
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/C9848396CD1711ED898C311FC4F9AE02.roa
File: C9848396CD1711ED898C311FC4F9AE02.roa (raw, json)
Hash identifier: ueVNReZo6meY996fdhGVkYb8RWaLqcwirYFMYjvQObc=
Subject key identifier: EF:26:DF:CE:8D:12:C5:F9:34:68:51:3B:14:CC:74:61:37:26:B0:F5
Certificate issuer: /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Certificate serial: 26EF
Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/C9848396CD1711ED898C311FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:06:04 +0000
ROA not before: Tue 02 Sep 2025 16:04:12 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 24429
IP address blocks: 2404:8d02:28c8::/48 maxlen: 48
2404:8d02:4881::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl
rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:21:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9967 (0x26ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1136, serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Validity
Not Before: Sep 2 16:04:12 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4800c-727f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e3:ef:d7:aa:6b:ea:b5:3a:bf:36:c5:42:21:
96:45:a1:00:4e:da:f3:12:29:a1:9e:96:90:28:ba:
c5:18:03:24:62:80:c1:2e:a8:0c:04:b7:80:e0:0a:
02:ba:71:ce:f8:f9:38:53:57:02:46:10:d7:10:ef:
c4:c6:5c:99:ee:12:08:8b:26:75:a8:50:53:8d:ca:
87:dc:3e:ce:6a:8e:04:a9:aa:c2:bd:9e:6f:e9:18:
05:aa:32:c6:a3:95:7c:05:dc:f0:d7:cb:0f:de:8b:
87:7f:a1:87:6a:fd:ee:76:7d:65:72:a9:39:39:4d:
b9:88:b9:55:33:81:4b:ad:e0:52:31:52:9d:f1:28:
3c:4c:bb:63:ac:01:44:6b:ec:5c:92:d8:07:d8:b2:
a7:cd:05:86:f7:54:37:0a:cb:7d:3f:40:ea:17:7e:
ed:b6:6f:15:84:b2:d7:b2:9e:76:63:a0:99:7a:98:
d2:39:55:2b:d9:82:52:6d:ad:07:42:4d:5e:39:f9:
a4:75:d7:c2:43:e4:ce:8a:d8:38:61:55:14:40:6d:
52:fb:87:5c:3a:0f:13:ee:03:30:ca:23:57:35:0f:
32:d2:52:0a:c3:6a:3d:e4:ff:c5:48:dd:b0:d5:ed:
ff:30:a5:41:f5:18:36:94:31:ca:39:d3:d6:7b:0f:
e8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:26:DF:CE:8D:12:C5:F9:34:68:51:3B:14:CC:74:61:37:26:B0:F5
X509v3 Authority Key Identifier:
keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/C9848396CD1711ED898C311FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2404:8d02:28c8::/48
2404:8d02:4881::/48
Signature Algorithm: sha256WithRSAEncryption
11:f1:38:e9:75:0d:16:65:6a:60:95:5a:1e:a9:67:16:0d:b4:
b0:75:4a:49:32:03:3a:87:70:ff:3f:0c:51:e6:b0:62:ef:9e:
f6:13:c5:7e:f4:a9:4c:47:d2:86:45:d4:bf:48:b7:af:0a:95:
d7:52:50:55:05:77:67:fe:03:f8:fe:bd:c4:85:e1:6b:84:d1:
c0:62:43:85:3f:e9:8c:62:be:95:8d:f3:62:3f:c9:e5:9c:64:
d2:43:1e:ea:4c:72:c2:d8:21:d2:e1:83:a7:ba:01:4b:e6:6f:
77:21:e1:58:6c:a3:75:06:b7:d4:06:5b:d5:dc:47:c5:6f:d0:
d9:7d:d1:6b:b0:e5:b5:90:b3:fe:6f:5e:a7:3c:cc:40:6f:2a:
b2:e0:41:b2:1a:55:c8:fb:79:b1:4a:67:04:6b:6e:f2:c0:da:
17:de:bd:cb:8c:26:51:2b:0d:8e:c5:d8:af:58:5e:4d:70:f1:
e7:08:30:6b:d7:19:f4:82:f8:c4:0a:b5:3a:59:8a:fd:50:5e:
f7:2e:86:4d:c8:68:cb:d6:d7:e1:8a:5d:fa:93:d7:d1:3f:75:
c0:ca:3c:e8:8d:52:1d:23:96:80:a0:7b:31:1a:57:e9:de:0a:
e9:c5:e4:39:92:6e:bf:2c:fc:0c:27:16:f9:b6:1b:97:93:f3:
5f:66:4c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:29 2026 by rpki-client