
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EDD8F8E0721A11EFBDE87567C4F9AE02.roa
File: EDD8F8E0721A11EFBDE87567C4F9AE02.roa (raw, json)
Hash identifier: zPJ0J/QwFXEWhDY2tVLZ/8dGIazdgDWOzvECWxMEsI4=
Subject key identifier: 93:D7:90:56:8D:C9:0D:34:6B:1F:6A:3C:FF:D7:95:27:FD:D5:4A:A2
Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial: 0242
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EDD8F8E0721A11EFBDE87567C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:16:39 +0000
ROA not before: Wed 31 Dec 2025 04:24:06 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 132482
IP address blocks: 2001:3c8:2705::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 578 (0x242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Validity
Not Before: Dec 31 04:24:06 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a49097-231e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:68:21:d0:3a:26:c9:9c:d3:00:f5:c9:c7:21:
90:59:2d:8c:18:cc:a7:1e:6c:fe:43:85:a9:f1:4a:
a1:58:4a:d5:f4:56:25:85:7b:4b:8c:8d:90:3e:f8:
0f:f1:3b:ec:47:35:d3:42:26:ae:0d:f6:9f:a0:33:
37:26:55:35:3c:71:7a:c2:f1:8e:3f:cb:3b:ba:d5:
db:40:42:e8:c0:23:0e:33:45:52:83:6b:c8:f0:91:
3e:2a:c7:66:52:b4:78:4f:bd:ba:65:aa:d7:c9:76:
89:2a:96:d0:f9:72:1f:28:52:ca:1e:91:fa:bd:83:
bc:7a:8f:1a:de:2e:f7:df:55:f9:8b:d7:4c:7b:a0:
d5:64:32:5c:74:77:06:57:92:3b:df:3c:0b:9c:c6:
cb:a8:54:11:bd:5c:21:d6:11:33:50:d2:10:95:d2:
31:b8:3f:99:f9:39:19:a5:4c:f5:af:b0:9e:ad:e5:
a6:4a:f1:11:c7:b5:6d:14:d0:db:f7:e9:dc:36:e9:
d9:85:ed:e6:54:b0:1a:71:e2:00:6e:f7:05:15:d3:
62:8f:19:95:92:b0:35:71:75:af:b1:74:f6:40:40:
19:b4:f5:94:03:40:47:1e:e2:c7:bc:d9:e0:1b:0f:
a7:3c:7b:47:d4:81:09:0c:8f:07:ee:7f:6c:b8:af:
3c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D7:90:56:8D:C9:0D:34:6B:1F:6A:3C:FF:D7:95:27:FD:D5:4A:A2
X509v3 Authority Key Identifier:
keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EDD8F8E0721A11EFBDE87567C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:3c8:2705::/48
Signature Algorithm: sha256WithRSAEncryption
77:78:59:7a:29:48:1e:33:fb:8b:9d:d7:5b:75:4b:31:f5:c2:
37:40:8f:88:05:92:be:8d:5c:4a:7e:ae:6e:39:f0:34:89:89:
e2:bd:b3:0e:3f:e0:49:1e:dd:10:fd:36:34:07:cc:5e:08:3a:
aa:9a:8f:60:73:6e:b7:b7:27:0a:a2:65:e0:ae:0d:b5:e0:87:
78:78:37:3c:3f:7b:6c:73:c0:4e:43:3b:3b:bd:f3:1d:60:f2:
8d:09:6c:ad:84:d8:b9:d8:1f:53:ea:ea:f1:ce:8f:8a:52:22:
f6:7d:8e:8b:7a:16:1a:96:4e:e0:39:3f:fc:dc:17:68:15:4c:
b9:e6:92:9a:83:b7:e8:3b:c6:1e:dd:9c:24:6c:22:f9:c5:8b:
a6:f4:55:22:b6:a8:5a:97:a3:ce:d7:9a:a0:ef:9c:b5:22:4e:
a9:ef:53:e3:e7:7d:5e:42:35:b6:cc:0f:e1:cb:44:25:26:f2:
3c:4f:0d:56:aa:84:c8:0e:90:b9:e8:2a:bc:3a:97:ce:80:7b:
cd:ca:63:1b:3f:c1:da:94:36:85:80:cc:5c:b5:87:12:dd:24:
34:e9:9d:b5:d5:67:6a:8a:86:80:f1:1a:91:99:4f:35:31:c0:
6f:f7:cc:db:9b:a4:c7:44:91:55:b0:46:f3:41:91:3c:55:36:
2d:70:74:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:21 2026 by rpki-client