
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0C5EDCDA716911EDA03D4A50C4F9AE02.roa
File: 0C5EDCDA716911EDA03D4A50C4F9AE02.roa (raw, json)
Hash identifier: kEuwzt75DLMLyOAlCwhu5iAg9XxPhV8CMhcAksq12Q4=
Subject key identifier: 2E:E2:C2:DC:C6:7B:1E:81:71:5E:87:67:91:60:C1:7A:57:F9:31:47
Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial: 0D92
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0C5EDCDA716911EDA03D4A50C4F9AE02.roa
Signing time: Wed 04 Nov 2026 23:45:48 +0000
ROA not before: Wed 04 Nov 2026 23:45:48 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 16625
IP address blocks: 2400:5200:402::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 23:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3474 (0xd92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Validity
Not Before: Nov 4 23:45:48 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aebc3ac-738a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:af:71:d9:3a:db:a1:66:79:e1:db:f6:54:72:
99:c7:b1:b0:1d:08:5f:70:cc:f3:49:5d:90:2f:71:
79:a3:13:ec:f5:b1:ac:9c:be:c8:d2:e5:c6:b2:0a:
fd:0c:3c:21:e7:44:d8:99:53:3f:92:e2:b6:2e:9e:
63:83:ae:ba:c6:09:c1:f8:72:22:21:16:d1:66:e2:
64:8f:f7:e4:ed:7d:c4:87:d4:41:71:f8:bb:a2:b6:
72:82:b5:83:59:90:2a:63:a1:23:7a:92:9e:fa:ae:
e1:be:5e:ea:56:2d:8f:2d:5c:81:14:9b:a5:5c:59:
ea:a1:bd:4c:83:66:96:9e:a7:c7:90:61:be:b9:fb:
55:5e:96:a2:94:e2:74:a9:b4:6e:a2:a4:97:d0:7f:
45:f5:95:30:65:0c:1f:73:2d:b2:d4:0a:c8:6e:2b:
3a:8c:2c:a1:fb:7b:2c:0b:5b:b8:bb:c6:1e:d8:ac:
a0:56:ac:e8:17:e7:24:75:ed:67:14:08:9c:12:ff:
83:f1:49:46:6c:86:94:08:52:ab:5d:d9:ae:a6:b0:
43:37:c4:d6:62:70:ef:6a:9a:ef:fe:ce:4c:4e:eb:
a0:92:78:20:f2:f8:72:a5:30:49:26:53:6a:d4:e4:
8e:f6:f4:d1:cb:3f:2a:29:5e:64:28:bc:97:22:96:
48:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E2:C2:DC:C6:7B:1E:81:71:5E:87:67:91:60:C1:7A:57:F9:31:47
X509v3 Authority Key Identifier:
keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0C5EDCDA716911EDA03D4A50C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:5200:402::/48
Signature Algorithm: sha256WithRSAEncryption
4e:5d:2c:d3:fe:11:25:78:5e:a1:4a:0c:cd:89:b2:8d:cc:b5:
2d:35:29:a8:62:f6:70:82:38:f0:a3:b9:aa:3d:c9:12:7c:01:
be:eb:02:6a:ef:2d:35:b6:99:e0:e4:df:86:4f:63:0f:5d:d8:
34:8d:ab:02:99:70:4e:56:d9:fc:59:b4:94:6b:c2:81:94:6b:
39:1f:ee:29:fb:a3:dd:f4:18:49:f4:86:c1:c7:bf:c5:82:b4:
92:99:f0:2f:99:ba:13:4e:8f:03:2a:60:3c:56:86:eb:ea:7e:
b1:3b:18:5f:9f:2e:d3:4f:94:a5:7c:aa:d0:c4:9a:70:23:f4:
9e:84:49:c6:3c:c7:89:77:82:93:62:72:16:ad:bc:2d:30:aa:
76:75:a8:cc:87:5b:b1:6d:1d:bc:eb:39:32:e7:f2:41:b5:11:
c6:c7:cb:4f:14:81:18:a1:d5:1e:c4:76:1c:21:a4:77:1c:25:
e1:cf:ff:96:72:ef:0d:b9:fa:8d:d3:ce:02:31:c2:54:2a:6b:
6b:59:31:ac:1c:d8:8a:8f:3e:57:f4:1f:2a:f6:19:c4:b3:ac:
76:61:48:da:84:6a:2d:c6:f6:40:79:11:a0:1e:e6:d8:24:70:
be:7c:14:ef:63:ce:0d:90:fd:54:3c:7a:46:d6:69:b6:87:1d:
c0:dd:74:da
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICDZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVGRTQ5MTkwOUM3
RDc0MTQ3RjMwHhcNMjYxMTA0MjM0NTQ4WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWViYzNhYy03MzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAh69x2TrboWZ54dv2VHKZx7GwHQhfcMzzSV2QL3F5oxPs9bGsnL7I0uXGsgr9
DDwh50TYmVM/kuK2Lp5jg666xgnB+HIiIRbRZuJkj/fk7X3Eh9RBcfi7orZygrWD
WZAqY6EjepKe+q7hvl7qVi2PLVyBFJulXFnqob1Mg2aWnqfHkGG+uftVXpailOJ0
qbRuoqSX0H9F9ZUwZQwfcy2y1ArIbis6jCyh+3ssC1u4u8Ye2KygVqzoF+ckde1n
FAicEv+D8UlGbIaUCFKrXdmuprBDN8TWYnDvaprv/s5MTuugkngg8vhypTBJJlNq
1OSO9vTRyz8qKV5kKLyXIpZInQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFC7iwtzG
ex6BcV6HZ5FgwXpX+TFHMB8GA1UdIwQYMBaAFFa5g+Rry6EV/yJl/kkZCcfXQUfz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ERTdEMkY5NDRF
NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9SWF9JbVgtU1JrSng5ZEJS
X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZybUQ1R3ZMb1JYX0ltWC1TUmtKeDlkQlJfTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0QzOUQvREU3RDJGOTQ0RTc2MTFFQ0E1NzIwQjc5QzRGOUFFMDIvMEM1RURDREE3
MTY5MTFFREEwM0Q0QTUwQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJABSAAQCMA0GCSqGSIb3DQEBCwUAA4IBAQBOXSzT/hEleF6hSgzN
ibKNzLUtNSmoYvZwgjjwo7mqPckSfAG+6wJq7y01tpng5N+GT2MPXdg0jasCmXBO
Vtn8WbSUa8KBlGs5H+4p+6Pd9BhJ9IbBx7/FgrSSmfAvmboTTo8DKmA8Vobr6n6x
Oxhfny7TT5SlfKrQxJpwI/SehEnGPMeJd4KTYnIWrbwtMKp2dajMh1uxbR286zky
5/JBtRHGx8tPFIEYodUexHYcIaR3HCXhz/+Wcu8NufqN084CMcJUKmtrWTGsHNiK
jz5X9B8q9hnEs6x2YUjahGotxvZAeRGgHubYJHC+fBTvY84NkP1UPHpG1mm2hx3A
3XTa
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:23:07 2026 by rpki-client