
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa
File: AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa (raw, json)
Hash identifier: C//L8dqksd8wIiYlgl9aF5lle1XW+/2dgZ+Mvuzm+b0=
Subject key identifier: D5:97:A9:01:42:B0:56:FB:90:26:CB:CB:77:E4:A6:84:F6:1B:86:74
Certificate issuer: /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Certificate serial: 08C5
Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:03:31 +0000
ROA not before: Tue 16 Dec 2025 21:17:22 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 10153
IP address blocks: 2406:9dc0:50::/44 maxlen: 48
2406:9dc0:1010::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:34:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2245 (0x8c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Validity
Not Before: Dec 16 21:17:22 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a47f73-840f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1a:67:b6:48:3d:cc:76:03:45:a4:4a:d2:a8:
0d:0f:eb:0f:da:34:08:05:17:80:43:50:51:90:fe:
c1:0c:2c:71:9d:d2:cd:e8:98:b1:8b:3b:5a:f6:87:
39:a9:9c:2e:fe:b8:74:75:db:4f:95:52:99:b8:e8:
4d:c4:d0:0a:48:35:0a:e2:18:8f:a3:02:b9:88:62:
01:4f:65:17:45:31:34:05:18:a1:2d:bd:3b:2a:22:
d0:72:a8:54:0d:2c:72:c0:cd:f0:d1:04:59:54:32:
b6:ad:b4:cb:13:66:b2:50:6b:fc:af:dd:3b:af:5c:
0c:45:de:b0:b0:86:9d:91:51:25:2e:04:19:dd:ea:
c5:0a:a8:45:35:b1:ed:fb:40:2e:13:ff:59:68:4b:
73:9e:7c:c8:d2:8a:44:ee:66:a9:cd:dd:7c:48:1b:
12:c6:87:41:55:fb:6b:ea:32:f5:d3:54:01:5d:54:
4b:97:02:41:d5:52:03:1b:84:92:d3:5c:3d:a4:72:
2e:fd:36:67:9d:fc:6e:35:0b:1a:ca:c1:fb:53:2a:
97:09:39:66:a6:6b:e9:db:a6:e7:fb:5e:4b:57:9d:
2b:be:c5:25:82:be:70:5f:57:b4:75:47:7e:0c:b9:
8f:6f:b3:92:35:26:38:94:2a:84:11:e7:3e:ff:86:
27:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:97:A9:01:42:B0:56:FB:90:26:CB:CB:77:E4:A6:84:F6:1B:86:74
X509v3 Authority Key Identifier:
keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:9dc0:50::/44
2406:9dc0:1010::/44
Signature Algorithm: sha256WithRSAEncryption
75:29:d0:b2:ca:fa:e8:0e:52:5c:5d:d4:e8:25:e9:e5:20:d2:
e3:64:30:7f:90:d9:90:22:0e:0f:01:97:0d:9e:26:8e:f1:3e:
05:ef:1a:15:f1:d5:8d:94:e8:93:6d:14:4d:43:8a:4e:bc:f9:
4c:be:46:e1:f6:51:b1:d8:91:28:66:ae:52:56:c5:a0:07:61:
c9:6b:fb:6a:7b:b0:79:ae:7e:36:bc:6a:b0:12:a2:46:d4:47:
be:83:f6:18:f3:30:86:5a:ab:5d:de:bc:3f:31:7f:c8:43:f5:
9f:cd:11:74:b6:56:1b:9b:9d:69:79:30:0f:6e:15:a5:d3:92:
3f:43:d6:e3:62:8d:c8:3e:1e:20:6d:90:ef:b4:88:6a:71:d7:
ab:a7:6c:af:ad:57:57:fd:f9:a3:30:f0:59:7a:38:e2:41:d1:
d7:60:34:bc:5c:58:bc:b9:08:29:7e:7b:e8:f0:40:87:8c:6b:
0e:82:d5:b2:6d:7a:5e:6a:c8:3d:f7:e4:34:a6:30:f1:09:99:
b6:70:f6:22:7f:23:43:2e:0a:3d:26:ea:e6:32:c7:96:e6:43:
fb:e0:79:63:c0:ce:d2:32:16:3f:5d:a1:a1:11:59:95:ae:c2:
e9:5f:8f:42:63:74:b2:15:f5:4f:7a:39:e9:0a:ce:15:d1:ba:
98:2c:d9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:20:57 2026 by rpki-client