
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0C5EDCDA716911EDA03D4A50C4F9AE02.roa
File: 0C5EDCDA716911EDA03D4A50C4F9AE02.roa (raw, json)
Hash identifier: 1UzncEKSR5GFkiri+HSHWqbKXpOZsxz5QJtUjNS60dU=
Subject key identifier: C8:2F:FE:48:D6:7D:B8:E6:10:61:02:6F:E3:90:68:12:0A:E0:31:72
Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial: 0708
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0C5EDCDA716911EDA03D4A50C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:19:08 +0000
ROA not before: Mon 10 Nov 2025 22:45:25 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 16625
IP address blocks: 2400:5200:402::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:38:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1800 (0x708)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Validity
Not Before: Nov 10 22:45:25 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4912c-3aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3f:c7:53:6c:d7:05:97:30:b3:44:39:1b:17:
6b:aa:66:38:64:55:f3:c5:bc:b1:40:2e:00:3e:97:
d5:27:6a:c4:b9:80:93:49:de:d2:a3:49:a1:83:ad:
f9:50:f0:0d:3b:f3:e1:3d:30:45:db:5a:68:b8:54:
6d:90:75:e0:47:af:a5:ae:82:05:72:3a:f6:45:dd:
bd:7e:5a:7f:7f:f7:ec:eb:7b:34:6e:70:d8:46:93:
05:07:50:6f:44:b5:15:94:7e:3d:d9:17:62:af:eb:
2a:5b:5f:b4:33:a9:fa:03:19:31:ee:9b:24:8a:d6:
9f:99:98:b0:bc:9c:96:04:e3:7b:a7:70:15:b7:e1:
95:6d:a9:08:24:7e:3c:c8:31:26:66:d6:78:eb:c3:
f9:3c:9f:77:44:bc:91:f0:4e:45:fa:15:40:39:2e:
6c:ff:85:28:aa:7a:09:33:4d:f8:03:cb:3d:f8:66:
65:47:91:16:db:ce:e8:0a:7f:8f:f3:36:3c:34:4e:
02:1f:44:ea:e7:bc:82:c9:06:f8:68:eb:f2:6b:cd:
8a:c5:73:5d:4f:6d:c1:3f:6c:58:23:db:2c:78:5b:
76:9e:56:a6:13:36:cb:d4:f0:06:6e:d9:dc:07:a5:
9d:cb:f2:fc:46:77:be:76:c1:93:97:a0:0a:6e:d7:
b5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2F:FE:48:D6:7D:B8:E6:10:61:02:6F:E3:90:68:12:0A:E0:31:72
X509v3 Authority Key Identifier:
keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0C5EDCDA716911EDA03D4A50C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:5200:402::/48
Signature Algorithm: sha256WithRSAEncryption
5c:30:c2:c9:3b:d6:94:44:c7:27:d1:41:4e:c1:32:29:bf:34:
eb:0f:19:78:2f:dc:78:dd:72:57:02:08:8a:52:11:f9:e6:a8:
99:56:86:93:ed:fd:65:3c:4e:9a:f5:fd:63:e1:d4:42:5c:dd:
46:68:2b:d7:7a:eb:ee:59:4b:a8:a1:da:32:65:b0:45:7a:d8:
7f:4d:ac:ac:14:6b:16:85:f1:32:72:b3:76:f8:96:3a:38:f8:
59:ca:b8:55:9a:09:b6:20:47:e4:1b:d1:28:e4:84:d7:46:f5:
4b:86:52:57:19:0d:2d:88:f6:df:30:7e:d7:29:86:4a:a6:01:
39:4a:88:b7:21:4e:ab:04:ca:13:5c:05:b4:a2:87:d0:de:e2:
50:55:01:07:e0:12:dd:61:1e:29:ff:d0:3c:58:a2:39:ce:16:
50:c0:4e:a2:bf:99:7d:00:85:b7:85:8b:e4:e2:3b:77:36:53:
66:1c:aa:e8:96:87:17:f6:1f:e9:82:ea:fb:73:7a:1f:14:35:
8e:bf:d2:df:81:37:8c:ba:bd:da:07:ae:22:68:f3:82:b2:a6:
04:46:13:aa:70:d0:99:e0:27:57:88:f0:8a:c8:6e:d9:e7:63:
b8:06:c2:90:04:65:1a:45:f1:13:97:9a:fa:0d:82:0f:e1:a3:
4f:74:63:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:47 2026 by rpki-client