
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/0E0DBEA4327411ED80554E32C4F9AE02.roa
File: 0E0DBEA4327411ED80554E32C4F9AE02.roa (raw, json)
Hash identifier: 5CQDa/aa5UAIsTkpec0rYhloDDXKxfbpTB7+YpevLrw=
Subject key identifier: 3B:A9:50:76:4E:79:E8:C5:89:EB:BB:76:4E:07:E8:ED:0B:F3:55:29
Certificate issuer: /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Certificate serial: 068A
Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/0E0DBEA4327411ED80554E32C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:48:52 +0000
ROA not before: Fri 12 Sep 2025 23:04:14 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 19807
IP address blocks: 2401:4700:3000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1674 (0x68a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE146, serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Validity
Not Before: Sep 12 23:04:14 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a46df4-5019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d6:42:09:7c:e4:0c:08:1a:71:65:42:56:67:
65:d6:cc:0e:68:6e:ee:4a:0c:39:99:dd:bb:d1:42:
72:d7:69:3f:68:ce:96:4c:b6:11:2c:25:b9:75:bb:
fb:a3:15:03:f7:1f:02:0b:92:46:87:91:61:12:58:
78:c4:fa:95:54:69:98:cd:73:63:84:9d:27:3b:8a:
92:83:23:a4:20:fc:fb:8a:85:bb:16:c7:ac:61:96:
eb:2e:12:62:1b:95:9c:66:8f:0e:b1:de:78:0c:e4:
e7:05:ba:ff:fe:cb:f3:79:eb:43:0b:93:b4:43:89:
36:ee:25:94:ff:5a:14:3a:a2:ce:d2:bd:13:4e:ee:
54:4c:f1:59:87:7b:1b:e9:56:b3:b1:00:d8:0a:ef:
05:35:3d:9a:42:a3:16:51:e9:0c:46:28:fb:19:ed:
03:c9:7a:92:74:bf:fb:7e:e6:67:83:0a:e4:1a:8e:
af:5d:e2:42:d2:bc:ec:b8:09:0e:1f:3b:f5:4e:49:
5f:2b:6f:a7:9d:c5:3e:32:f7:42:1f:eb:34:4a:96:
62:03:9e:74:85:4d:e0:22:d7:6c:2b:cf:f4:05:63:
24:4e:2d:9c:08:64:42:23:0c:d0:05:0a:7c:cf:c5:
3f:b7:05:f2:75:b0:4d:ac:9c:d8:9f:56:78:d6:1e:
73:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A9:50:76:4E:79:E8:C5:89:EB:BB:76:4E:07:E8:ED:0B:F3:55:29
X509v3 Authority Key Identifier:
keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/0E0DBEA4327411ED80554E32C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:4700:3000::/48
Signature Algorithm: sha256WithRSAEncryption
59:95:9f:25:99:7b:77:e2:61:11:a4:26:1d:4d:d3:ca:45:fa:
be:cc:f4:a5:fa:b7:96:8b:d1:3e:4e:27:55:c6:03:b2:12:5b:
3b:cb:f4:a4:bd:01:cb:a9:cd:90:f2:b4:ae:85:5a:33:8b:6e:
7a:9e:38:20:d7:a1:3d:33:1e:fb:33:31:52:38:64:a1:dc:e6:
f8:7b:3b:1b:8c:52:a1:61:67:11:c2:3f:53:dc:8a:5f:96:31:
0f:f0:8c:f2:f3:94:22:8c:da:b6:8f:09:e9:0c:ec:8c:4c:4c:
3e:47:e9:b3:e7:e8:1a:71:d3:21:93:0f:bf:e7:00:61:91:1f:
4d:4e:7d:8f:43:a8:27:12:10:0c:f3:73:b3:f6:51:7a:c3:4f:
fb:24:81:c0:5e:12:c4:ee:f3:02:f2:00:b8:7b:7d:ee:0c:31:
db:4f:9e:3e:93:ec:0b:f3:7e:9f:52:6b:d9:09:a2:6e:b5:6e:
e0:83:6b:07:10:db:9e:e6:29:e5:40:6e:a7:39:42:f5:f2:5b:
10:33:46:8a:d2:d1:59:1b:8d:d2:a1:86:ec:e6:b2:8b:ef:b6:
b9:70:c9:29:92:83:c6:36:2b:03:9a:4f:98:61:3e:3d:56:2d:
f7:91:75:d8:2a:a7:12:d8:8b:db:35:ce:72:9e:83:bd:35:41:
4c:2d:f9:1d
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICBoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkUxNDYxMTAvBgNVBAUTKDQzRUEzQTJEQzA4QzVFMUYyQ0Q2ODQxMTY0NEEwNUMw
NzZFODhDMDgwHhcNMjUwOTEyMjMwNDE0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NmRmNC01MDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArtZCCXzkDAgacWVCVmdl1swOaG7uSgw5md270UJy12k/aM6WTLYRLCW5dbv7
oxUD9x8CC5JGh5FhElh4xPqVVGmYzXNjhJ0nO4qSgyOkIPz7ioW7FsesYZbrLhJi
G5WcZo8Osd54DOTnBbr//svzeetDC5O0Q4k27iWU/1oUOqLO0r0TTu5UTPFZh3sb
6VazsQDYCu8FNT2aQqMWUekMRij7Ge0DyXqSdL/7fuZngwrkGo6vXeJC0rzsuAkO
Hzv1TklfK2+nncU+MvdCH+s0SpZiA550hU3gItdsK8/0BWMkTi2cCGRCIwzQBQp8
z8U/twXydbBNrJzYn1Z41h5z8wIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFDupUHZO
eejFieu7dk4H6O0L81UpMB8GA1UdIwQYMBaAFEPqOi3AjF4fLNaEEWRKBcB26IwI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTE0Ni9FNDFBQjQyQUJE
MzExMUVCQkZDM0Y5MjFDNEY5QUUwMi9RLW82TGNDTVhoOHMxb1FSWkVvRndIYm9q
QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1EtbzZMY0NNWGg4czFvUVJaRW9Gd0hib2pBZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkUxNDYvRTQxQUI0MkFCRDMxMTFFQkJGQzNGOTIxQzRGOUFFMDIvMEUwREJFQTQz
Mjc0MTFFRDgwNTU0RTMyQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAFHADAAMA0GCSqGSIb3DQEBCwUAA4IBAQBZlZ8lmXt34mERpCYd
TdPKRfq+zPSl+reWi9E+TidVxgOyEls7y/SkvQHLqc2Q8rSuhVozi256njgg16E9
Mx77MzFSOGSh3Ob4ezsbjFKhYWcRwj9T3IpfljEP8Izy85QijNq2jwnpDOyMTEw+
R+mz5+gacdMhkw+/5wBhkR9NTn2PQ6gnEhAM83Oz9lF6w0/7JIHAXhLE7vMC8gC4
e33uDDHbT54+k+wL836fUmvZCaJutW7gg2sHENue5inlQG6nOUL18lsQM0aK0tFZ
G43SoYbs5rKL77a5cMkpkoPGNisDmk+YYT49Vi33kXXYKqcS2IvbNc5ynoO9NUFM
Lfkd
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:44:17 2026 by rpki-client