
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/F6AFB162F66B11F08367D08E6F6F56BC.roa
File: F6AFB162F66B11F08367D08E6F6F56BC.roa (raw, json)
Hash identifier: rB+Tmv1oKzF3mo1fo+ketSQWRb1QMSjxzFBO+4UsFGI=
Subject key identifier: CE:D3:C4:1E:82:CC:0B:11:06:31:0E:5C:A6:BC:CE:FD:42:A8:70:77
Certificate issuer: /CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB
Certificate serial: 0792
Authority key identifier: 0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/F6AFB162F66B11F08367D08E6F6F56BC.roa
Signing time: Sun 01 Mar 2026 17:04:35 +0000
ROA not before: Wed 21 Jan 2026 01:53:21 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 213618
IP address blocks: 2401:bb80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl
rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:09:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1938 (0x792)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7C04, serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB
Validity
Not Before: Jan 21 01:53:21 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a471a3-5725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7d:2b:bd:a9:9a:e9:ce:78:32:ba:2b:dc:fb:
f7:13:ab:ae:31:a8:70:1d:38:43:59:8f:c6:42:81:
17:6d:d8:94:01:83:36:70:41:0a:39:c1:c0:aa:94:
3f:ba:f8:78:6f:ad:d1:85:75:34:d9:d6:e9:c2:fd:
46:1e:9f:fe:a8:63:f4:9c:eb:af:a1:d8:a8:af:3b:
2f:a0:bc:8d:fe:ca:a4:05:45:93:1e:96:af:a5:03:
43:85:76:3d:f1:03:45:b7:fc:9a:f9:52:59:c2:ef:
56:81:b8:65:61:11:fc:ae:ca:a7:60:c3:26:8b:80:
4b:2b:05:fe:b5:61:bd:0a:7a:54:cd:0d:78:29:2d:
f0:8e:80:de:1a:d0:b7:da:fc:95:cb:86:f6:79:26:
97:49:bd:ab:c9:e2:17:ce:c8:8f:4b:f0:91:e1:48:
e3:89:de:e9:6c:d1:51:43:9d:ec:f3:90:82:b4:a9:
85:82:ce:12:55:0e:f3:55:c0:05:22:31:95:ab:49:
a8:0a:d5:4e:d2:a2:80:9c:9b:b6:2d:a8:96:76:be:
e7:eb:19:af:c2:c6:81:bc:c5:ae:b4:4a:d8:55:4d:
5d:62:9c:36:c7:6f:81:a4:37:ef:b4:96:b6:6d:eb:
9c:fc:12:e0:28:fd:3e:c0:9e:00:50:49:39:d8:76:
ef:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D3:C4:1E:82:CC:0B:11:06:31:0E:5C:A6:BC:CE:FD:42:A8:70:77
X509v3 Authority Key Identifier:
keyid:0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/F6AFB162F66B11F08367D08E6F6F56BC.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:bb80::/32
Signature Algorithm: sha256WithRSAEncryption
29:b4:1a:5b:69:e7:b3:e5:94:4e:bc:c3:b3:f7:d3:b6:4b:21:
76:2c:71:37:af:40:86:c3:49:f2:92:c8:a4:4f:0e:9e:35:c0:
33:c5:f4:8c:2d:a3:5b:d0:00:6d:5a:39:56:98:c1:c0:87:f8:
15:55:04:1a:83:0b:07:3a:d5:41:12:41:d5:5b:1a:dc:8f:c3:
2d:e5:61:88:29:21:98:c3:e4:a9:37:34:cd:91:58:d9:9e:cc:
19:4c:c4:82:41:b5:bd:c7:9e:0e:0f:c8:77:44:54:d2:ea:72:
b5:bb:fb:6b:bd:a1:ff:87:b9:9d:53:3b:78:34:55:ab:21:0f:
cd:b7:02:99:fe:0b:8b:0c:99:80:f9:03:1b:fb:42:cb:00:b7:
ee:cc:2f:1c:c7:11:44:c2:eb:ff:0e:a6:7e:1d:c2:86:89:90:
e9:35:df:f6:a3:10:8d:42:6d:17:25:02:dc:a9:24:47:b0:79:
3e:b4:86:c8:1c:f8:b1:b7:9a:ae:dc:a9:a0:2d:f8:09:fb:71:
b5:84:2a:42:62:c7:0a:c0:9f:16:f7:2c:81:90:53:a1:31:9d:
7c:00:df:8c:1f:fb:8f:96:f2:5d:88:36:d2:f1:41:b5:39:15:
c4:33:74:d9:90:a8:bf:d7:03:88:f6:96:98:97:be:52:e5:27:
fd:ac:a8:f5
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgICB5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzdDMDQxMTAvBgNVBAUTKDBBRTIyMkVDNUUxN0E2RTYzMkI1NTlENDlDNUIxRUYz
MzJEQTQzQ0IwHhcNMjYwMTIxMDE1MzIxWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzFhMy01NzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyH0rvama6c54Mror3Pv3E6uuMahwHThDWY/GQoEXbdiUAYM2cEEKOcHAqpQ/
uvh4b63RhXU02dbpwv1GHp/+qGP0nOuvodiorzsvoLyN/sqkBUWTHpavpQNDhXY9
8QNFt/ya+VJZwu9WgbhlYRH8rsqnYMMmi4BLKwX+tWG9CnpUzQ14KS3wjoDeGtC3
2vyVy4b2eSaXSb2ryeIXzsiPS/CR4Ujjid7pbNFRQ53s85CCtKmFgs4SVQ7zVcAF
IjGVq0moCtVO0qKAnJu2LaiWdr7n6xmvwsaBvMWutErYVU1dYpw2x2+BpDfvtJa2
beuc/BLgKP0+wJ4AUEk52HbvrQIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFM7TxB6C
zAsRBjEOXKa8zv1CqHB3MB8GA1UdIwQYMBaAFAriIuxeF6bmMrVZ1JxbHvMy2kPL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0MwNC9BMERCMzU1MjVG
QjQxMUVCQUI3QzZBMjNDNEY5QUUwMi9DdUlpN0Y0WHB1WXl0Vm5VbkZzZTh6TGFR
OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0N1SWk3RjRYcHVZeXRWblVuRnNlOHpMYVE4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzdDMDQvQTBEQjM1NTI1RkI0MTFFQkFCN0M2QTIzQzRGOUFFMDIvRjZBRkIxNjJG
NjZCMTFGMDgzNjdEMDhFNkY2RjU2QkMucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJAG7gDANBgkqhkiG9w0BAQsFAAOCAQEAKbQaW2nns+WUTrzDs/fT
tkshdixxN69AhsNJ8pLIpE8OnjXAM8X0jC2jW9AAbVo5VpjBwIf4FVUEGoMLBzrV
QRJB1Vsa3I/DLeVhiCkhmMPkqTc0zZFY2Z7MGUzEgkG1vceeDg/Id0RU0upytbv7
a72h/4e5nVM7eDRVqyEPzbcCmf4LiwyZgPkDG/tCywC37swvHMcRRMLr/w6mfh3C
homQ6TXf9qMQjUJtFyUC3KkkR7B5PrSGyBz4sbeartypoC34CftxtYQqQmLHCsCf
FvcsgZBToTGdfADfjB/7j5byXYg20vFBtTkVxDN02ZCov9cDiPaWmJe+UuUn/ayo
9Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:28:33 2026 by rpki-client