
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/E188F6AEAE1F11EE9E818D16C4F9AE02.roa
File: E188F6AEAE1F11EE9E818D16C4F9AE02.roa (raw, json)
Hash identifier: qyFCdwwtrfdWq/TcM0tk5s5oGHMc7dYR+PBiZL5a9K8=
Subject key identifier: CA:E5:C4:CF:74:56:4E:7A:FA:76:22:97:AC:98:70:93:87:1C:5F:87
Certificate issuer: /CN=A91CED30/serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F
Certificate serial: 0193
Authority key identifier: 0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/E188F6AEAE1F11EE9E818D16C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:41:32 +0000
ROA not before: Sun 09 Feb 2025 04:26:44 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 152306
IP address blocks: 2001:df3:55c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl
rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403 (0x193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CED30, serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F
Validity
Not Before: Feb 9 04:26:44 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a3df9c-f3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:30:a1:2e:2e:5e:65:01:91:6c:5f:94:fe:8b:
5d:5b:c6:90:72:8f:73:41:f1:0c:31:ca:e0:30:ff:
4e:7a:9e:bf:b1:ec:3f:1d:2a:43:73:3c:59:db:b5:
fc:2b:7d:9e:28:49:28:5e:5b:a7:96:ef:a7:ba:07:
7d:dc:ad:32:27:1b:83:f7:ab:a9:30:5c:0e:7e:cf:
4f:ee:f4:b3:83:08:ec:21:c5:c4:ae:eb:c0:43:5e:
ba:3a:fe:fb:4a:c1:03:b4:9a:72:df:c8:95:97:fa:
7b:a1:c5:e7:5e:d0:f9:e5:ce:6a:28:07:cc:40:84:
4e:d4:a9:c3:61:88:b7:a6:be:0a:e1:b8:a1:d1:28:
e1:88:75:8d:69:64:1a:bf:59:70:10:dc:fb:3b:ee:
e1:ab:78:cc:9e:d5:70:e9:4d:ac:22:bc:79:ee:5b:
69:50:6d:d5:c9:40:0a:81:94:5b:3b:a6:28:35:a7:
ca:4f:5b:ea:67:4c:e8:5d:f3:22:eb:3d:99:d8:5a:
56:82:9a:40:67:6a:a9:ea:2a:7f:6e:d8:7c:ab:f3:
70:0e:6f:5c:ba:ce:35:c6:b8:dc:52:99:96:be:4f:
53:4f:7b:ad:28:59:fb:e6:09:b7:db:68:3b:b9:3f:
d6:c1:29:c3:e8:1a:1d:23:39:33:ca:06:51:bf:25:
5a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E5:C4:CF:74:56:4E:7A:FA:76:22:97:AC:98:70:93:87:1C:5F:87
X509v3 Authority Key Identifier:
keyid:0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/E188F6AEAE1F11EE9E818D16C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:55c0::/48
Signature Algorithm: sha256WithRSAEncryption
41:3e:1b:e9:0a:ff:7f:2c:da:19:7f:d9:ee:a9:0e:54:a4:a2:
95:ee:5a:d7:1a:f3:4c:09:e4:cb:83:a2:b8:7c:48:c6:a6:41:
28:86:03:7a:a7:d4:36:99:06:7e:17:1f:6d:d8:18:6c:cf:50:
e2:ad:37:c4:cc:de:21:07:d6:ff:2b:9f:e0:46:5b:0d:55:98:
f7:3b:cd:66:8e:31:af:48:a4:46:c6:ac:f9:54:16:6b:8e:3f:
8f:04:ae:97:fa:d1:e4:19:b0:65:f9:dc:ce:21:2c:90:c1:25:
ff:ca:22:1c:bf:b9:62:03:83:55:ba:df:1d:0e:7b:e0:9c:8f:
b9:df:86:27:90:fd:0e:e9:4e:90:4d:f0:13:a7:16:4b:60:24:
fd:21:aa:82:ed:ed:a5:c2:7c:7d:f6:df:5d:57:3e:fd:1f:df:
f4:7b:c7:df:ac:49:4f:b4:79:6f:b9:5e:d4:17:9f:d3:0f:ed:
da:86:f8:8b:d5:46:ab:19:9a:84:a4:ea:33:fc:39:0e:85:b0:
ec:88:fa:cc:1b:68:d4:ee:3a:f1:65:55:6b:0c:ea:d6:0f:e9:
38:ef:00:31:83:73:bc:cf:69:90:73:3d:f8:28:88:86:e0:af:
29:ab:f8:c3:7f:97:61:e6:e9:40:34:28:dc:7f:6b:7f:8e:bf:
08:e3:68:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:22:49 2026 by rpki-client