:c2:0f:e7:6d:4a:c9:18:56:39:e0:a1:14:2a:46:
af:42:d0:29:31:c6:ec:08:9c:31:d0:5c:37:8f:86:e1:3b:8b:
a8:bc:3a:e7:8b:7c:d3:c8:9f:82:e9:d9:44:fe:8a:a4:29:ef:
49:68:01:16:09:bd:32:1b:25:28:eb:85:6e:7f:90:e7:5c:a1:
e2:fd:9f:bd:13:e2:c5:e0:bb:b8:ff:de:26:a8:5d:f5:46:ad:
b8:81:0d:6b:70:52:c8:a4:60:bc:65:43:94:5e:4b:3a:36:af:
38:09:13:3e:f8:75:79:cc:7a:14:92:07:5d:08:7f:51:fd:86:
fc:a1:ba:93:97:10:52:40:27:61:02:44:e7:b7:68:8a:64:0d:
0a:fb:f7:07:88:59:a7:57:fa:b7:ec:0f:27:f0:b7:d3:86:27:
cf:c6:3d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:30 2026 by rpki-client