
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/0D83DBA8BE5811F0B151FF78C4F9AE02.roa
File: 0D83DBA8BE5811F0B151FF78C4F9AE02.roa (raw, json)
Hash identifier: zRRASQfNY/IUyP28hDWRYbCWpGy8GvNHBf7/Zg6e0kQ=
Subject key identifier: 03:8C:6D:3C:85:19:AD:12:37:68:39:84:F5:CD:43:47:C8:41:15:29
Certificate issuer: /CN=A91AC5BC/serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE
Certificate serial: B1
Authority key identifier: A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/0D83DBA8BE5811F0B151FF78C4F9AE02.roa
Signing time: Thu 09 Apr 2026 07:42:21 +0000
ROA not before: Thu 09 Apr 2026 07:42:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401075
IP address blocks: 2402:1920:f800::/38 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl
rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:09:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC5BC, serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE
Validity
Not Before: Apr 9 07:42:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69d7585d-d1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:b8:40:66:f2:5d:9b:57:b1:6c:23:b3:45:
6a:45:27:58:79:a0:72:9b:9f:58:6a:2c:00:15:f4:
0f:db:03:80:0c:6d:23:53:dc:61:bf:66:4f:0b:fa:
2e:8b:18:d3:78:58:cd:d9:b4:e5:ba:04:7d:ed:e5:
b8:e6:21:56:a3:8a:56:27:7a:d8:7a:c4:31:1c:31:
78:ac:6f:14:1d:82:ce:b3:dc:f2:5b:e4:b0:24:22:
b6:8a:97:cd:91:bc:99:f0:66:20:78:04:9a:87:b3:
8c:37:ed:3e:24:20:8c:53:64:26:a5:f8:3c:e9:23:
3c:9c:f9:e1:48:56:bc:8c:0f:0b:03:53:7a:78:65:
dd:3e:af:0c:1a:52:b9:0a:b1:62:dd:b7:5c:69:12:
d9:c8:dc:02:d3:e5:12:c4:d9:04:a3:54:8f:20:55:
6c:30:14:b8:14:b9:f8:ee:ad:37:b8:cb:26:c8:10:
5f:c1:24:7f:8b:32:41:c0:00:75:2d:f2:d6:0d:a0:
3f:c1:a9:f8:65:fd:9d:97:8a:1e:4d:96:f3:7a:d2:
8a:07:bc:75:ea:05:38:ad:47:62:30:9a:7f:14:2d:
50:0e:00:2c:82:b1:88:e9:64:cd:53:f7:03:13:d1:
8e:b7:bd:07:de:46:c0:25:48:77:17:5a:05:1e:53:
ec:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8C:6D:3C:85:19:AD:12:37:68:39:84:F5:CD:43:47:C8:41:15:29
X509v3 Authority Key Identifier:
keyid:A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/0D83DBA8BE5811F0B151FF78C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:1920:f800::/38
Signature Algorithm: sha256WithRSAEncryption
29:27:7e:c7:56:cf:d3:0f:c8:85:a9:19:ee:19:88:dc:9b:62:
0e:c9:f4:04:86:ba:e8:ab:c8:ba:8d:e8:ad:85:75:27:ac:26:
e9:0b:34:63:c8:36:20:fe:c4:2e:8b:2b:26:b6:2a:7d:3b:d8:
ca:9f:84:55:4b:6e:54:19:12:d0:7b:8a:e4:cc:09:d8:3a:d4:
09:84:ae:a5:66:2c:2d:a3:69:35:77:cd:a9:66:e9:99:71:b4:
5e:18:26:de:9c:18:ae:46:4f:a1:f8:9a:36:30:7f:3c:00:c5:
d0:dd:00:2f:dd:0c:50:e8:fb:88:34:00:18:0b:29:ac:8d:7a:
e5:fd:8a:dd:e2:af:aa:43:42:1f:65:3b:51:04:2c:22:52:48:
13:ef:55:ee:c5:d3:7b:ed:c9:63:65:30:96:4c:da:65:6e:dd:
d0:c5:83:bb:09:ec:8b:4a:c3:62:64:e9:c4:4c:2b:eb:7c:c5:
a4:42:9a:ac:b6:40:20:7b:a4:07:d7:d8:93:eb:c5:58:ab:e1:
e7:30:08:7b:fb:33:92:eb:93:5b:84:84:e3:68:b4:f3:9f:de:
f7:0a:7f:52:b2:08:4f:3b:ca:ac:55:45:04:91:76:2d:97:bb:
31:e6:be:bc:04:f5:f1:3c:ce:66:e3:8e:35:05:60:87:52:d8:
4d:9b:34:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:43:34 2026 by rpki-client