
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/F853742A5A9911EDA14F453FC4F9AE02.roa
File: F853742A5A9911EDA14F453FC4F9AE02.roa (raw, json)
Hash identifier: JJGT3Nb5VCKirzUE1ySYS3IWcoQmYybrBNJaHh+4Dao=
Subject key identifier: 64:13:E3:2B:87:1C:54:41:B9:94:F9:DD:97:DB:C7:91:E9:C9:38:37
Certificate issuer: /CN=A91B9C74/serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40
Certificate serial: 028F
Authority key identifier: 00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/F853742A5A9911EDA14F453FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:29:51 +0000
ROA not before: Thu 27 Nov 2025 00:18:05 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 132608
IP address blocks: 2001:df1:5cc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.crl
rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 655 (0x28f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9C74, serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40
Validity
Not Before: Nov 27 00:18:05 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a44d5f-857c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f3:02:07:6c:15:10:00:0f:c8:17:9b:41:3c:
ac:90:91:c0:5f:eb:f5:4c:e4:c0:e7:83:f9:14:05:
08:b6:50:5a:6c:ce:84:25:fb:07:9e:4d:71:9e:8c:
d2:7b:a6:d8:99:dd:c6:7d:0e:af:5a:ba:db:3b:53:
72:09:88:6f:05:1f:cd:0a:d0:07:d3:7f:c3:7f:3a:
65:08:90:23:1f:87:39:5a:25:1f:0b:26:9c:93:a4:
bb:34:dc:13:27:6a:60:14:0a:f3:00:d9:ca:42:37:
68:ab:d4:69:5d:00:f1:b8:4d:f6:46:ad:f4:14:dd:
90:1d:b6:35:f8:52:a2:6e:3e:7c:e9:c6:e9:40:a1:
df:ba:52:4f:12:10:0f:12:55:e5:d6:4a:d5:f0:20:
f7:90:4b:69:db:52:d2:c8:00:a7:9b:bc:23:f3:f7:
fb:2d:15:47:b1:4f:6b:1a:bf:61:ee:01:32:d4:d5:
dc:e3:af:2c:e4:45:61:a4:3c:fe:4e:bc:47:89:d8:
40:f3:68:18:f9:90:98:0c:90:a9:1a:ee:60:d9:86:
75:16:46:70:ad:56:53:d6:ab:9a:08:29:91:37:16:
26:74:cf:e5:42:c9:6e:d7:46:80:7c:83:54:e1:ee:
8a:d1:1c:df:f3:0e:81:94:3c:1b:bd:3a:7d:07:4c:
4c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:13:E3:2B:87:1C:54:41:B9:94:F9:DD:97:DB:C7:91:E9:C9:38:37
X509v3 Authority Key Identifier:
keyid:00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/F853742A5A9911EDA14F453FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df1:5cc0::/48
Signature Algorithm: sha256WithRSAEncryption
1d:ae:8e:cd:de:4a:ac:7b:9e:91:57:9a:97:59:e9:20:4c:f3:
c8:42:90:4d:b3:41:a3:e4:0f:91:2b:d0:18:fe:0b:34:26:db:
ba:df:71:05:0d:31:40:9d:b2:fd:ee:2e:a0:4d:e8:d7:99:cd:
7a:06:a0:89:c6:b5:d8:27:27:d4:d2:0c:8a:03:c3:d6:aa:bb:
46:cd:9b:40:00:a7:6b:f4:f4:40:6d:69:13:b2:69:dd:6b:85:
58:6c:4a:6e:6d:73:e5:0e:c5:2f:ff:ba:b4:df:29:6f:b6:d9:
00:30:0f:2b:32:f9:27:b8:cc:d0:f8:4b:e3:ca:3c:68:de:35:
f3:52:0c:15:5b:25:69:0e:3c:11:35:e1:67:b7:9a:21:15:8a:
60:35:f4:37:2f:a6:7c:2a:9b:84:df:d0:e0:84:4a:23:c4:c0:
a1:7c:5f:7f:42:19:db:47:07:99:1b:a1:98:0b:d4:31:4a:ba:
0c:8d:00:45:c7:1a:e4:f1:99:2b:14:3d:ce:e4:30:00:6a:ac:
86:5d:aa:02:3b:4f:46:5c:40:b2:42:af:e4:0f:81:a0:3c:17:
f1:ea:97:c2:03:ba:bc:76:7d:2e:a3:4c:da:06:59:96:2c:27:
24:80:a2:00:1a:ad:7c:3b:40:0a:5a:e7:55:62:3b:ed:97:a5:
30:be:eb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:39 2026 by rpki-client