
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/25FFA3768BB711EF9C572630C4F9AE02.roa
File: 25FFA3768BB711EF9C572630C4F9AE02.roa (raw, json)
Hash identifier: w+zyCkFV0FZRY4/3WWU9VNMt7oZyJ+HRThPvvwfkALE=
Subject key identifier: BA:EA:4F:BA:4F:48:38:B4:F3:7E:79:83:0D:D4:86:D6:D5:00:59:0D
Certificate issuer: /CN=A91B7709/serialNumber=FBA26E3CD7E08199B3A18F16366A757F04CDF054
Certificate serial: 0107
Authority key identifier: FB:A2:6E:3C:D7:E0:81:99:B3:A1:8F:16:36:6A:75:7F:04:CD:F0:54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/25FFA3768BB711EF9C572630C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:10:26 +0000
ROA not before: Fri 17 Oct 2025 09:42:37 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 153367
IP address blocks: 2001:df4:6bc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.crl
rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:50:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263 (0x107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7709, serialNumber=FBA26E3CD7E08199B3A18F16366A757F04CDF054
Validity
Not Before: Oct 17 09:42:37 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a41ea2-86c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:27:29:65:96:63:4a:18:2a:57:10:3b:d9:66:
05:39:24:4e:7e:87:5f:3e:0f:05:ea:54:76:ad:cc:
9c:99:57:cb:4c:a5:eb:68:9b:26:50:75:ff:ca:4e:
64:f2:02:b4:a0:d8:c0:2d:ab:c5:30:f1:75:da:0b:
c8:11:2b:49:5d:af:ce:db:c9:0e:d8:41:2a:a3:f6:
3a:b8:9c:1d:af:f9:2d:06:7c:5e:4c:05:35:89:22:
2d:0d:e3:c4:5e:92:94:dd:d8:f3:3c:0e:e2:eb:fb:
6d:93:f3:ec:39:5e:e4:f3:dc:e7:ce:54:3b:3b:25:
15:8d:2d:25:5c:86:e2:7a:43:36:e6:8a:aa:79:57:
9b:03:e9:13:05:0e:72:47:57:d8:d4:36:d6:5f:23:
ee:86:1a:69:39:89:57:ea:f4:10:30:58:a9:b0:50:
26:1a:4d:10:d1:a8:8e:84:ab:2c:75:6e:d9:7b:6d:
f5:9a:69:70:61:2e:57:e7:08:38:87:4e:11:7b:ad:
83:7b:1b:73:8e:57:0f:dd:d2:4c:f4:c2:a5:bc:f3:
1e:d7:70:d4:17:cd:27:80:96:61:2c:b8:b3:6a:88:
8b:6e:dd:1a:a9:a6:b1:f8:d0:37:67:59:56:89:71:
06:34:eb:b1:76:8a:49:11:eb:06:ef:1b:8f:3a:a7:
0b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EA:4F:BA:4F:48:38:B4:F3:7E:79:83:0D:D4:86:D6:D5:00:59:0D
X509v3 Authority Key Identifier:
keyid:FB:A2:6E:3C:D7:E0:81:99:B3:A1:8F:16:36:6A:75:7F:04:CD:F0:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/25FFA3768BB711EF9C572630C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:6bc0::/48
Signature Algorithm: sha256WithRSAEncryption
b4:cf:28:1c:a7:74:4d:8e:24:e2:6d:17:78:a9:67:bd:e1:0b:
8b:76:ce:2c:ef:3a:fc:d1:e9:41:45:c0:91:93:4b:e2:ad:5d:
94:6f:66:4e:98:9d:3b:d2:3e:20:d9:f9:5d:e0:e3:10:4d:69:
7e:17:4b:d0:e7:74:00:d9:23:b1:5b:07:c2:51:cb:15:44:b0:
a1:d3:72:9e:4f:6a:39:2b:a6:53:df:8c:50:5d:b1:1a:2e:f6:
4a:94:7e:20:f0:1b:8c:b9:77:af:b3:87:cf:cd:df:10:3d:d4:
a9:e2:bd:c9:e2:96:01:52:d5:87:99:b1:65:6f:82:39:20:6a:
12:d3:69:92:35:ac:d4:7a:63:87:03:ba:79:a9:29:9f:d3:82:
75:28:32:94:7b:a8:dc:74:74:ca:6e:f4:57:8e:ce:56:a5:ea:
f2:93:8d:c0:1e:30:cf:b8:61:ef:f6:12:38:16:22:c1:0e:b2:
16:72:be:85:79:c7:c1:10:45:94:38:b2:a5:71:47:38:28:2a:
6b:41:2c:31:70:57:f9:2a:d4:ab:20:96:09:e8:48:d8:9c:dd:
25:65:b3:8e:ac:5a:0d:8e:6b:de:65:ce:a8:54:8b:22:ae:ad:
90:39:54:39:16:ef:79:f7:2b:d6:eb:fe:81:aa:4e:35:a4:6d:
49:15:4b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:11:22 2026 by rpki-client