
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/2902D956492411EAAC15FB67C4F9AE02.roa
File: 2902D956492411EAAC15FB67C4F9AE02.roa (raw, json)
Hash identifier: Jnv0aGtmJmZtRkDFN/NTaEJWu0H9zmfWsPffd7dQQS4=
Subject key identifier: 6F:68:80:E2:41:BA:41:8E:6F:4C:D4:90:ED:C2:DA:23:55:03:69:1C
Certificate issuer: /CN=A91B9EF3/serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE
Certificate serial: 0B84
Authority key identifier: F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/2902D956492411EAAC15FB67C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:37:55 +0000
ROA not before: Wed 26 Nov 2025 18:39:21 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 45637
IP address blocks: 2001:df5:b000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl
rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:09:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2948 (0xb84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9EF3, serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE
Validity
Not Before: Nov 26 18:39:21 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a45d53-ed8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d1:be:e9:96:cf:45:e5:95:1e:d4:77:ed:1c:
7c:27:0b:99:65:18:bd:75:70:85:ea:0e:4b:2b:f2:
c0:d1:60:b7:80:4a:c3:b4:a0:05:a6:d6:68:24:6c:
3c:22:66:aa:aa:41:b1:f2:89:23:86:1e:2b:d4:9b:
dd:d3:59:66:3e:ab:a1:6c:80:ee:1e:9a:86:f8:8d:
45:67:8f:6c:91:9c:ef:ba:59:f0:01:6e:45:6e:ce:
43:20:3b:37:b4:2b:34:5b:32:e0:70:47:ba:57:c7:
5a:a9:2c:15:38:7a:ad:d3:25:c9:6e:3b:6f:30:13:
3b:af:96:23:c2:62:18:2a:65:fa:33:4e:d8:8e:d2:
4d:bf:07:01:6b:f8:66:76:89:d0:8a:62:23:bb:63:
f5:58:ce:73:25:fe:70:5a:69:4b:88:45:ac:51:00:
3a:b2:06:be:5f:9d:4e:7f:ff:bc:8c:10:98:d0:c5:
2c:7c:38:53:19:64:63:17:21:1d:17:04:56:42:0f:
51:1b:37:44:27:50:96:4a:d7:d5:b7:b6:b9:51:8d:
90:31:b1:3f:ea:a8:de:ea:3c:6e:3c:13:f8:a2:23:
91:b5:03:68:b4:e0:3c:2b:af:f1:f7:86:8e:72:0c:
72:34:28:23:0b:0f:d2:02:21:99:f3:ac:89:d7:fd:
02:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:68:80:E2:41:BA:41:8E:6F:4C:D4:90:ED:C2:DA:23:55:03:69:1C
X509v3 Authority Key Identifier:
keyid:F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/2902D956492411EAAC15FB67C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:b000::/48
Signature Algorithm: sha256WithRSAEncryption
20:3b:2e:f3:d6:06:1b:63:8c:b4:17:02:5b:d3:5f:32:b6:d4:
fe:84:68:94:58:fe:1a:7a:6d:23:62:14:97:44:6c:68:eb:0d:
27:bc:19:eb:7c:1d:c4:50:8e:1e:e0:a0:1a:ea:06:fb:2e:f8:
d0:30:34:af:61:b6:38:1c:92:70:d9:0d:e6:9e:19:70:fd:fc:
59:f4:95:19:f0:45:ab:4f:82:94:53:ac:2e:ce:b0:e0:51:a5:
b5:d5:7e:52:bb:b6:5e:3d:b1:73:6c:fa:38:b6:1e:d7:06:9e:
8b:ea:f7:5c:01:24:a8:59:19:ef:a6:d4:af:b4:81:26:76:56:
63:42:6f:96:eb:fe:fd:f3:7a:0c:9c:db:64:51:ad:ef:74:6d:
41:3c:4a:e7:cd:d3:87:3e:af:e5:34:7e:e8:c1:53:a0:de:e4:
83:9c:2f:42:24:03:54:7b:8d:b8:2b:b7:61:32:45:ec:8b:57:
39:fb:80:fb:de:e5:4d:c1:b1:82:ae:b5:62:ed:fe:49:98:c5:
8f:6e:52:6c:77:56:a1:fb:ef:4b:8c:01:65:7c:e6:c8:a8:69:
26:25:87:d0:79:99:ff:bf:ca:14:d1:b1:c6:38:2e:d7:6f:11:
86:72:f6:3f:03:f0:35:5b:4d:55:86:d8:9e:71:15:d8:1a:22:
4e:f2:fa:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:49 2026 by rpki-client