
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/F8C50B08201711F0A5D51F16C4F9AE02.roa
File: F8C50B08201711F0A5D51F16C4F9AE02.roa (raw, json)
Hash identifier: 0V0IRbzifSTjNSAVOPWTTktiswJ9KarZ5qkmJcePTMA=
Subject key identifier: 37:17:08:FD:30:0F:00:21:9C:E1:8E:FB:34:96:5F:AF:74:C2:41:B3
Certificate issuer: /CN=A91C66B2/serialNumber=3F31FB5D8EF47DAD38DD92EA1A89E88871403A31
Certificate serial: 9F
Authority key identifier: 3F:31:FB:5D:8E:F4:7D:AD:38:DD:92:EA:1A:89:E8:88:71:40:3A:31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzH7XY70fa043ZLqGonoiHFAOjE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/F8C50B08201711F0A5D51F16C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:03:27 +0000
ROA not before: Wed 23 Apr 2025 07:52:58 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 153782
IP address blocks: 2001:df5:5c40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.crl
rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzH7XY70fa043ZLqGonoiHFAOjE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:35:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C66B2, serialNumber=3F31FB5D8EF47DAD38DD92EA1A89E88871403A31
Validity
Not Before: Apr 23 07:52:58 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3e4bf-52a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:79:e1:8b:1f:70:1c:89:7e:7b:21:cd:77:ca:
fc:60:42:d7:73:d9:4e:eb:9f:ab:03:34:aa:06:54:
04:0a:2a:ef:b9:51:2e:2f:c7:ad:3e:22:95:c1:09:
50:e9:ed:b7:4c:cb:a0:a0:79:6c:99:55:0f:b7:38:
9c:bb:59:e7:8a:74:0c:39:fa:f4:9f:e2:8e:a7:42:
64:e3:fe:04:e7:b8:ea:09:10:a4:e0:1d:d7:eb:b0:
ee:e6:48:b2:e0:95:95:1d:be:27:08:fb:59:60:3c:
dc:95:50:79:85:7e:d1:cf:5a:86:dc:7b:23:32:59:
79:7b:b0:eb:90:7f:cb:96:34:01:1a:8b:d2:dc:04:
44:67:5e:6c:70:e2:1a:fc:07:21:cd:15:41:15:61:
05:c9:9e:ab:17:92:0c:fe:f5:3f:ca:71:c4:0b:bc:
f6:ff:6a:fb:95:8c:57:e1:72:22:5b:6a:6b:eb:e2:
92:bf:85:b6:f0:af:46:00:f2:1d:45:06:1c:e9:61:
99:d4:a1:8a:f4:41:ff:83:4d:18:fb:6f:ec:78:e1:
ec:16:bd:e5:59:fc:0b:c6:a4:6c:cd:da:0a:2b:93:
f7:8e:ba:00:7c:5e:0a:a8:34:83:6c:56:2b:39:3a:
cc:eb:ae:2f:8f:cb:65:bd:d9:08:33:bf:9f:b6:95:
d5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:17:08:FD:30:0F:00:21:9C:E1:8E:FB:34:96:5F:AF:74:C2:41:B3
X509v3 Authority Key Identifier:
keyid:3F:31:FB:5D:8E:F4:7D:AD:38:DD:92:EA:1A:89:E8:88:71:40:3A:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzH7XY70fa043ZLqGonoiHFAOjE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/F8C50B08201711F0A5D51F16C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:5c40::/48
Signature Algorithm: sha256WithRSAEncryption
b7:26:23:74:8b:06:7c:f8:a1:32:2c:00:ef:bc:03:2c:31:b8:
81:67:9d:0c:ce:90:40:9e:27:fd:e7:3f:fe:d5:37:c3:47:26:
3b:bf:55:19:59:ce:34:c3:f0:79:6d:02:7b:a7:83:84:80:37:
76:42:1e:50:3d:35:a0:e5:2d:ac:5e:68:e8:b3:7b:e5:5f:08:
94:2e:63:af:88:2d:c2:47:af:05:d3:41:43:b9:4e:82:6a:89:
b9:56:52:42:79:f8:44:e5:46:2d:8b:78:fd:9a:8c:fc:34:17:
40:28:63:86:19:3e:44:3c:fb:b6:1d:92:d7:7e:28:7f:c2:4c:
f4:35:1b:94:b1:50:f4:fd:76:86:89:df:91:dc:0c:2d:ea:2d:
fe:76:53:93:a3:d2:d5:50:64:f6:46:71:a9:53:a5:89:ec:6c:
18:61:34:b8:e5:71:f6:20:5a:20:55:79:ba:39:bf:52:f7:71:
63:74:fc:58:e0:35:e7:8d:a6:38:c7:16:2f:f4:cb:08:d2:2a:
75:6d:f7:1b:76:c7:04:68:2c:e1:ff:eb:18:fb:eb:62:b0:12:
a8:f3:43:ac:a3:ef:01:eb:28:f1:4d:32:bb:35:cd:01:05:a5:
eb:51:90:fc:27:ac:47:09:ba:38:c7:81:9e:02:28:62:46:c1:
f0:bc:12:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:29 2026 by rpki-client