
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/8D864528E26911EFB89A9142C4F9AE02.roa
File: 8D864528E26911EFB89A9142C4F9AE02.roa (raw, json)
Hash identifier: yp48JDkpR5TQy5O1NVCB2GBTzUPaSfD8syejqe9qTmg=
Subject key identifier: 7A:76:B6:29:C4:FB:AD:C0:05:D4:70:00:00:B4:2E:2C:B6:53:5A:66
Certificate issuer: /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Certificate serial: 0B29
Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/8D864528E26911EFB89A9142C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:50:38 +0000
ROA not before: Wed 26 Mar 2025 20:00:00 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 4058
IP address blocks: 2001:218:2000:2::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2857 (0xb29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Validity
Not Before: Mar 26 20:00:00 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a47c6e-2f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f4:47:4a:f9:13:3e:00:45:96:32:c1:25:7f:
64:4b:9b:ca:fd:c5:0e:f6:bd:a3:bf:4c:c6:ea:8b:
03:c5:83:bc:16:c6:12:27:f0:36:82:53:01:e2:40:
71:9e:0e:c6:80:f6:79:1f:2b:31:4e:19:a4:d5:63:
48:cf:b3:af:d0:63:fc:5f:7a:29:4a:ee:97:b7:a3:
d7:8d:78:e6:72:af:67:2a:34:8b:86:1f:27:a8:fb:
c2:0a:a4:bc:69:58:7a:20:e5:cb:75:e4:96:58:9e:
d3:09:2f:eb:68:6d:6d:c2:52:ce:26:a4:50:bb:2a:
44:3b:f0:22:5c:91:69:f9:aa:fb:dd:81:9f:7f:a6:
3c:f1:ac:f1:bc:1f:2a:3c:8c:b1:96:7c:94:d2:7a:
5f:27:da:01:e7:51:a5:b0:6b:4d:21:7a:6c:5d:99:
6e:d7:7b:c9:d1:51:d6:e1:42:bd:35:3e:39:f4:21:
a2:54:89:35:28:7b:cd:60:ec:f3:62:79:82:ad:64:
42:2e:b4:2a:a7:c3:14:ea:fd:39:bf:5f:a9:7f:fd:
7e:2d:04:2f:e2:b6:cb:c9:11:66:df:9a:03:ed:a4:
3f:c6:ba:18:2d:b2:c7:0f:b0:f0:d8:05:25:26:0e:
47:76:82:76:8f:8e:d0:5f:67:8d:0f:f2:10:56:f4:
b2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:76:B6:29:C4:FB:AD:C0:05:D4:70:00:00:B4:2E:2C:B6:53:5A:66
X509v3 Authority Key Identifier:
keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/8D864528E26911EFB89A9142C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:218:2000:2::/64
Signature Algorithm: sha256WithRSAEncryption
82:6a:97:dd:7e:eb:7f:0a:26:44:04:24:88:8e:b6:6b:72:32:
95:35:e9:47:99:57:cd:12:1a:31:52:68:e2:58:43:ea:77:91:
06:0c:12:df:76:f1:31:fb:57:97:b0:6a:df:37:32:b7:69:bd:
de:ae:66:0e:32:92:8c:a4:d6:f2:ae:60:04:61:2f:69:d7:29:
72:5c:8c:d7:9e:09:bb:19:9d:85:f5:47:bc:af:43:74:46:71:
ae:1d:ce:bd:3c:a7:7d:f7:3c:ce:16:b2:db:7b:b7:f6:1f:3d:
5f:32:00:37:9f:a0:18:d9:ce:d5:a8:27:bd:1b:e3:0f:1b:d5:
98:c1:44:6d:68:89:0c:87:f6:d6:26:97:c4:c3:83:2e:4c:60:
7b:ca:cc:68:0d:f4:9c:94:d5:7f:37:c4:45:03:1f:37:91:ad:
9d:fa:d2:4d:b2:c2:80:ac:3d:4b:33:fd:a1:8b:8e:f0:e2:81:
dc:66:bb:1b:27:84:ac:0e:66:af:ae:52:9f:49:8f:08:6c:47:
d0:79:65:93:de:1a:c6:3d:94:b9:06:37:33:58:8d:79:3a:12:
c6:88:df:96:d6:9e:27:b9:1a:6d:49:4e:d5:58:a5:a2:24:42:
18:d4:e7:20:d8:d6:f2:43:2c:29:9f:3d:36:05:58:e6:38:bd:
2e:a0:a6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:53:20 2026 by rpki-client