
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/B3E4D03621B111F089CE216DC4F9AE02.roa
File: B3E4D03621B111F089CE216DC4F9AE02.roa (raw, json)
Hash identifier: VaEKIuiVVa+34T0EyOyaQnSXrGSJwgYFoH12QYWKH4Y=
Subject key identifier: BE:01:DC:94:E7:3B:FD:66:6A:66:96:F1:B8:ED:02:22:D1:E1:8C:5E
Certificate issuer: /CN=A91A995E/serialNumber=A5EBDF983919C60F622F34EF8FC521E72489D1CD
Certificate serial: C2
Authority key identifier: A5:EB:DF:98:39:19:C6:0F:62:2F:34:EF:8F:C5:21:E7:24:89:D1:CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/B3E4D03621B111F089CE216DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:17:07 +0000
ROA not before: Fri 09 Jan 2026 06:24:19 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 134182
IP address blocks: 2001:df5:4b40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl
rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:48:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194 (0xc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A995E, serialNumber=A5EBDF983919C60F622F34EF8FC521E72489D1CD
Validity
Not Before: Jan 9 06:24:19 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a42033-1129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a3:29:a5:07:62:20:1b:4d:47:67:c6:5b:11:
c3:46:c8:6c:ff:19:09:fd:64:a0:b6:6b:56:dc:4d:
87:35:38:e6:82:28:4f:a9:44:8e:1f:65:fe:39:d1:
55:c5:1a:7c:2a:43:bc:61:32:57:79:93:8f:99:50:
99:cc:77:58:c4:5f:0f:23:9a:50:72:21:8a:4c:fd:
22:0d:20:e1:4a:00:ad:77:b7:09:d8:80:44:e0:d8:
9f:3d:fb:09:52:71:8b:0c:f5:4c:95:f5:56:24:3d:
4f:0c:aa:1d:30:5a:55:21:a8:0a:51:ba:b8:c6:99:
85:62:6b:2b:78:7e:28:47:d1:4e:a2:34:3b:dd:ef:
0f:19:93:51:72:02:4e:0c:56:55:8f:38:8a:91:0a:
bb:aa:93:1f:db:60:68:9c:25:44:1f:cc:52:08:52:
ed:62:c8:dd:ba:d5:40:92:d2:4e:c0:c4:bb:dc:fc:
53:92:10:2d:3c:21:29:27:2a:83:64:db:8b:e6:3f:
a9:96:ec:79:ee:a8:41:9e:9e:bf:9c:56:70:27:de:
4d:af:83:00:ce:ed:81:67:18:9f:3c:4c:c7:f4:c8:
c3:93:f2:fd:03:65:fe:31:31:29:27:da:af:c6:d0:
20:15:43:94:31:2a:9e:e7:c1:64:c5:b4:bd:d2:7c:
cd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:01:DC:94:E7:3B:FD:66:6A:66:96:F1:B8:ED:02:22:D1:E1:8C:5E
X509v3 Authority Key Identifier:
keyid:A5:EB:DF:98:39:19:C6:0F:62:2F:34:EF:8F:C5:21:E7:24:89:D1:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/B3E4D03621B111F089CE216DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:4b40::/48
Signature Algorithm: sha256WithRSAEncryption
75:67:ee:e7:8d:73:2e:31:c4:00:61:b6:9c:cc:42:1b:c5:6e:
df:82:52:7f:65:9d:23:6e:48:ad:56:7a:bc:a4:c3:8c:8b:e8:
69:be:b7:59:d8:28:b0:75:3b:6d:71:ae:ae:63:d0:73:ca:41:
a6:e4:fd:c6:1e:a6:8b:49:fe:f0:e1:4a:f1:a6:4c:79:04:5b:
4b:45:97:a0:59:60:1b:1c:27:81:49:96:15:16:56:13:48:f8:
4e:8d:0a:27:ad:7c:19:f2:b9:98:db:ab:ce:dc:d3:65:77:8f:
49:96:9e:93:6f:29:c3:1f:b9:bb:18:0a:cf:78:de:5b:63:fb:
7b:da:ca:6b:4e:27:95:b8:bc:7e:06:38:e3:71:72:9e:65:6c:
6f:41:f1:64:5a:d1:13:c2:8c:a9:d1:19:71:21:dc:bc:d6:94:
21:30:71:3c:4f:2f:28:9d:69:5e:bb:1b:41:4a:c6:3f:d1:d6:
34:27:50:77:bf:e1:cf:e9:f6:6c:82:ec:88:ee:58:51:27:ed:
0c:59:49:80:50:aa:5d:f4:e0:75:e0:f8:a4:22:14:4c:4f:1a:
99:8a:a3:b7:f5:c2:4c:7e:e0:19:cb:b3:a9:5e:34:d4:b5:52:
81:d4:af:3c:4a:35:75:e6:51:53:d3:b4:68:30:28:3d:ec:84:
1b:30:f8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:19:20 2026 by rpki-client