
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/800D4798721B11EF81654E68C4F9AE02.roa
File: 800D4798721B11EF81654E68C4F9AE02.roa (raw, json)
Hash identifier: fJH0OnAkV73NaYhJSOzfnbJOtG63wADTmRv7wLcZOSI=
Subject key identifier: 04:41:AD:F0:55:18:52:E6:E0:3C:51:46:4F:8A:C1:D7:88:41:C3:01
Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial: 026C
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/800D4798721B11EF81654E68C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:17:17 +0000
ROA not before: Wed 31 Dec 2025 04:24:45 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 45575
IP address blocks: 2001:3c8:900c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 620 (0x26c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Validity
Not Before: Dec 31 04:24:45 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a490bd-c222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a5:57:c9:08:27:56:91:85:0f:10:ff:f8:80:
53:c6:69:ee:4c:52:99:14:67:71:69:d1:b0:fb:ba:
fd:29:83:7a:4d:3e:d7:63:00:33:ab:dd:b4:1c:71:
11:fa:6f:3b:d9:7a:7b:55:ac:f7:65:c8:5e:10:97:
3c:d8:f4:64:45:9d:02:47:d1:56:3d:16:bc:e4:f2:
6f:23:e4:81:4b:1f:46:38:49:26:5f:33:32:b6:e9:
90:21:28:88:ae:fa:2d:0a:40:7a:6b:07:a1:10:4c:
c9:bf:cb:bb:87:44:22:c5:f4:f6:60:de:2f:fd:b3:
42:00:9c:6c:f6:7a:1f:46:80:6e:2d:34:b1:1f:be:
9b:8b:48:62:20:4b:a8:37:78:6f:59:20:5f:8f:2c:
1b:97:77:3f:c9:0b:90:86:1f:a1:7a:dd:8a:87:7d:
bc:ad:29:1c:75:e6:b3:41:90:56:5c:c7:b6:15:76:
cf:92:7d:b8:2d:a2:01:8b:fc:37:f0:3a:ec:45:33:
90:58:f1:67:75:6e:97:4b:72:9f:33:ae:8c:b0:06:
fc:29:13:c5:3a:d1:b4:b9:9f:c8:4e:bd:17:75:70:
42:3c:d1:18:54:32:0a:bb:3b:63:e9:6b:c2:12:7b:
16:90:95:cc:55:b3:44:db:91:14:3a:b7:6e:64:36:
d6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:41:AD:F0:55:18:52:E6:E0:3C:51:46:4F:8A:C1:D7:88:41:C3:01
X509v3 Authority Key Identifier:
keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/800D4798721B11EF81654E68C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:3c8:900c::/48
Signature Algorithm: sha256WithRSAEncryption
26:72:97:ef:3e:b8:17:07:18:cb:c3:ed:9e:ef:bc:05:05:3c:
5c:08:e7:f1:35:08:ea:7e:5d:7f:f7:7b:07:61:ac:33:4b:e8:
80:01:b5:0f:03:ab:c0:78:3c:5c:65:09:42:d8:0f:5c:b7:4d:
33:eb:32:eb:da:4d:92:51:5f:cb:57:2c:19:7e:96:00:91:80:
f1:f5:4f:18:db:7d:7f:43:6a:f7:ab:bd:ec:80:2a:25:77:22:
f7:ea:7b:2b:13:e9:7d:a5:94:78:3f:9e:9a:54:cd:5b:ea:48:
74:95:92:12:ee:26:13:1c:03:6f:5d:46:a0:f4:a5:d4:e0:ba:
59:6f:c0:af:08:39:2a:d1:5d:05:37:7e:cb:1d:a2:3a:ac:83:
17:f4:ef:6b:62:72:76:f6:4f:ee:b9:d2:b7:90:9f:54:d4:45:
3f:50:e2:ef:86:3b:4c:4f:d9:c0:ed:28:5b:2b:de:32:52:35:
45:ca:83:09:e2:68:6f:99:4d:95:c5:22:2a:92:07:83:bc:ca:
49:04:3c:b8:ee:ac:40:01:c5:60:5c:4a:2d:8c:24:55:09:0c:
df:95:23:92:c5:ab:2b:14:6a:db:8d:4d:90:7d:1f:f4:5a:c7:
35:d7:e0:13:16:e0:a6:2e:bf:3c:d3:ab:c7:3c:94:22:73:69:
ea:3b:c3:35
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB
MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDQ1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTBiZC1jMjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwKVXyQgnVpGFDxD/+IBTxmnuTFKZFGdxadGw+7r9KYN6TT7XYwAzq920HHER
+m872Xp7Vaz3ZcheEJc82PRkRZ0CR9FWPRa85PJvI+SBSx9GOEkmXzMytumQISiI
rvotCkB6awehEEzJv8u7h0QixfT2YN4v/bNCAJxs9nofRoBuLTSxH76bi0hiIEuo
N3hvWSBfjywbl3c/yQuQhh+het2Kh328rSkcdeazQZBWXMe2FXbPkn24LaIBi/w3
8DrsRTOQWPFndW6XS3KfM66MsAb8KRPFOtG0uZ/ITr0XdXBCPNEYVDIKuztj6WvC
EnsWkJXMVbNE25EUOrduZDbW5wIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFARBrfBV
GFLm4DxRRk+KwdeIQcMBMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF
ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0
U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvODAwRDQ3OTg3
MjFCMTFFRjgxNjU0RTY4QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEDyJAMMA0GCSqGSIb3DQEBCwUAA4IBAQAmcpfvPrgXBxjLw+2e
77wFBTxcCOfxNQjqfl1/93sHYawzS+iAAbUPA6vAeDxcZQlC2A9ct00z6zLr2k2S
UV/LVywZfpYAkYDx9U8Y231/Q2r3q73sgColdyL36nsrE+l9pZR4P56aVM1b6kh0
lZIS7iYTHANvXUag9KXU4LpZb8CvCDkq0V0FN37LHaI6rIMX9O9rYnJ29k/uudK3
kJ9U1EU/UOLvhjtMT9nA7ShbK94yUjVFyoMJ4mhvmU2VxSIqkgeDvMpJBDy47qxA
AcVgXEotjCRVCQzflSOSxasrFGrbjU2QfR/0Wsc11+ATFuCmLr8806vHPJQic2nq
O8M1
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:05:02 2026 by rpki-client