
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/D2B93B4C638211F087594469C4F9AE02.roa
File: D2B93B4C638211F087594469C4F9AE02.roa (raw, json)
Hash identifier: 0ADq3jBBf/c9J6sONIRmYmNIcZxt7ll3xQLzW23RQrY=
Subject key identifier: 1D:D0:6F:4A:56:E5:C1:67:2B:AF:98:C8:E8:F5:12:03:F5:AB:41:57
Certificate issuer: /CN=A91C7EF2/serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921
Certificate serial: 76
Authority key identifier: 6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/D2B93B4C638211F087594469C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:11:43 +0000
ROA not before: Fri 18 Jul 2025 02:56:38 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 135045
IP address blocks: 2402:1960::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl
rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118 (0x76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7EF2, serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921
Validity
Not Before: Jul 18 02:56:38 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a3e6af-2b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3d:4b:79:ac:bd:33:bc:91:d1:70:fa:7d:78:
ee:2c:9b:10:f8:61:cb:6c:b9:86:5d:1e:6a:25:b3:
8e:65:b5:ae:c0:9e:9e:a5:cf:b1:b4:eb:1f:bc:35:
33:b0:be:bb:93:e2:0b:36:f8:14:54:b7:f7:17:ac:
41:bc:ba:5d:39:df:d8:5b:0f:09:9e:4b:f8:24:06:
51:10:dd:00:8e:99:c6:81:67:da:f5:75:43:0a:b5:
aa:cb:34:ef:9a:26:04:25:fc:56:7d:54:9e:7c:c6:
7a:8c:b9:1d:e3:95:65:94:77:a9:64:d5:65:03:e4:
98:a0:5a:6f:80:7a:e0:5e:20:fd:89:46:54:4e:c5:
fd:ba:ea:de:c9:a0:d4:f5:a1:25:8d:92:61:4a:7d:
d1:73:2a:37:6b:66:42:4a:f8:23:06:6b:9a:5b:cb:
9c:db:a9:a7:f2:a0:1e:88:4d:d9:b5:c6:82:72:74:
64:0b:89:1b:7b:0d:aa:16:99:2e:f9:4d:3c:36:66:
e2:21:d9:1c:07:ce:37:b9:a5:e5:d3:5d:e6:13:42:
e9:18:eb:62:9a:9c:3a:6c:86:65:35:ba:c4:51:bc:
5e:96:f6:d7:96:2a:7d:ab:98:13:d1:2a:91:38:0e:
b9:a4:86:79:fc:e9:46:fc:44:13:be:43:23:82:4c:
df:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D0:6F:4A:56:E5:C1:67:2B:AF:98:C8:E8:F5:12:03:F5:AB:41:57
X509v3 Authority Key Identifier:
keyid:6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/D2B93B4C638211F087594469C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:1960::/32
Signature Algorithm: sha256WithRSAEncryption
92:65:36:c6:8a:e4:e1:e0:91:0d:a7:44:d5:81:37:f1:aa:dd:
02:8b:48:16:8d:14:15:43:02:34:db:55:ea:58:7a:50:7f:e5:
4f:ed:bf:d8:12:23:ea:aa:6d:d7:62:51:21:d6:27:69:b7:e6:
42:22:a7:27:3e:65:b3:23:36:0e:7f:af:5f:4e:ca:94:6c:ca:
74:32:f1:c3:22:79:2f:21:fd:b1:f4:dd:6d:24:e7:c1:35:83:
fd:27:d0:3f:cf:8c:de:51:95:90:8d:72:c7:1b:5e:af:7c:9b:
d6:b8:48:ac:1c:4c:ce:3d:e6:1b:5d:01:d4:74:71:87:25:46:
15:fc:79:e1:2a:15:0d:bb:c0:f6:f1:8b:52:7c:2d:9c:ee:01:
74:62:24:e0:ac:ad:ac:e0:ba:bf:8d:d3:b1:59:f1:04:e7:a2:
b0:ef:30:c3:87:3e:15:23:44:70:b1:d0:cd:6b:5f:14:3e:95:
4f:95:32:59:42:31:43:97:42:46:cf:ea:fa:b7:5a:1e:1a:70:
ce:36:3a:84:7e:65:1e:f0:de:26:42:59:58:c1:4c:26:2f:4d:
2e:d7:41:35:62:a8:3d:b1:12:95:8e:c3:3b:57:ce:d0:f1:02:
f7:4c:6e:7d:96:0f:0d:2d:42:a4:9b:45:e5:44:7b:73:a6:4c:
a5:ae:0c:83
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
N0VGMjExMC8GA1UEBRMoNkE0OTdFRUQ1RjRGRTJDMTUxNjRERDJEMDdGQzRERDUy
QkNFODkyMTAeFw0yNTA3MTgwMjU2MzhaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNlNmFmLTJiMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/PUt5rL0zvJHRcPp9eO4smxD4YctsuYZdHmols45lta7Anp6lz7G06x+8NTOw
vruT4gs2+BRUt/cXrEG8ul0539hbDwmeS/gkBlEQ3QCOmcaBZ9r1dUMKtarLNO+a
JgQl/FZ9VJ58xnqMuR3jlWWUd6lk1WUD5JigWm+AeuBeIP2JRlROxf266t7JoNT1
oSWNkmFKfdFzKjdrZkJK+CMGa5pby5zbqafyoB6ITdm1xoJydGQLiRt7DaoWmS75
TTw2ZuIh2RwHzje5peXTXeYTQukY62KanDpshmU1usRRvF6W9teWKn2rmBPRKpE4
Drmkhnn86Ub8RBO+QyOCTN/HAgMBAAGjggJhMIICXTAdBgNVHQ4EFgQUHdBvSlbl
wWcrr5jI6PUSA/WrQVcwHwYDVR0jBBgwFoAUakl+7V9P4sFRZN0tB/xN1SvOiSEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3RUYyLzZBRkJFNDRDNjM4
MTExRjBBMzNEMjM2NEM0RjlBRTAyL2FrbC03VjlQNHNGUlpOMHRCX3hOMVN2T2lT
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYWtsLTdWOVA0c0ZSWk4wdEJfeE4xU3ZPaVNFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
N0VGMi82QUZCRTQ0QzYzODExMUYwQTMzRDIzNjRDNEY5QUUwMi9EMkI5M0I0QzYz
ODIxMUYwODc1OTQ0NjlDNEY5QUUwMi5yb2EwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkAhlgMA0GCSqGSIb3DQEBCwUAA4IBAQCSZTbGiuTh4JENp0TVgTfx
qt0Ci0gWjRQVQwI021XqWHpQf+VP7b/YEiPqqm3XYlEh1idpt+ZCIqcnPmWzIzYO
f69fTsqUbMp0MvHDInkvIf2x9N1tJOfBNYP9J9A/z4zeUZWQjXLHG16vfJvWuEis
HEzOPeYbXQHUdHGHJUYV/HnhKhUNu8D28YtSfC2c7gF0YiTgrK2s4Lq/jdOxWfEE
56Kw7zDDhz4VI0RwsdDNa18UPpVPlTJZQjFDl0JGz+r6t1oeGnDONjqEfmUe8N4m
QllYwUwmL00u10E1Yqg9sRKVjsM7V87Q8QL3TG59lg8NLUKkm0XlRHtzpkylrgyD
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:45 2026 by rpki-client