
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/2FAD450250E411F0A6B4892AC4F9AE02.roa
File: 2FAD450250E411F0A6B4892AC4F9AE02.roa (raw, json)
Hash identifier: nSGDtntTI10V99CiLXg25N7qck9wAUFqZHUSobcXLhM=
Subject key identifier: B4:75:D8:DF:95:4F:15:DF:5B:1F:71:8D:92:07:7C:05:9F:84:97:7F
Certificate issuer: /CN=A91CF9F5/serialNumber=87B1EE3E9EE2AD1A113F27A2A54E2C0B8D5AFB34
Certificate serial: 012D
Authority key identifier: 87:B1:EE:3E:9E:E2:AD:1A:11:3F:27:A2:A5:4E:2C:0B:8D:5A:FB:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/2FAD450250E411F0A6B4892AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:24:58 +0000
ROA not before: Sun 01 Mar 2026 07:24:58 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 36352
IP address blocks: 121.46.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.crl
rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301 (0x12d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF9F5, serialNumber=87B1EE3E9EE2AD1A113F27A2A54E2C0B8D5AFB34
Validity
Not Before: Mar 1 07:24:58 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a3e9ca-432a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8c:e7:1c:51:78:31:96:b8:40:e1:99:6c:d9:
4b:d1:59:78:01:8a:95:83:8c:3a:1c:6d:de:7d:2d:
18:60:0c:4b:59:68:b7:07:c5:2e:d6:88:9a:80:ab:
0e:3a:ed:6a:ae:d7:47:c7:c4:e3:f3:1d:23:e4:68:
29:fa:a4:95:62:7f:89:1b:72:c7:cf:30:0e:cf:3f:
78:16:c4:ee:fa:b3:5e:1a:10:c3:6a:3b:6d:6c:01:
e8:ce:da:84:f3:2f:1c:82:d2:eb:9a:00:9a:70:8f:
5f:0e:53:24:d6:77:46:87:c2:ee:f9:78:1b:14:42:
55:9b:c2:06:8c:5e:5f:75:8f:0d:75:40:d3:4a:a1:
c7:04:6b:9e:05:76:2d:87:cb:de:3f:7a:79:4f:74:
2b:42:cf:48:cb:58:52:24:c8:d7:72:30:ef:8e:cf:
f0:df:72:13:c2:2c:ec:74:5a:25:04:fc:92:f3:f1:
01:82:aa:38:cd:e8:3f:b6:2f:14:97:0e:1c:28:d9:
6f:4f:47:19:44:5b:40:b1:28:3c:7d:ab:dc:b9:3b:
21:a1:59:bc:bd:c7:7a:59:43:70:73:95:27:ee:7c:
ab:3a:d2:bf:4c:cf:47:40:25:bd:74:17:9f:05:ea:
c9:dc:ad:5d:3c:77:d3:e8:6d:60:c7:00:27:56:25:
db:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:75:D8:DF:95:4F:15:DF:5B:1F:71:8D:92:07:7C:05:9F:84:97:7F
X509v3 Authority Key Identifier:
keyid:87:B1:EE:3E:9E:E2:AD:1A:11:3F:27:A2:A5:4E:2C:0B:8D:5A:FB:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/2FAD450250E411F0A6B4892AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
121.46.80.0/22
Signature Algorithm: sha256WithRSAEncryption
17:63:ec:2e:76:01:33:14:b1:05:e0:bb:d1:4a:72:32:d9:93:
33:c2:31:11:60:01:e7:d3:d2:94:34:90:bd:33:3f:f9:5d:35:
f4:06:88:ee:c0:db:b8:69:8b:b3:bb:ca:43:57:2b:9d:af:44:
4f:fd:6f:e0:c0:41:51:bc:d7:39:31:6c:a4:5d:70:f9:8c:a0:
1f:98:1a:89:81:1c:3e:bd:2e:ce:fb:12:97:d4:2e:95:78:2f:
d2:56:27:3a:4d:87:aa:73:90:c4:a5:5d:08:f6:88:d5:3b:bd:
11:c2:6b:e9:5e:db:62:ae:15:56:b8:a9:7b:bf:f2:e0:9f:7f:
34:c1:85:6f:b0:83:0e:bd:b8:ce:ab:22:8f:5d:17:b5:86:cd:
2d:8d:1b:83:e4:01:51:98:3c:6f:0a:e2:ef:f2:12:9d:3e:c0:
76:bc:62:88:95:f3:35:6e:c0:93:57:9f:76:ee:61:bd:6d:5a:
61:92:9e:26:bb:b5:07:ad:66:c2:06:5c:c3:c4:b6:fe:20:0d:
d7:60:d4:c3:a7:84:40:bc:0a:5d:e4:b2:5c:a8:ef:df:fa:7e:
81:a5:70:dc:96:a0:9e:98:f1:8d:64:30:07:c2:db:ff:af:6d:
dd:55:a3:be:62:e4:34:bb:7a:8a:6d:22:8f:f2:f7:1a:7b:75:
44:d9:df:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:23 2026 by rpki-client