
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/C4C0B9160E4C11EF82F91F39C4F9AE02.roa
File: C4C0B9160E4C11EF82F91F39C4F9AE02.roa (raw, json)
Hash identifier: pFSB5uyyZRpDB24o7Ymq/uD7pq5OT7KBsmc0xf1jL+g=
Subject key identifier: 03:DF:55:45:4E:63:39:0F:6E:8F:34:63:58:01:AF:4A:2C:0E:64:FB
Certificate issuer: /CN=A91C6CAF/serialNumber=E015F393E7A323C3F4F1BFE26E5BFE040E35E553
Certificate serial: 0194
Authority key identifier: E0:15:F3:93:E7:A3:23:C3:F4:F1:BF:E2:6E:5B:FE:04:0E:35:E5:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BXzk-ejI8P08b_iblv-BA415VM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/C4C0B9160E4C11EF82F91F39C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:02:47 +0000
ROA not before: Tue 27 Jan 2026 03:23:10 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 152334
IP address blocks: 2001:df3:c940::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.crl
rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BXzk-ejI8P08b_iblv-BA415VM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 404 (0x194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6CAF, serialNumber=E015F393E7A323C3F4F1BFE26E5BFE040E35E553
Validity
Not Before: Jan 27 03:23:10 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a41cd7-0575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8b:3e:a2:06:74:16:d8:83:d5:54:3d:ec:ea:
3e:fd:28:14:56:1b:2f:53:e8:45:24:d9:32:dc:f2:
ad:f6:8c:9e:18:ec:8a:33:77:94:83:77:d5:99:ea:
72:65:d9:06:1d:c6:d1:7f:8c:24:20:21:36:00:d0:
a2:7c:1f:24:4b:cc:22:06:2e:42:c3:45:15:91:7c:
42:eb:a4:1a:c2:9e:fc:69:2b:11:6c:07:f7:a0:de:
88:32:45:42:00:17:cc:fa:50:b0:ef:a0:f3:b1:74:
d7:32:ef:cd:10:41:cc:a7:f0:b5:5f:65:e8:df:e2:
35:f0:29:01:8a:a2:9c:11:66:12:b9:1f:c8:ad:d0:
30:6e:33:9a:78:ae:40:29:94:cb:fa:e4:b2:77:c7:
4c:da:ca:de:f7:e8:4c:a7:7f:34:8c:46:a1:4f:a4:
45:43:c3:35:2b:38:6b:be:a5:d3:c1:46:3d:a0:e1:
0b:b5:15:24:48:d3:e6:99:4e:78:f6:bb:89:e1:5d:
ab:36:c5:73:75:23:a2:f8:53:34:d1:a8:f3:e5:ee:
1c:8c:72:b7:26:2d:35:57:40:dc:8e:a2:12:48:b0:
31:2d:d4:e6:42:e6:e9:d7:39:b2:59:ee:ed:fd:42:
c4:ba:4c:78:ee:df:c5:a0:62:4c:94:da:3e:f2:6f:
bb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DF:55:45:4E:63:39:0F:6E:8F:34:63:58:01:AF:4A:2C:0E:64:FB
X509v3 Authority Key Identifier:
keyid:E0:15:F3:93:E7:A3:23:C3:F4:F1:BF:E2:6E:5B:FE:04:0E:35:E5:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BXzk-ejI8P08b_iblv-BA415VM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/C4C0B9160E4C11EF82F91F39C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:c940::/48
Signature Algorithm: sha256WithRSAEncryption
c0:ca:3e:41:ea:10:45:ea:d5:16:8f:c3:15:db:f2:ca:9e:b1:
cc:f3:46:07:80:7b:28:36:44:5a:0d:c4:46:86:ce:f7:b4:a6:
4a:25:5c:f8:60:9d:34:86:64:15:ad:8d:97:1b:60:52:17:4d:
f7:0b:ad:49:a5:49:93:17:34:d8:35:15:6a:51:e5:18:87:08:
ab:56:a5:67:2e:ca:25:1e:7b:75:50:ec:0b:dd:4a:1e:e6:20:
ab:be:09:dd:7b:a1:4e:17:fb:bb:12:73:d0:8c:70:db:61:45:
8c:3a:d8:7e:af:95:98:09:3e:f8:9c:a0:b6:0a:29:bd:dd:d0:
3b:4f:1f:a0:a0:56:51:e2:9b:f5:93:f7:65:76:69:88:0a:20:
ff:f8:81:c3:68:10:dc:e8:79:fe:77:5f:2b:87:5d:43:c1:7b:
be:99:7d:00:86:12:87:1c:db:e4:29:f5:3e:48:62:a8:1e:be:
8a:0b:11:2e:0d:ec:60:3b:22:21:48:c3:0a:36:2f:95:49:d9:
58:52:16:78:34:e8:8c:69:57:3f:4f:8f:35:5b:c0:c3:d5:e9:
b3:a8:31:61:79:d7:be:25:14:38:f7:62:3f:cb:51:07:51:28:
59:6c:8b:b7:6a:22:ca:93:1d:16:eb:f1:59:50:ec:e1:ed:b3:
8a:a7:51:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:13:28 2026 by rpki-client