
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/1BC8D5FCE2B211EE946C6541C4F9AE02.roa
File: 1BC8D5FCE2B211EE946C6541C4F9AE02.roa (raw, json)
Hash identifier: e7eb0/P7VvWmrN+93ev4BsJcsDOxqZB9t5a0IIoKuc4=
Subject key identifier: E9:7D:93:AC:72:E1:13:77:25:D8:2C:00:17:B8:5E:7A:8C:EC:61:3F
Certificate issuer: /CN=A91C779D/serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A
Certificate serial: 0167
Authority key identifier: 91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/1BC8D5FCE2B211EE946C6541C4F9AE02.roa
Signing time: Wed 11 Feb 2026 04:23:49 +0000
ROA not before: Wed 11 Feb 2026 04:23:49 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 152337
IP address blocks: 2001:df3:62c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl
rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:44:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 359 (0x167)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C779D, serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A
Validity
Not Before: Feb 11 04:23:49 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=698c0455-6bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:73:c0:70:c0:0b:c4:06:2b:fd:e4:87:85:09:
22:63:0a:19:40:7e:73:45:af:c2:15:6b:e2:9c:24:
e6:40:0f:6d:6e:a4:7a:36:9e:3c:9d:68:06:b4:db:
71:93:0c:7f:26:de:77:a8:07:5c:f7:65:c6:d0:43:
26:68:e0:64:f2:ee:48:ec:d8:13:b3:49:89:51:2b:
ba:0e:91:d4:8c:9d:3b:08:df:a3:05:3c:db:3f:38:
ed:ac:f0:14:ca:d3:31:14:a5:23:77:3e:89:ce:11:
a2:12:b0:eb:99:96:27:1d:31:89:43:c0:01:86:db:
cc:f6:7a:2b:0d:b1:1c:fd:38:87:31:14:b3:5c:f7:
04:09:68:ed:e2:b3:9e:c1:47:c4:c6:ce:a4:fa:28:
eb:65:62:cb:b0:4c:80:a4:77:27:9c:58:17:88:31:
be:25:3c:7e:c6:0b:34:89:4c:6b:e5:00:6f:92:8a:
7e:1c:7b:d0:42:d4:1e:92:0b:f5:b0:22:36:93:a2:
41:8e:d6:cb:a9:7f:1e:56:d0:b4:c8:ef:2f:ae:bb:
34:a9:b2:44:9a:0e:52:19:8c:e3:b7:23:d7:56:6f:
0b:e1:2c:99:98:9c:bc:10:75:c2:a5:fb:d4:ed:a2:
54:7d:47:7c:f8:83:1f:09:d5:ba:13:af:92:4d:e5:
37:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7D:93:AC:72:E1:13:77:25:D8:2C:00:17:B8:5E:7A:8C:EC:61:3F
X509v3 Authority Key Identifier:
keyid:91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/1BC8D5FCE2B211EE946C6541C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:62c0::/48
Signature Algorithm: sha256WithRSAEncryption
c9:5b:e0:ab:99:59:fd:e3:ec:52:95:91:90:9b:b9:6d:dc:bb:
9a:4f:b5:6e:cc:37:5e:f1:10:ad:d3:a0:5e:2a:6b:50:b2:69:
ae:db:02:0a:69:f5:45:7f:0b:ed:a5:cc:b2:85:18:48:87:c2:
87:22:12:86:7d:f9:05:92:b8:0f:f7:fe:0f:7c:99:a0:a9:e2:
81:29:4d:38:9a:cf:5c:25:06:2e:a6:45:96:e9:3a:59:7a:f9:
85:b8:0d:49:af:9e:0b:d2:37:c4:48:0e:7f:96:c9:2d:e3:d3:
9c:e1:22:64:11:de:93:b8:fe:cb:5b:85:08:fb:d0:bb:13:b7:
33:8c:4b:6c:21:cd:0e:70:ef:ad:49:31:ad:82:5d:c3:20:27:
98:24:2a:04:9e:a6:ba:9c:70:12:37:f2:45:8b:f1:dc:9c:f2:
55:65:6b:49:b6:65:e0:ed:f7:a7:f6:34:26:e0:b0:0d:3e:04:
53:a9:e3:83:ba:79:a3:34:cd:f2:5a:00:24:2c:54:39:b4:44:
12:03:f0:d3:e4:a8:62:e9:8d:ac:dd:3a:44:8f:35:0d:57:b1:
1c:d4:ea:93:f4:9c:40:52:50:fe:80:24:a3:db:de:95:58:3a:
40:31:b2:1b:34:84:4d:cf:0d:a3:be:9c:b1:c8:8c:55:24:19:
e3:38:55:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:27:18 2026 by rpki-client