
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/16B651C6048411F094895C27C4F9AE02.roa
File: 16B651C6048411F094895C27C4F9AE02.roa (raw, json)
Hash identifier: 45/HLjdj+O/i8kCEKwn2XmI0wpxVbhzQb8+m4uBvopA=
Subject key identifier: 20:38:49:13:6D:B6:1C:9C:16:7C:52:3E:B8:CF:60:52:27:83:60:4F
Certificate issuer: /CN=A91CA5F9/serialNumber=F5BBAE85C6FFB360CED4080D1136A2BFD3A97FD1
Certificate serial: BC
Authority key identifier: F5:BB:AE:85:C6:FF:B3:60:CE:D4:08:0D:11:36:A2:BF:D3:A9:7F:D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/16B651C6048411F094895C27C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:17:34 +0000
ROA not before: Mon 09 Feb 2026 06:25:33 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 23917
IP address blocks: 202.2.112.0/20 maxlen: 24
2401:c720::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.crl
rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:46:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA5F9, serialNumber=F5BBAE85C6FFB360CED4080D1136A2BFD3A97FD1
Validity
Not Before: Feb 9 06:25:33 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a43c6e-1e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:ed:b7:d4:39:7f:5b:3d:e3:e0:7b:9a:30:
d8:9e:c3:43:6a:77:e8:1d:59:09:c7:3b:62:ac:30:
c8:f0:05:19:30:b6:dc:d0:7c:9f:4a:e2:dc:b0:91:
ed:fb:a7:30:6c:73:72:7e:2e:b4:99:78:35:91:3d:
85:dc:55:58:6f:09:ff:3d:e5:93:fd:4f:48:6b:7c:
a6:30:7c:3b:de:83:f9:3c:6b:02:07:b8:1e:12:46:
89:a2:d0:2b:a2:b0:38:cc:03:aa:d5:a2:77:2e:14:
16:f8:97:e7:95:f7:7b:9d:54:0c:c1:93:e6:16:a0:
a5:0c:f6:7c:70:40:42:90:f5:58:2d:0b:0a:f5:de:
42:42:a9:27:32:06:92:32:ce:ed:69:3b:28:c9:2f:
cf:90:e2:40:94:3b:9d:ee:c0:45:be:dc:5c:26:11:
2b:0c:b1:c6:d4:0c:99:1c:d7:c9:27:72:d8:a2:ff:
7c:94:be:ca:84:36:16:7a:7e:5c:cf:35:b2:96:e3:
bb:c9:fa:4c:e6:3f:1d:c1:79:cc:6e:75:aa:d8:df:
bd:69:ed:bd:56:39:f8:9b:18:77:7e:7d:5b:f4:d9:
32:41:d4:ff:56:c0:c9:52:d7:c2:a0:d2:30:2f:42:
6c:cb:3b:ef:bb:48:1f:19:27:7f:9a:84:02:86:80:
44:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:38:49:13:6D:B6:1C:9C:16:7C:52:3E:B8:CF:60:52:27:83:60:4F
X509v3 Authority Key Identifier:
keyid:F5:BB:AE:85:C6:FF:B3:60:CE:D4:08:0D:11:36:A2:BF:D3:A9:7F:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/16B651C6048411F094895C27C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.2.112.0/20
IPv6:
2401:c720::/32
Signature Algorithm: sha256WithRSAEncryption
91:86:92:90:91:42:dd:a9:49:ea:e0:6c:0e:1b:af:75:d5:16:
d1:f1:87:6c:2e:e2:ee:e8:81:13:11:89:9c:27:10:d5:aa:93:
2a:64:65:6c:f6:94:55:50:01:ee:5a:9f:d9:cd:28:cc:29:a0:
29:fe:71:70:60:59:0d:a5:49:a5:11:23:85:d0:c4:10:e0:4a:
2f:6d:9b:c0:a3:f7:39:b3:76:44:bf:40:48:6e:51:da:fc:3e:
41:5d:8f:0d:c8:86:ae:71:2e:43:af:40:ec:41:30:ca:1c:c1:
dd:d9:f0:61:7f:e1:31:fa:5b:06:bf:59:2b:b7:c8:25:c7:71:
17:7b:04:f1:98:86:6a:32:17:db:bd:91:32:0d:8b:f6:9c:03:
31:38:b7:47:d6:7c:26:65:30:17:da:c8:e0:20:d7:4f:01:5d:
bb:17:1a:2d:78:b6:7d:41:3d:80:9b:45:b6:9d:58:ff:67:c4:
38:d4:6b:a0:26:3c:b0:00:87:55:1a:c8:ec:a4:8b:55:1d:1e:
37:d7:7f:b3:14:ef:e7:fb:62:6f:af:3f:44:a9:e2:ef:43:29:
9c:3b:a5:98:d1:15:69:e0:ad:bd:40:e0:dc:3c:35:a2:60:e1:
9b:2b:e1:1e:a8:f8:ed:88:5f:c1:ae:38:d1:b8:b3:87:2d:c3:
65:19:ef:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:02 2026 by rpki-client