
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/DBBAF162C19811F0A42BC412C4F9AE02.roa
File: DBBAF162C19811F0A42BC412C4F9AE02.roa (raw, json)
Hash identifier: Kic9hnPcMWHN6pDr7Ll5IWiixhuAzQj9NWh88//ur+E=
Subject key identifier: 0F:5A:53:9A:07:DC:F6:BA:20:69:15:ED:98:41:5F:16:1D:82:0F:33
Certificate issuer: /CN=A91C7E5B/serialNumber=E07E57689C27A993611CBABA97B194D31796CF6F
Certificate serial: 90
Authority key identifier: E0:7E:57:68:9C:27:A9:93:61:1C:BA:BA:97:B1:94:D3:17:96:CF:6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/DBBAF162C19811F0A42BC412C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:09:26 +0000
ROA not before: Fri 14 Nov 2025 20:31:12 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 153928
IP address blocks: 2001:df5:a140::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.crl
rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:49:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144 (0x90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7E5B, serialNumber=E07E57689C27A993611CBABA97B194D31796CF6F
Validity
Not Before: Nov 14 20:31:12 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a3f436-7f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:87:12:31:d6:09:ab:93:ec:b8:5c:24:9a:d2:
21:a8:0f:c3:c6:d2:6b:90:fe:18:a7:71:ee:96:5b:
00:01:f1:f7:c2:ee:9a:9b:05:d2:42:b6:a2:e8:10:
9a:d1:92:e2:46:2e:17:7b:3d:80:7d:27:e4:9e:e1:
c8:da:39:79:2f:3d:4a:ec:d0:86:d8:72:1a:83:1b:
1c:9a:24:7f:1e:4a:b3:7d:50:dd:ee:f6:3a:fd:04:
f2:3a:2f:8a:5e:99:d1:37:ca:75:b9:1c:21:21:28:
f5:d2:fe:8a:f4:43:4c:de:60:ee:3f:11:25:1f:d2:
e4:03:e6:52:1d:cc:11:0f:71:45:90:20:c9:15:a4:
82:fc:b0:a6:3c:db:84:fe:4e:7e:09:03:02:2a:a4:
5a:ff:ed:b5:fd:02:e2:3f:9b:cf:b4:75:d3:ae:bc:
fb:06:f6:20:97:4a:4a:ba:49:1a:81:7a:5e:ac:81:
ab:84:51:41:d8:52:c4:47:08:84:41:84:d7:6d:bc:
39:7b:93:ba:4c:7a:27:59:7c:a1:71:45:d6:41:53:
f0:48:a9:65:f4:47:71:8a:80:13:37:c9:f1:a0:4f:
c3:0f:3a:95:08:bb:2d:0d:5f:ea:a0:8f:0b:f2:af:
9b:93:91:6e:56:9d:1c:d9:d9:95:2b:96:d8:18:39:
01:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5A:53:9A:07:DC:F6:BA:20:69:15:ED:98:41:5F:16:1D:82:0F:33
X509v3 Authority Key Identifier:
keyid:E0:7E:57:68:9C:27:A9:93:61:1C:BA:BA:97:B1:94:D3:17:96:CF:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/DBBAF162C19811F0A42BC412C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:a140::/48
Signature Algorithm: sha256WithRSAEncryption
64:cb:b0:04:1d:26:62:43:65:df:f6:6d:f6:99:8d:2a:d0:29:
a7:35:dd:75:07:69:c0:21:be:23:85:ec:b3:34:02:3c:ec:6f:
e8:ec:0b:7f:34:37:ec:2a:ae:bf:03:b4:22:35:a8:b1:58:60:
e7:c6:2c:45:b2:cb:be:b9:26:c1:4b:a6:3a:dd:9d:d4:3e:8e:
c0:19:4d:2f:80:9a:1e:79:d6:91:1f:66:86:33:8f:a5:2b:93:
90:52:fe:c5:17:86:84:48:c3:86:cb:b1:22:4a:fd:55:c9:9f:
dc:ce:12:78:bd:64:fa:ad:ec:c9:c9:ad:a6:19:17:9f:cc:f3:
cb:b5:dc:ee:18:ec:77:f2:a0:3c:70:59:57:6d:d3:3e:4c:f8:
91:03:37:27:9d:a9:25:42:d8:e7:9e:2a:95:d0:83:42:25:a8:
c3:8c:f5:3c:0e:76:c5:39:5a:90:d5:7c:c4:b1:0a:bd:60:33:
58:ed:fe:f7:94:ae:48:66:b3:05:e1:9e:3a:42:7d:45:3c:c6:
3e:5d:90:d2:6e:fa:76:d0:ce:f6:82:66:4f:cc:7c:3a:ce:13:
51:23:1e:13:a8:ee:96:c1:f8:12:01:78:53:01:af:89:10:c7:
a6:27:29:dc:87:1a:cc:26:d5:dd:f9:99:e8:b3:e4:94:81:42:
0e:b6:92:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:53:49 2026 by rpki-client