
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/C3D424C4F4F611F0B230A1D14E6F56BC.roa
File: C3D424C4F4F611F0B230A1D14E6F56BC.roa (raw, json)
Hash identifier: egk9xsmfxgJd9+6b30PcTbtfCGdbVQzHasvNcINufMc=
Subject key identifier: EE:43:2A:76:4A:A2:E5:B5:C2:2C:5B:C1:0E:21:90:A4:4A:74:27:B0
Certificate issuer: /CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01
Certificate serial: 0994
Authority key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/C3D424C4F4F611F0B230A1D14E6F56BC.roa
Signing time: Sun 01 Mar 2026 19:18:12 +0000
ROA not before: Mon 19 Jan 2026 05:21:53 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 138619
IP address blocks: 2001:df6:7bc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl
rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2452 (0x994)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5073, serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01
Validity
Not Before: Jan 19 05:21:53 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a490f4-8f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:05:4c:be:50:39:99:e3:fe:e6:e6:4b:17:3c:
dd:4b:ae:d0:e3:ec:4c:18:ec:bc:c9:09:d0:37:d3:
1c:62:08:46:86:c0:e1:64:30:ae:1e:2c:03:46:8d:
15:fb:df:3e:8d:ad:a3:47:eb:2f:bb:fc:85:ca:8b:
02:e0:dd:8d:92:c2:e9:92:c5:6f:53:59:c3:28:32:
df:61:ea:36:74:1c:36:72:33:a9:aa:f4:2a:c1:8b:
4e:c6:59:47:cc:a8:4f:f1:c6:44:41:72:bc:34:6e:
73:05:bb:b6:21:56:8c:c8:d0:9c:0e:ee:91:43:95:
f8:c6:9e:35:18:2f:8b:00:55:b5:d8:c0:d7:75:19:
b9:66:e1:ce:bd:3e:f1:c4:75:2f:ba:ec:00:d8:d4:
ec:bf:fd:e2:be:99:88:6a:af:e1:6a:36:b5:88:b1:
c3:bd:9c:f8:7b:f5:aa:16:3a:7b:b9:a0:55:d4:d0:
77:9f:72:ac:12:c8:c7:51:19:8b:ab:c1:1e:63:b4:
b1:94:79:cc:08:5b:f7:3e:ad:71:89:8f:9e:17:3d:
58:f0:f0:9e:a2:19:9a:60:47:4d:c9:44:9e:1f:2e:
d6:15:2b:d6:3c:c2:de:eb:0c:d5:60:4a:fe:0e:ec:
82:f6:ba:b9:da:be:d5:77:46:61:ee:72:fc:a6:fe:
26:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:43:2A:76:4A:A2:E5:B5:C2:2C:5B:C1:0E:21:90:A4:4A:74:27:B0
X509v3 Authority Key Identifier:
keyid:17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/C3D424C4F4F611F0B230A1D14E6F56BC.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:7bc0::/48
Signature Algorithm: sha256WithRSAEncryption
ac:a5:61:10:77:ba:53:dd:f2:da:18:e9:28:5d:98:eb:d4:35:
00:8a:31:f6:3d:58:90:9e:7a:33:5a:e7:72:aa:6f:34:b2:61:
15:ac:81:4c:3a:21:e2:e1:19:50:e1:8b:e3:55:60:a5:0b:e5:
52:d2:ab:1c:bd:db:30:b8:99:f2:23:a2:c9:3b:a7:b2:ab:5c:
e2:03:ca:33:8e:66:0c:2e:b0:74:d5:ca:35:4e:5a:ce:53:3b:
c4:f0:56:97:09:47:ad:03:56:15:5d:41:a4:91:71:a0:22:a4:
78:d3:0a:18:25:58:57:1b:c0:eb:f2:99:56:a4:ff:f0:1d:c4:
f6:de:5a:e5:7a:e0:02:0e:90:2c:0f:8c:e9:ad:86:12:2b:60:
c4:a3:c7:20:43:66:32:f5:51:e9:d5:b8:0f:73:f4:02:3f:12:
5e:37:da:cd:b5:69:b5:e1:5c:cd:3b:57:97:4c:e9:11:c1:eb:
e5:c9:4f:d6:ba:96:01:0b:d0:12:c4:0f:1e:46:fb:db:ff:3a:
f4:90:e7:7d:97:7e:a9:3f:7a:24:d4:f0:a2:fa:f3:cf:88:72:
82:a4:6a:a2:0d:c4:43:25:0a:61:13:91:e0:05:d6:83:45:7c:
8d:d5:06:14:53:0f:95:64:d9:b5:d0:90:41:c6:aa:13:7d:d9:
b2:85:39:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:47:34 2026 by rpki-client