
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/9074B02EB13D11EF9EFDE433C4F9AE02.roa
File: 9074B02EB13D11EF9EFDE433C4F9AE02.roa (raw, json)
Hash identifier: qQ+iMBsnI6+Y33rIWpsuvyD5YPUXPAMZYZLTuJsOPi8=
Subject key identifier: 21:B0:AC:19:3E:08:92:33:FD:84:71:70:7E:C6:73:33:CE:0A:77:AC
Certificate issuer: /CN=A91B8AC8/serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91
Certificate serial: F4
Authority key identifier: E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/9074B02EB13D11EF9EFDE433C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:49:10 +0000
ROA not before: Mon 15 Dec 2025 05:25:16 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 9433
IP address blocks: 2001:4530::/32 maxlen: 32
2001:4530:1::/48 maxlen: 48
2001:4530:2::/48 maxlen: 48
2001:4530:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl
rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244 (0xf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8AC8, serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91
Validity
Not Before: Dec 15 05:25:16 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a419a6-cdcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6b:84:a6:a9:05:34:2a:64:eb:e4:9e:83:9a:
e3:55:e4:f6:b2:10:8f:4a:c8:51:54:2e:15:5c:c8:
34:c6:75:72:c1:13:54:a3:d7:22:6e:2e:05:d4:b3:
0f:0e:3d:cf:7f:84:23:3a:b4:c3:b5:8b:ae:b9:66:
af:ef:95:61:ac:6a:fe:69:e4:ba:d1:f9:57:b7:32:
69:ae:68:3f:9e:04:a7:3f:b1:13:fd:42:08:a3:06:
8e:f3:97:d6:ca:2d:53:9b:a4:60:d5:05:72:ae:f9:
fb:2d:ab:b4:ae:54:da:37:f2:02:f0:c2:34:7b:bf:
96:ad:a5:ad:9a:e5:73:cd:d1:ec:74:b7:16:50:ca:
13:25:53:61:04:d9:c9:0a:21:f1:7c:ee:b2:72:f6:
8c:62:a8:de:b0:b2:53:3c:9e:28:f4:2d:4f:0c:3d:
f0:91:32:43:59:aa:1b:55:6f:10:0e:f6:78:f0:bd:
3c:b4:b4:95:95:8b:14:50:d4:c0:cc:cd:b5:67:cb:
39:be:ef:57:d5:9a:45:54:9d:70:dc:51:8b:71:7d:
56:a2:2b:b8:b9:73:37:73:29:42:de:d4:d4:76:d2:
68:e6:64:39:71:23:23:03:14:9d:c4:6d:d9:5f:24:
c2:44:71:a3:9a:7f:fe:49:3f:8d:da:2b:7c:a9:87:
04:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B0:AC:19:3E:08:92:33:FD:84:71:70:7E:C6:73:33:CE:0A:77:AC
X509v3 Authority Key Identifier:
keyid:E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/9074B02EB13D11EF9EFDE433C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:4530::/32
Signature Algorithm: sha256WithRSAEncryption
10:2f:b8:96:cf:f0:a6:a9:be:b1:28:2d:27:af:be:b5:fb:cf:
7f:3e:f9:48:48:26:82:ef:6f:17:ef:ed:cb:d1:9b:86:31:39:
02:c1:e9:0e:c2:13:2b:4a:ce:7b:c5:ed:7e:aa:e1:74:76:2c:
e8:40:22:d5:d5:9a:cd:35:c5:f1:d4:b6:fe:fc:c0:2b:89:20:
29:bc:3f:c2:18:f4:ad:23:51:dc:6d:e6:16:03:be:68:36:82:
1c:5e:88:a1:b9:09:57:5a:e4:1f:c9:ab:81:63:ee:25:1c:26:
a0:49:fa:71:66:64:02:d9:e6:af:d5:1b:35:7f:45:98:88:60:
f1:82:2f:a3:86:2c:eb:7c:81:00:bd:c6:fe:01:57:c4:da:c6:
ee:e4:6e:b7:4d:d8:8d:33:97:34:8c:72:33:04:63:3a:60:87:
61:48:46:66:3b:9e:11:eb:5d:1b:d7:3e:50:61:ae:cc:71:f7:
24:ea:f3:16:2b:67:3b:85:b4:25:21:35:c4:91:79:71:17:01:
9a:b8:ff:a9:8e:f1:3f:24:d5:84:f3:0a:bb:b5:78:45:10:7e:
a0:b4:b4:ea:40:a0:05:27:3c:a3:2d:8a:94:90:3b:ed:9f:f9:
53:e4:0e:13:67:83:fc:d3:e8:5e:78:59:a8:85:a3:0c:b7:bf:
dc:d2:ba:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:58:44 2026 by rpki-client