
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/8A916FDC83D711EAAA5AEC56C4F9AE02.roa
File: 8A916FDC83D711EAAA5AEC56C4F9AE02.roa (raw, json)
Hash identifier: i+DeWSxP+SUrPsRvRk++UVMLgUpYl/0wKKoB8sZiS1A=
Subject key identifier: 5A:BC:2D:CF:CA:33:AC:2B:5B:D1:72:1A:E0:45:28:EF:F9:49:90:05
Certificate issuer: /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Certificate serial: 0B23
Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/8A916FDC83D711EAAA5AEC56C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:50:32 +0000
ROA not before: Wed 26 Mar 2025 19:59:53 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 1613
IP address blocks: 2001:218:3002::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2851 (0xb23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Validity
Not Before: Mar 26 19:59:53 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a47c68-b16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:86:cc:b7:7e:92:ca:87:8d:a9:cf:8e:49:57:
71:1e:f0:e9:be:1e:b9:4e:b9:43:fc:4a:5c:3f:06:
b9:65:f7:33:47:18:41:73:9b:3d:19:ea:6c:ce:95:
cc:3f:db:45:96:6e:dd:69:16:49:be:67:54:87:a4:
18:9b:58:e4:7c:be:e9:39:18:4f:1b:21:4c:45:8f:
e6:97:39:fb:4c:3d:e4:b2:6c:52:df:8f:cd:d5:57:
0f:b0:b0:3f:e3:6d:8d:e6:78:e0:13:50:5f:37:10:
46:ad:a0:60:63:e7:71:60:cf:45:a1:b1:34:63:d1:
fd:07:49:25:ed:0f:a1:a6:eb:b1:d3:ea:00:29:e3:
e4:f6:ea:45:8f:02:08:98:31:ae:dd:46:37:82:ef:
73:0a:a0:7a:4b:88:54:e0:2e:84:f7:ea:dc:b4:f9:
96:09:09:48:65:5d:6e:46:9b:65:82:6f:51:76:80:
98:6a:0c:da:a8:eb:65:55:07:27:4a:5e:2b:c3:96:
6e:13:ff:81:2f:6c:aa:db:ea:b3:34:84:bf:b0:f4:
b2:7b:3e:6b:31:82:38:03:8d:23:fb:d8:1e:a7:7b:
ee:57:3e:77:2a:6e:26:97:87:98:7d:54:4f:ac:d2:
7a:0e:47:03:cc:54:72:d2:ed:5a:c6:0f:62:85:12:
e7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BC:2D:CF:CA:33:AC:2B:5B:D1:72:1A:E0:45:28:EF:F9:49:90:05
X509v3 Authority Key Identifier:
keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/8A916FDC83D711EAAA5AEC56C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:218:3002::/48
Signature Algorithm: sha256WithRSAEncryption
8c:b2:aa:15:72:83:6f:94:70:4d:39:45:63:a1:4e:18:2f:66:
2e:80:b4:3f:bd:0b:5f:98:75:db:87:3e:f7:69:db:c2:9b:07:
d9:44:f2:47:1a:03:52:12:6d:72:bf:99:60:9a:9b:82:03:dc:
fb:57:59:8f:8d:56:24:dc:da:ad:3d:14:1f:14:5b:5e:30:6b:
a9:ff:7f:eb:3e:1e:0c:73:46:95:a9:7d:0f:06:dd:9b:ae:0b:
df:8a:c5:d4:f2:c4:0a:ff:14:29:98:04:fc:2c:a4:04:82:5a:
c5:73:ca:bc:6c:2b:65:b2:c1:73:9a:f0:c0:04:f0:1b:b2:82:
59:4a:69:e9:bc:e6:da:d3:ab:f9:85:be:44:b8:d9:6b:c4:cd:
05:16:76:46:d1:02:41:1a:3a:4d:3d:50:3f:f0:5c:c5:77:66:
00:ad:09:90:ce:c9:32:e2:75:95:59:11:75:b3:5e:a7:d9:3c:
cd:b1:3b:d0:88:52:8d:87:e3:10:a3:cf:dd:a4:eb:18:06:83:
bd:90:45:69:43:51:d5:8e:dd:35:75:82:5c:da:65:2c:33:b5:
d1:17:7a:58:73:f5:81:e0:5b:78:96:6d:e8:bc:b2:60:8b:f9:
01:c8:cc:7c:fc:6e:38:b5:9c:01:6a:5e:8f:d8:c0:3f:cd:de:
15:7e:d8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:17 2026 by rpki-client