
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/E879D5BC4B1911F08F30867AC4F9AE02.roa
File: E879D5BC4B1911F08F30867AC4F9AE02.roa (raw, json)
Hash identifier: qCaE67iInJHl1uaOXWUFk7HB/aS48j+fp1lC079yKZY=
Subject key identifier: 39:28:9E:34:2F:DB:D2:F4:5E:BB:6B:D9:11:49:DA:A8:C7:CE:5B:B9
Certificate issuer: /CN=A91B8A86/serialNumber=245FF45C28652BF7156585A3FD9A7974E5375D03
Certificate serial: 85
Authority key identifier: 24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/E879D5BC4B1911F08F30867AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:08:30 +0000
ROA not before: Tue 17 Jun 2025 01:25:09 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 133113
IP address blocks: 2001:df5:aa40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl
rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:56:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8A86, serialNumber=245FF45C28652BF7156585A3FD9A7974E5375D03
Validity
Not Before: Jun 17 01:25:09 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a3e5ee-805c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c8:29:c3:fe:46:93:95:a7:17:7c:27:c4:1f:
03:33:59:0f:17:54:c2:d3:70:8c:f2:45:6e:9f:81:
56:65:a3:dd:97:3e:05:d6:3e:b6:6f:b0:64:10:62:
87:0e:a2:c7:b5:a6:10:83:b4:43:08:d4:09:96:27:
e6:0a:5c:3d:99:ae:d1:36:eb:da:30:7f:08:4e:34:
ca:b9:4b:32:6b:24:40:02:db:19:66:30:6b:06:2a:
89:1c:40:61:13:5b:4a:09:87:a0:61:74:f0:a5:eb:
9b:4a:15:a7:7b:cd:64:97:12:6a:95:da:bc:22:24:
a0:42:67:ad:1d:3b:63:fb:f0:70:d8:47:93:24:45:
46:14:fd:ff:f1:1b:db:d1:46:2c:9d:70:cb:2e:6b:
24:3a:9c:a4:93:60:80:d4:a4:2a:5a:d7:6c:58:92:
d2:f6:17:73:42:4c:be:3a:b0:bd:ab:d6:d9:fe:1e:
48:a8:41:a3:fc:e1:e1:d9:83:d9:bf:91:5a:35:27:
04:e5:f7:81:21:ee:a7:6b:85:ee:3e:32:bd:dc:d7:
4a:40:66:5a:32:d9:e3:a4:25:37:b4:ce:99:25:4e:
16:99:10:21:6e:fe:8b:7e:91:41:a9:c2:4b:0d:b4:
72:28:a9:be:53:a6:a0:fe:9a:5a:a7:0d:91:6e:46:
89:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:28:9E:34:2F:DB:D2:F4:5E:BB:6B:D9:11:49:DA:A8:C7:CE:5B:B9
X509v3 Authority Key Identifier:
keyid:24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/E879D5BC4B1911F08F30867AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:aa40::/48
Signature Algorithm: sha256WithRSAEncryption
64:1a:d4:48:25:cf:14:66:34:5b:15:40:37:57:85:63:1c:fb:
4b:3c:84:4f:6d:f7:bf:a8:42:aa:ca:b2:c7:11:38:91:9e:8d:
54:51:53:cc:07:b5:46:d5:df:f3:3b:18:99:6a:e7:5d:14:b3:
4b:90:1f:63:f9:4e:ec:e1:be:b5:be:19:51:31:b3:d9:97:68:
08:0c:9b:84:84:d2:d7:4c:be:ea:c3:85:fa:3d:9f:0a:3f:a8:
ac:ba:6f:3b:b3:52:eb:6c:a1:85:c2:57:ac:5f:fa:d0:dc:d4:
4c:2e:0d:17:59:69:de:a4:55:bb:ea:df:7f:44:b3:ad:46:38:
da:6a:99:66:a2:ab:c7:b0:fb:4a:ba:92:f3:fc:46:09:ca:20:
61:17:60:cc:af:d0:d8:d3:c7:37:a3:98:fb:7b:de:2f:9f:5d:
15:f6:2a:34:a2:1b:73:09:a1:ea:ab:e5:be:f9:c2:95:90:ec:
de:61:df:d7:79:47:ec:86:80:74:f7:75:83:6d:a4:f3:79:47:
20:ef:79:69:f9:00:d4:59:69:02:2f:76:af:00:43:37:58:0f:
d0:5c:38:65:00:20:fa:2f:3d:60:9c:3d:fe:1f:4f:ce:eb:e7:
e1:fb:00:9b:59:2e:f1:83:9d:c2:73:94:2d:bb:cd:2c:4b:be:
67:90:5b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:10:30 2026 by rpki-client