
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C78A7/046718A8B62111F0A749211FC4F9AE02/2F5B1648B62311F0A558E184C4F9AE02.roa
File: 2F5B1648B62311F0A558E184C4F9AE02.roa (raw, json)
Hash identifier: h4+6nnouUDpqQZtkwLKdDSggiiZg1Tk83XpW2x06D00=
Subject key identifier: 41:0B:D5:8E:D4:30:0C:B5:DA:32:61:C8:35:63:4C:3C:2D:FE:AF:62
Certificate issuer: /CN=A91C78A7/serialNumber=33263EB246F54D4CA3FC9089F4C03705EEEA2C86
Certificate serial: 43
Authority key identifier: 33:26:3E:B2:46:F5:4D:4C:A3:FC:90:89:F4:C0:37:05:EE:EA:2C:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MyY-skb1TUyj_JCJ9MA3Be7qLIY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C78A7/046718A8B62111F0A749211FC4F9AE02/2F5B1648B62311F0A558E184C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:09:51 +0000
ROA not before: Fri 31 Oct 2025 06:31:08 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 154332
IP address blocks: 2402:35e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C78A7/046718A8B62111F0A749211FC4F9AE02/MyY-skb1TUyj_JCJ9MA3Be7qLIY.crl
rsync://rpki.apnic.net/member_repository/A91C78A7/046718A8B62111F0A749211FC4F9AE02/MyY-skb1TUyj_JCJ9MA3Be7qLIY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MyY-skb1TUyj_JCJ9MA3Be7qLIY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:50:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C78A7, serialNumber=33263EB246F54D4CA3FC9089F4C03705EEEA2C86
Validity
Not Before: Oct 31 06:31:08 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a3d82f-9bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:82:73:35:c4:95:3b:82:d3:3f:fb:81:64:0f:
6b:a7:08:e8:f7:9b:ae:d9:99:0d:dc:4c:00:07:50:
fc:01:1c:45:43:6a:63:c3:77:d8:bf:aa:6c:0e:a6:
dd:ca:7b:0a:fd:9c:63:64:57:b6:93:f2:ef:37:cc:
ab:fe:3a:98:49:a8:d8:cf:92:29:b6:7c:2f:e4:16:
c8:a3:5f:2f:ae:a9:fd:14:bf:8f:23:02:36:38:9f:
68:f7:3b:90:15:c9:28:ea:b8:c3:84:7f:24:33:f5:
84:17:ca:da:7f:4e:e5:bc:be:a1:5d:11:6a:8e:5f:
11:df:2c:97:fd:8c:61:66:3c:33:60:a0:14:8d:72:
d2:89:69:26:cd:bc:41:41:f3:6c:e0:93:27:be:fa:
26:1d:90:f0:d7:bd:42:ab:9e:15:71:0d:43:7f:b0:
8c:6a:db:1d:96:b6:bc:b8:45:ca:4e:c9:aa:d9:2b:
b9:65:06:ba:89:5b:2e:91:04:a2:1c:b2:01:05:c9:
be:0c:d2:5d:f5:38:0c:51:22:7f:12:62:97:47:c7:
1f:ee:77:08:6c:87:c1:1a:9e:5b:15:7b:59:fa:d7:
31:ec:a0:3e:a7:07:54:d1:37:d9:ab:61:51:ad:61:
7c:02:ac:d6:3c:58:f5:0b:5e:18:ce:98:c6:d8:56:
9e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0B:D5:8E:D4:30:0C:B5:DA:32:61:C8:35:63:4C:3C:2D:FE:AF:62
X509v3 Authority Key Identifier:
keyid:33:26:3E:B2:46:F5:4D:4C:A3:FC:90:89:F4:C0:37:05:EE:EA:2C:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C78A7/046718A8B62111F0A749211FC4F9AE02/MyY-skb1TUyj_JCJ9MA3Be7qLIY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MyY-skb1TUyj_JCJ9MA3Be7qLIY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C78A7/046718A8B62111F0A749211FC4F9AE02/2F5B1648B62311F0A558E184C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:35e0::/32
Signature Algorithm: sha256WithRSAEncryption
2a:a2:97:e2:9a:0c:08:2f:e6:b8:35:42:9c:49:46:80:d6:93:
d5:81:7d:6b:5e:37:ec:bd:4b:7e:d3:f5:58:75:18:73:f0:48:
ca:0a:f1:a4:d3:8b:7e:aa:30:9d:4f:1e:4c:f5:ac:8a:56:f0:
26:8f:f1:fe:8d:3c:d8:e9:27:2c:14:f5:ac:06:c1:85:72:c4:
34:68:95:1a:f8:b8:c4:c3:2f:6b:fe:3f:00:90:fc:9b:be:7e:
ea:de:c9:19:76:11:df:49:ff:62:99:77:76:16:a3:5d:1d:a6:
32:14:63:2c:27:fe:e5:a8:65:0c:c9:73:14:06:62:f0:ec:e0:
92:3c:77:3b:f1:a9:0f:f0:95:98:7b:88:4b:c2:7a:97:f9:ae:
9c:5e:44:29:ba:d7:f1:36:12:17:30:40:35:13:10:a9:fd:fb:
cb:b6:f2:87:84:80:df:61:c0:2b:a4:71:b8:d1:ec:d7:9f:a6:
50:e4:32:68:b8:f3:a5:30:c5:85:83:f3:a2:8e:2b:e6:67:b4:
3f:5b:20:af:1b:2e:05:68:d3:21:09:94:56:b0:46:cb:96:6b:
fa:86:8c:65:ba:24:c3:12:e3:79:61:2c:b9:a2:67:59:4a:bd:
b1:dd:d5:7d:e9:de:45:48:03:57:ba:c3:78:9f:18:b8:ef:6d:
86:32:19:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:34:17 2026 by rpki-client