
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/321296E212E711F1ABE68E4F0D3D8C67.roa
File: 321296E212E711F1ABE68E4F0D3D8C67.roa (raw, json)
Hash identifier: fLV89AyiqIKtRsF5UkgoIwTy20rGQz1nx0VUvYpw5g0=
Subject key identifier: 73:CF:46:17:79:FD:E6:93:E4:0C:AF:2D:C1:CC:78:CC:31:78:6B:4B
Certificate issuer: /CN=A91C7AB9/serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6
Certificate serial: 01B3
Authority key identifier: 59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/321296E212E711F1ABE68E4F0D3D8C67.roa
Signing time: Sun 01 Mar 2026 16:12:44 +0000
ROA not before: Fri 27 Feb 2026 10:53:46 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 212032
IP address blocks: 2401:f6a0:2000::/36 maxlen: 36
2401:f6a0:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl
rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:10:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435 (0x1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7AB9, serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6
Validity
Not Before: Feb 27 10:53:46 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a4657c-3182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:4e:c8:ee:10:63:8b:f2:c6:ca:48:aa:31:
c6:3a:45:4f:c8:64:e4:f9:da:c6:4b:32:50:68:07:
99:ef:8e:84:65:db:ef:e3:6e:7e:5c:99:77:51:2b:
d7:58:29:46:3d:7c:d7:6d:2e:14:bc:2d:19:95:29:
be:b8:5b:f7:33:f0:6f:87:1b:e9:77:72:b8:13:4c:
0c:f6:75:0e:97:63:29:db:fc:62:4c:31:54:ec:e1:
3a:ac:c4:26:22:3a:1d:f7:2b:27:5e:e5:6b:5a:eb:
01:bf:31:e9:dd:00:70:16:ca:c5:30:ab:9d:85:0f:
2b:e7:84:78:ef:fb:fe:2f:ed:cc:86:b3:30:56:51:
50:5c:30:2d:06:af:d3:49:59:48:7f:77:40:70:be:
0f:be:86:27:82:00:50:23:73:b0:88:96:7b:31:0a:
03:ad:65:e9:1e:d4:6c:63:8b:40:7d:2e:a0:49:90:
d2:c5:f0:a1:99:67:d8:85:03:9c:22:03:b0:01:a4:
20:13:e1:a9:9e:e6:35:ea:ef:dc:00:62:71:b6:e4:
a4:c0:bd:cf:ad:6d:88:ef:4d:20:89:81:11:fa:53:
b8:76:f5:01:d1:78:ed:eb:90:7d:6e:89:7e:c9:01:
06:50:8f:81:97:0b:a8:d5:3b:3f:b2:a8:5f:2c:ae:
a9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CF:46:17:79:FD:E6:93:E4:0C:AF:2D:C1:CC:78:CC:31:78:6B:4B
X509v3 Authority Key Identifier:
keyid:59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/321296E212E711F1ABE68E4F0D3D8C67.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:f6a0:2000::/35
Signature Algorithm: sha256WithRSAEncryption
45:b2:28:d2:31:60:37:38:68:f4:d7:f4:1c:02:79:88:0e:8f:
43:e2:86:ff:92:37:ef:79:d3:0f:ef:fb:f6:0f:d1:12:bd:51:
df:4d:b4:cb:a0:f2:e2:15:c8:cb:b4:8e:33:cc:80:45:c4:09:
74:c6:af:10:c5:6a:79:7f:fb:5e:9c:08:0e:ce:fb:03:9f:8b:
09:aa:29:c0:c2:f8:58:0c:c8:9f:24:9e:51:62:f8:e5:bc:81:
8d:0f:f7:57:19:23:a3:c3:e3:cf:cf:9c:47:f5:01:0f:68:c6:
36:b3:fa:fa:3c:33:b7:ad:d1:78:c0:05:e9:6a:99:b3:ab:37:
0e:7d:1d:25:6a:b1:2e:05:52:c8:d4:5c:a5:48:07:6c:6c:4d:
bd:47:e6:78:f1:61:af:9c:fc:25:08:26:f6:04:f0:77:26:b2:
5a:c0:64:b3:f3:ab:2f:5d:9f:96:94:f7:13:af:11:4d:1c:8c:
6e:df:d5:cd:9c:71:d0:e9:50:21:a7:79:b4:fb:72:e3:92:ca:
b5:9c:67:a5:62:e6:8a:eb:81:c2:eb:56:7e:f8:24:1c:4b:14:
00:c6:fa:cf:49:e3:e3:dd:10:7a:2d:63:86:93:ed:a1:53:31:
6f:36:ae:58:e5:78:55:4a:61:15:60:5a:69:0a:06:e6:a6:3b:
e4:a9:38:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:09:04 2026 by rpki-client