
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/1E0CBABEC99B11F0BD75C310C4F9AE02.roa
File: 1E0CBABEC99B11F0BD75C310C4F9AE02.roa (raw, json)
Hash identifier: XT1f5iHkb8m++28/fpiYZLplpEUsgc7c8BPU0gRXDvg=
Subject key identifier: 21:8A:78:9E:43:80:69:53:CE:52:98:0B:7E:EB:D7:DE:E6:96:FA:E7
Certificate issuer: /CN=A91C68AD/serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721
Certificate serial: 0119
Authority key identifier: D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/1E0CBABEC99B11F0BD75C310C4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:58:00 +0000
ROA not before: Tue 09 Dec 2025 03:42:59 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 24511
IP address blocks: 2405:e40:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl
rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 12:58:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281 (0x119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C68AD, serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721
Validity
Not Before: Dec 9 03:42:59 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a58958-d794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:4e:99:49:76:ec:67:ae:4f:bd:e7:c3:5d:
92:a0:cf:ad:6c:f9:96:6b:fd:0c:dd:dc:5a:66:de:
71:a7:fa:65:fa:49:fa:53:a3:c5:91:f7:cf:72:25:
80:56:61:ac:ca:da:a2:77:3c:13:0a:f9:25:93:32:
b0:99:84:c0:28:4b:d2:3f:61:25:74:40:c3:6b:09:
07:04:37:bc:90:a2:32:fa:13:52:e2:67:d7:53:30:
df:ed:10:1a:6b:85:a8:c9:8e:d3:70:68:a3:e7:db:
2f:58:be:c2:9b:4f:31:8b:ed:3e:2a:a4:f9:94:18:
fc:8e:a0:f4:21:f7:96:ea:93:fb:4a:1d:34:74:7e:
ca:ae:08:33:14:86:ec:d0:0d:2b:4b:59:96:e9:57:
41:a8:c3:f3:69:32:f5:9c:2b:2b:d9:a5:dd:77:ed:
7e:d0:ad:27:89:ec:31:93:d8:18:a3:c2:7e:1e:82:
a9:01:f9:d0:86:1b:97:c9:d7:30:d5:ef:3f:72:9e:
4b:47:23:e3:36:79:73:e4:d6:d8:a3:3a:e7:31:08:
e8:28:0c:06:2a:0e:7b:2a:b5:8e:11:17:a2:95:19:
3f:ce:a6:fb:54:b8:e6:62:c2:16:b6:76:ba:49:b8:
07:13:aa:2e:00:4f:c2:e3:a0:ac:66:0b:b8:08:ca:
06:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8A:78:9E:43:80:69:53:CE:52:98:0B:7E:EB:D7:DE:E6:96:FA:E7
X509v3 Authority Key Identifier:
keyid:D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/1E0CBABEC99B11F0BD75C310C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:e40:8::/48
Signature Algorithm: sha256WithRSAEncryption
56:88:2b:7e:9d:30:bb:26:dd:d7:c5:e5:54:45:13:cb:b8:85:
f2:1a:df:fe:af:48:6a:19:4e:ac:11:0a:ec:1b:c3:25:b3:b5:
e7:03:47:11:2a:40:2c:44:b8:5b:02:63:b9:96:86:91:43:51:
e5:3a:57:10:5e:12:2a:86:ea:2f:ab:66:3b:fe:4d:91:61:c3:
b4:fb:64:a8:9f:cc:f3:d5:e6:46:ca:a2:8f:90:18:77:be:7d:
e4:0f:c9:81:ce:73:2b:53:ab:63:f7:40:4f:48:8f:fb:81:cd:
3e:ef:2c:25:b5:b6:44:8a:99:ba:29:3e:ee:81:75:88:26:78:
62:6b:d6:ff:33:1a:2c:b5:5d:d3:fe:90:0d:d9:74:55:f3:b4:
b8:a6:5f:8c:e1:b5:78:3d:11:16:08:d2:68:9d:dc:f1:45:77:
8c:ec:e3:67:5b:3a:96:f0:90:e9:52:3a:9d:c3:8a:de:a9:59:
1b:e4:bd:44:c4:7a:1c:3d:83:ad:83:f5:0e:01:e2:db:a7:4e:
48:a7:53:52:fa:04:df:ba:45:0d:cb:b9:72:06:06:cb:84:e6:
d8:be:28:5c:66:8b:f2:20:52:8e:80:15:ea:b9:2e:ee:8e:d8:
2f:e4:0e:16:5f:c6:1c:b6:7a:b3:d3:28:4d:65:bf:c3:57:f6:
c0:6f:81:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:12:46 2026 by rpki-client