
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/BB3F5AAE799511F098E98265C4F9AE02.roa
File: BB3F5AAE799511F098E98265C4F9AE02.roa (raw, json)
Hash identifier: 7+6x+nkCOZ5eJCqABcReNt2hBYcHFj9EJZ35TbWhwnc=
Subject key identifier: 50:0C:4F:16:E1:0F:63:1D:6D:92:18:F4:FA:F0:96:C3:6E:AB:E9:15
Certificate issuer: /CN=A91BC64F/serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37
Certificate serial: 69
Authority key identifier: 74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/BB3F5AAE799511F098E98265C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:13:28 +0000
ROA not before: Fri 15 Aug 2025 05:07:25 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2001:df5:fd40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl
rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC64F, serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37
Validity
Not Before: Aug 15 05:07:25 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a3f528-7cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f6:2d:d9:cf:04:6b:48:6a:30:9c:2c:8a:9e:
75:27:cf:d7:14:78:c0:bb:12:9a:26:08:d1:f0:56:
69:27:55:5a:f9:78:71:de:97:95:d3:ea:09:7d:0c:
0c:2d:de:ec:ac:0c:0b:e2:12:c7:22:9b:b1:d7:70:
a8:19:9e:fe:e0:75:dd:55:c0:15:d6:d1:d7:65:bb:
dd:17:a2:ef:29:f6:4f:17:dc:51:e0:8b:47:1e:46:
dc:fd:09:c0:3a:ae:4d:d1:68:aa:e0:00:54:3f:37:
52:6b:e4:7c:c6:ae:57:cf:ef:8a:cc:96:00:d8:eb:
9d:5f:d3:c7:8d:c2:6c:c8:6c:3c:74:18:f0:9c:8d:
38:a7:9b:f2:48:18:8b:a4:1e:26:90:82:b9:22:09:
ad:e6:de:bc:7b:7b:04:71:f6:2e:5e:47:23:fb:ff:
59:5e:13:7d:77:e9:ee:91:90:b1:89:ab:95:f8:31:
e2:b7:49:cb:be:cc:45:2d:74:11:e2:9a:30:63:5b:
3e:c2:a0:cc:b0:ef:b6:47:9c:d9:64:39:4c:9e:55:
aa:fe:bf:67:a9:23:a1:6c:87:11:01:71:2e:a9:60:
bd:6d:c5:27:a0:a6:5f:0f:20:0e:fc:13:f8:71:f9:
8c:fb:b4:17:97:ea:f5:d9:db:cf:a1:17:94:fb:ca:
a8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0C:4F:16:E1:0F:63:1D:6D:92:18:F4:FA:F0:96:C3:6E:AB:E9:15
X509v3 Authority Key Identifier:
keyid:74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/BB3F5AAE799511F098E98265C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:fd40::/48
Signature Algorithm: sha256WithRSAEncryption
56:a2:87:d8:f2:fc:00:87:94:27:4c:03:8d:3c:ef:71:18:f8:
31:28:b2:af:52:c6:c7:4a:d8:d3:2a:30:c9:8f:01:bb:13:db:
9a:12:34:07:0c:ae:e8:ca:07:6a:ac:b0:2a:0b:bc:03:5d:ed:
87:5c:ff:b0:2d:08:95:2a:41:5a:9b:d0:52:a3:32:b0:d7:69:
3b:6a:03:f3:fb:63:38:33:cf:b4:7a:df:87:bc:86:34:a0:d3:
f5:c7:64:30:d5:1a:66:a2:c7:2a:81:82:d2:69:b4:99:9d:fc:
2e:06:df:70:8f:7a:7a:ff:ee:b3:1b:97:85:77:28:e2:c8:5e:
53:9f:68:d6:1f:86:dc:b9:be:23:d1:b4:2b:5b:9e:0c:9a:97:
89:49:e4:07:50:2f:af:ff:52:8a:ba:5d:63:4e:94:af:27:bc:
0e:d7:f5:6d:2f:39:4e:60:2c:e2:33:50:da:15:c3:df:5e:fa:
68:3e:ae:a9:58:35:bd:9c:39:64:cf:0f:d8:d8:f0:59:5d:ea:
3b:d2:a5:dc:2c:6e:43:53:98:15:3f:1b:c4:4e:c7:5e:49:b4:
d3:21:11:58:4e:2a:a5:7b:18:25:bf:8a:88:0a:45:60:d6:9e:
59:10:87:c5:7c:64:f6:fa:ae:27:53:4b:32:4c:a2:80:f7:c7:
74:0d:a9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:33:25 2026 by rpki-client