
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/09C0DFCE202011F098619934C4F9AE02.roa
File: 09C0DFCE202011F098619934C4F9AE02.roa (raw, json)
Hash identifier: wOYzNzzIS0paJhEaL4lnWRrHmB69EScSsL5hsvt2zxE=
Subject key identifier: 03:E0:36:F1:D3:44:37:97:B1:E1:9D:3D:ED:57:74:03:1E:28:E9:A6
Certificate issuer: /CN=A91D1306/serialNumber=E04FB2AA627D97B989AECFE86974E3C5F303121A
Certificate serial: 19A6
Authority key identifier: E0:4F:B2:AA:62:7D:97:B9:89:AE:CF:E8:69:74:E3:C5:F3:03:12:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/09C0DFCE202011F098619934C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:30:45 +0000
ROA not before: Wed 23 Apr 2025 08:50:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55408
IP address blocks: 2401:ffe0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl
rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:24:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6566 (0x19a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1306, serialNumber=E04FB2AA627D97B989AECFE86974E3C5F303121A
Validity
Not Before: Apr 23 08:50:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a42364-7a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:81:98:05:d0:b5:e5:b7:04:7e:56:ec:ca:a1:
3d:df:f8:e0:4b:f8:6a:28:6a:d2:f6:87:74:ac:df:
5e:84:9a:0e:57:ef:b9:a1:11:cd:ab:ef:f5:e7:82:
d9:f2:60:3d:48:ea:f4:a7:01:a5:35:4e:82:1b:7c:
45:3b:10:ba:db:2b:a4:0d:b8:b4:cb:81:18:62:33:
a5:18:95:13:18:be:4c:83:95:2c:47:c2:d6:15:98:
52:38:71:e1:b7:12:32:76:6a:df:e5:e8:4a:4e:b5:
1c:cd:25:67:0e:3e:70:10:8b:69:b5:00:d1:64:e0:
e3:78:26:6c:fd:69:0d:58:8a:a4:d2:02:20:e1:b5:
43:44:8c:fc:af:01:f8:5d:cd:e0:db:f2:d8:ef:b6:
d4:36:c1:a6:cf:29:b1:f1:5e:94:71:c3:5b:3a:23:
4f:14:77:7a:2c:bd:b4:f5:2a:7b:91:21:13:0f:0e:
e6:b1:fe:08:d4:62:2a:7f:7b:71:07:ab:9c:f2:a5:
94:b9:aa:27:30:c1:68:71:20:dd:3f:2f:ec:16:cd:
c6:e0:b0:ee:34:67:06:98:f9:6e:28:f2:5c:2d:74:
23:85:e0:23:15:8c:e5:0a:08:fa:f1:2e:00:b0:68:
47:6b:78:19:b0:e2:ca:76:4e:e8:58:e3:5c:40:39:
73:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E0:36:F1:D3:44:37:97:B1:E1:9D:3D:ED:57:74:03:1E:28:E9:A6
X509v3 Authority Key Identifier:
keyid:E0:4F:B2:AA:62:7D:97:B9:89:AE:CF:E8:69:74:E3:C5:F3:03:12:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/09C0DFCE202011F098619934C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:ffe0::/32
Signature Algorithm: sha256WithRSAEncryption
b4:e7:3b:21:0c:f8:65:dc:b5:36:48:31:7e:8b:5d:6b:e8:bc:
7b:0c:4b:4d:9f:e5:37:34:42:39:a7:3a:98:ed:4e:42:66:7d:
b3:52:a7:66:b7:d8:02:3e:e0:c5:d9:4e:c8:ab:6f:a9:86:aa:
a6:82:cd:c3:2d:12:3d:1d:85:0d:57:0d:ad:57:8d:d3:7b:00:
a7:b0:f3:98:ea:a0:e0:fe:f5:e8:28:49:35:16:4a:72:3f:d5:
06:d8:86:1e:73:0f:ca:b0:6d:12:b5:3e:31:3b:52:f6:6b:a0:
de:40:88:66:b6:36:cf:d2:f0:6f:a0:9f:1c:2d:43:1e:7c:b8:
ec:89:f7:3f:6a:e5:ae:63:e1:92:d1:96:5a:51:f9:8c:e3:0a:
34:b5:b2:aa:2c:be:17:db:39:3a:04:ad:7c:42:0b:9f:62:73:
39:4e:a2:6d:f7:58:c8:d7:89:16:bc:8d:05:fa:8f:62:5a:29:
39:fa:91:3c:80:d4:5a:c9:0d:56:86:03:88:89:7d:a0:35:83:
3c:c0:df:48:c0:6b:a3:6c:eb:5e:0b:da:4f:92:0d:f4:25:43:
25:61:7f:dd:a6:2e:3d:fa:86:8f:30:3f:a9:78:f2:95:6e:c3:
2a:9a:17:dd:f0:35:de:c5:b0:30:5f:69:5b:ca:50:83:38:3f:
29:dc:11:a3
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgICGaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDEzMDYxMTAvBgNVBAUTKEUwNEZCMkFBNjI3RDk3Qjk4OUFFQ0ZFODY5NzRFM0M1
RjMwMzEyMUEwHhcNMjUwNDIzMDg1MDQzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MjM2NC03YTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAooGYBdC15bcEflbsyqE93/jgS/hqKGrS9od0rN9ehJoOV++5oRHNq+/154LZ
8mA9SOr0pwGlNU6CG3xFOxC62yukDbi0y4EYYjOlGJUTGL5Mg5UsR8LWFZhSOHHh
txIydmrf5ehKTrUczSVnDj5wEItptQDRZODjeCZs/WkNWIqk0gIg4bVDRIz8rwH4
Xc3g2/LY77bUNsGmzymx8V6UccNbOiNPFHd6LL209Sp7kSETDw7msf4I1GIqf3tx
B6uc8qWUuaonMMFocSDdPy/sFs3G4LDuNGcGmPluKPJcLXQjheAjFYzlCgj68S4A
sGhHa3gZsOLKdk7oWONcQDlz6wIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFAPgNvHT
RDeXseGdPe1XdAMeKOmmMB8GA1UdIwQYMBaAFOBPsqpifZe5ia7P6Gl048XzAxIa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTMwNi9GRTQ5NzQ5ODgz
Q0ExMUU3QjgyNDBBNDJDNEY5QUUwMi80RS15cW1KOWw3bUpyc19vYVhUanhmTURF
aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRFLXlxbUo5bDdtSnJzX29hWFRqeGZNREVoby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDEzMDYvRkU0OTc0OTg4M0NBMTFFN0I4MjQwQTQyQzRGOUFFMDIvMDlDMERGQ0Uy
MDIwMTFGMDk4NjE5OTM0QzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJAH/4DANBgkqhkiG9w0BAQsFAAOCAQEAtOc7IQz4Zdy1Nkgxfotd
a+i8ewxLTZ/lNzRCOac6mO1OQmZ9s1KnZrfYAj7gxdlOyKtvqYaqpoLNwy0SPR2F
DVcNrVeN03sAp7DzmOqg4P716ChJNRZKcj/VBtiGHnMPyrBtErU+MTtS9mug3kCI
ZrY2z9Lwb6CfHC1DHny47In3P2rlrmPhktGWWlH5jOMKNLWyqiy+F9s5OgStfEIL
n2JzOU6ibfdYyNeJFryNBfqPYlopOfqRPIDUWskNVoYDiIl9oDWDPMDfSMBro2zr
XgvaT5IN9CVDJWF/3aYuPfqGjzA/qXjylW7DKpoX3fA13sWwMF9pW8pQgzg/KdwR
ow==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:04 2026 by rpki-client