
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/BB8F3118497B11F096DCA14EC4F9AE02.roa
File: BB8F3118497B11F096DCA14EC4F9AE02.roa (raw, json)
Hash identifier: LZ1naTvUarjviQvh++Hnvfx//aqWYgS0zxraAu6o6Fk=
Subject key identifier: 82:16:24:98:7E:A5:CB:24:5D:1A:89:D9:A5:90:50:60:4B:DC:4F:96
Certificate issuer: /CN=A91CFFCB/serialNumber=CB531C1EC69225F0DCAE44CECA5E35980CE9C0F2
Certificate serial: 8C
Authority key identifier: CB:53:1C:1E:C6:92:25:F0:DC:AE:44:CE:CA:5E:35:98:0C:E9:C0:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1McHsaSJfDcrkTOyl41mAzpwPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/BB8F3118497B11F096DCA14EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:07:43 +0000
ROA not before: Sun 15 Jun 2025 00:00:22 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 45773
IP address blocks: 2001:df5:ac40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.crl
rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1McHsaSJfDcrkTOyl41mAzpwPI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:52:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140 (0x8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFFCB, serialNumber=CB531C1EC69225F0DCAE44CECA5E35980CE9C0F2
Validity
Not Before: Jun 15 00:00:22 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a3e5bf-421b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:40:79:cd:09:46:62:62:9b:01:08:39:3c:ff:
32:32:51:1d:38:1b:55:1d:d2:d0:98:8d:22:ac:75:
6f:86:f5:2e:01:14:40:9b:f0:56:88:39:0f:76:a1:
f0:87:8a:5e:d4:fe:6e:8c:4d:a2:f4:d2:de:74:16:
9d:2e:28:71:5f:4e:e2:73:8c:17:ee:81:a4:17:20:
2b:fb:d5:30:ec:49:14:d6:2a:e3:c0:61:43:5f:69:
84:73:b1:de:5e:69:d3:11:3c:b5:90:f8:b7:a6:d0:
ec:b2:74:ab:d4:3d:9d:72:aa:81:0e:d2:82:7f:5e:
5d:c9:46:e6:b5:04:91:a9:02:88:47:00:3a:51:80:
43:73:5a:a8:51:33:33:20:e1:ce:ab:73:4f:3b:8d:
cc:39:6e:df:14:8f:c2:36:63:79:ab:50:22:98:c9:
8e:14:ec:f7:a7:b7:22:5a:6d:cb:1f:d8:5f:93:fc:
d2:2a:c1:5f:3e:5e:f3:71:28:bd:47:5d:28:9a:be:
25:5b:26:f6:ec:ff:a1:23:eb:ef:84:1d:c3:a5:bd:
fd:ad:94:3e:25:6b:a1:9c:a3:e0:e6:07:5b:0d:96:
44:2e:1d:27:69:ec:89:04:9c:c6:17:2c:93:ba:8b:
2a:46:38:01:de:ac:be:fc:28:d1:6d:8e:af:e2:39:
13:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:16:24:98:7E:A5:CB:24:5D:1A:89:D9:A5:90:50:60:4B:DC:4F:96
X509v3 Authority Key Identifier:
keyid:CB:53:1C:1E:C6:92:25:F0:DC:AE:44:CE:CA:5E:35:98:0C:E9:C0:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1McHsaSJfDcrkTOyl41mAzpwPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/BB8F3118497B11F096DCA14EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:ac40::/48
Signature Algorithm: sha256WithRSAEncryption
0c:14:76:f6:32:6c:4c:53:ef:b9:fd:ce:e8:9b:15:3a:da:e0:
1e:22:8a:1f:8c:11:e3:ed:a9:03:91:c3:6a:e5:0a:06:cd:67:
fa:bc:5e:35:1d:5f:22:18:36:6a:27:6b:b9:8f:d5:35:28:24:
3d:9f:30:71:64:cd:df:76:99:a7:e6:1b:b6:fe:ea:ff:5f:6e:
6b:86:83:ce:ed:e5:6f:1d:21:b9:23:62:18:c1:10:e8:0b:e9:
58:b3:aa:ef:15:1e:1a:99:21:75:29:69:48:d9:1c:17:ae:73:
98:e4:a9:95:86:38:e7:dc:61:3e:19:5b:d7:b6:b9:62:fb:df:
07:0c:38:a7:34:2f:35:67:13:6e:0b:56:03:ae:eb:e3:c7:ec:
5b:3e:ce:21:47:96:8d:3a:2c:1e:37:ea:4b:f2:03:ba:29:f3:
4c:34:04:58:79:82:c4:d9:39:99:3d:e4:7d:a6:2c:cf:6d:d5:
4f:26:67:a7:a7:a0:52:1b:ad:25:94:b3:48:0a:5a:58:64:79:
0d:2d:a3:69:6b:96:9a:35:dd:07:4c:cd:ab:e9:0d:a9:0b:4f:
fe:9c:19:ba:93:6b:bd:2b:b6:99:ce:e5:19:d8:ef:ed:31:0b:
cf:99:59:8f:e2:c7:01:e5:f8:27:84:13:c8:89:c7:d3:2c:66:
98:44:fa:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:11 2026 by rpki-client