
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/BACC498C9EFC11EC856FCB09C4F9AE02.roa
File: BACC498C9EFC11EC856FCB09C4F9AE02.roa (raw, json)
Hash identifier: iwYxtbph75PfLUWyrRQ1ZKsYXZDAuMWGHem1wlC1TsY=
Subject key identifier: 83:F3:94:B6:62:AA:7A:FB:EB:EB:65:D1:E0:F1:2C:91:26:E0:FD:80
Certificate issuer: /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Certificate serial: 0B26
Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/BACC498C9EFC11EC856FCB09C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:50:35 +0000
ROA not before: Wed 26 Mar 2025 19:59:57 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 3938
IP address blocks: 2001:218:4000:9::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2854 (0xb26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Validity
Not Before: Mar 26 19:59:57 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a47c6b-1e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8d:01:0e:1b:7b:f0:09:e5:48:ed:05:c0:be:
3a:7e:38:09:54:d4:2a:8a:c5:c0:2b:55:54:15:05:
b5:6e:5e:9d:00:63:58:c3:70:29:e1:bc:0a:6e:27:
5c:0e:d1:f7:88:a0:ea:54:c3:71:03:84:48:b9:a2:
23:46:8e:b0:64:ca:53:fa:f7:5b:ce:5f:af:3f:8f:
55:65:99:32:dd:12:ee:5e:d2:cc:ec:c2:dd:ae:35:
a3:1c:29:8c:fd:8f:5d:d1:61:22:d3:d3:d8:e2:77:
95:fb:6b:15:f2:e1:b4:8d:aa:7e:33:37:88:e6:bd:
8e:39:6e:b1:17:e6:ca:f3:7d:42:b9:22:f5:45:c2:
b8:91:8f:53:bb:39:07:5e:1c:5e:3a:2c:a6:64:ac:
52:82:90:96:b2:84:f6:98:81:49:a4:e9:ec:c3:d5:
46:4b:1b:7c:d6:6b:fd:d0:e6:d0:c8:06:e0:15:7f:
c9:79:3e:bb:d8:5f:9a:80:d7:9a:43:a5:bd:18:74:
0e:32:53:30:db:41:71:09:20:51:3d:51:f0:fb:fd:
3b:53:37:f7:11:54:4c:b8:60:99:17:1d:f6:51:91:
a4:ff:f3:9d:5a:c5:ca:8e:0a:37:13:93:57:9a:f5:
61:3f:2a:ed:87:87:9e:b9:11:b7:c2:b4:4c:a0:07:
62:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F3:94:B6:62:AA:7A:FB:EB:EB:65:D1:E0:F1:2C:91:26:E0:FD:80
X509v3 Authority Key Identifier:
keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/BACC498C9EFC11EC856FCB09C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:218:4000:9::/64
Signature Algorithm: sha256WithRSAEncryption
3d:eb:9e:af:8e:3b:89:ed:79:52:12:a1:ff:14:35:57:58:60:
f6:21:df:b2:16:fe:29:05:a0:ba:f3:3c:9c:05:a3:d2:3c:b5:
34:bb:ce:1b:43:08:74:27:03:52:0c:11:39:5a:4b:74:fc:6e:
67:e8:5a:1d:45:66:59:90:ee:27:85:8c:85:21:bf:49:8a:9a:
c4:d5:f4:c8:57:b0:3d:fb:df:7b:e1:dd:b2:b2:f4:56:e1:12:
20:79:ec:09:40:be:ab:ca:19:4a:f0:86:29:40:3f:56:bb:b9:
bc:ac:51:5e:1c:12:fb:ba:ab:49:01:20:5e:cc:c9:49:e7:4e:
f9:7f:4a:af:11:4f:67:2f:03:7e:ea:e1:fc:67:9d:d4:e4:7e:
25:9c:df:5c:ac:e3:c3:b6:9c:2e:64:24:f8:e1:e8:3f:69:83:
19:86:ed:3c:de:f9:4e:e3:f6:7f:82:dc:15:b0:54:2e:ea:d9:
6b:63:ae:61:72:40:6c:84:71:c8:9c:60:ad:b5:b5:39:37:cb:
a3:e6:4b:ca:cf:25:0e:a4:0c:82:8e:64:02:97:25:48:4a:5a:
ec:83:4a:83:bc:14:d7:eb:f6:d0:f7:f9:0f:60:34:de:32:4a:
c3:db:e5:6c:f6:4e:e4:dc:93:00:e7:b1:00:da:c0:39:18:c5:
a5:ce:d4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:59:00 2026 by rpki-client