
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/86131D8AEA5D11ED80641166C4F9AE02.roa
File: 86131D8AEA5D11ED80641166C4F9AE02.roa (raw, json)
Hash identifier: akZ7H2CCWjRteC0DsYzzpQopHtGbHczA7D7Pola5e8U=
Subject key identifier: 48:C3:57:D6:BF:F4:F2:C8:87:B8:04:28:C5:F1:D1:F5:89:D8:20:4E
Certificate issuer: /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Certificate serial: 04C7
Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/86131D8AEA5D11ED80641166C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:57:52 +0000
ROA not before: Fri 07 Mar 2025 00:46:00 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 139321
IP address blocks: 2400:54a0:2050::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1223 (0x4c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D51A0, serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Validity
Not Before: Mar 7 00:46:00 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a47e20-b81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ef:26:4b:1d:14:81:e6:be:49:37:96:34:54:
e2:c7:5c:53:a9:d0:3e:54:16:b2:21:7f:e0:d2:dd:
8d:4e:34:8d:f8:73:bf:09:42:db:61:86:da:b3:e6:
42:b5:47:a1:b5:93:28:eb:63:6e:f5:15:fa:fa:eb:
5f:f2:e3:f5:04:e8:ca:53:a2:d0:76:aa:b9:08:6d:
4d:b2:94:8e:61:7f:4d:49:aa:5c:c0:6c:b6:eb:4e:
50:32:6a:d6:7f:bf:13:df:8b:b0:1b:9f:9d:27:d3:
1b:dc:1c:ca:13:89:66:7d:55:c8:0b:50:4f:07:e9:
7f:19:12:26:2b:08:0b:29:d5:7a:c3:de:36:e6:c0:
3b:88:52:9a:09:66:4c:d7:2b:bc:fe:9b:53:59:f1:
b9:39:f3:a3:f1:a0:3c:eb:b9:be:19:eb:c9:79:5e:
ba:b2:d2:cf:46:21:be:13:df:a2:c1:67:b1:26:a1:
30:44:8a:b1:79:a4:3e:17:2f:b3:fb:c2:f7:5d:a3:
64:2b:c6:f6:47:6b:bd:c6:bd:8a:3d:fc:4d:39:44:
9e:0e:e6:53:db:29:8c:08:23:72:06:8f:03:aa:2c:
d0:1c:26:98:5d:cf:3b:5f:eb:52:fc:46:e4:da:25:
71:25:a7:0b:f3:b8:11:53:ab:4a:5b:ac:2d:31:69:
35:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C3:57:D6:BF:F4:F2:C8:87:B8:04:28:C5:F1:D1:F5:89:D8:20:4E
X509v3 Authority Key Identifier:
keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/86131D8AEA5D11ED80641166C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:54a0:2050::/48
Signature Algorithm: sha256WithRSAEncryption
4b:83:94:80:e8:cc:d1:3a:72:2b:ed:6c:dd:5c:4d:89:91:96:
71:f2:18:b7:0a:36:19:7c:a6:f7:be:73:cd:fb:cc:72:10:12:
78:70:7b:c5:77:9f:fe:88:5b:15:ba:b8:54:bd:14:3c:eb:c8:
0c:60:9f:78:bb:69:04:9b:d8:9a:4f:7a:46:43:d6:88:5d:d5:
bc:c6:54:a1:89:08:e9:cb:48:5e:b4:8b:e2:f2:8d:9b:5a:4f:
f1:55:ce:97:7e:ef:d0:41:e0:46:ef:c8:ce:fa:0c:5b:3f:9c:
3f:fe:33:bf:49:db:98:65:f5:e2:ba:34:a6:13:7c:14:dd:b8:
6c:99:aa:ca:ef:4c:ea:02:b7:f1:16:02:33:e0:d4:2c:f3:43:
03:49:cb:87:0e:14:34:0e:31:16:72:5b:c7:4d:12:91:f5:9d:
2a:6c:ad:92:06:5f:3d:ac:55:12:c8:9c:70:a4:41:60:44:a6:
7f:aa:b9:eb:14:3a:ee:06:c3:0c:60:56:e7:dd:54:fd:dd:ed:
76:91:6a:73:d2:2c:75:dc:ae:0f:a1:a1:ef:39:5a:48:a6:a0:
d7:4d:3d:7b:40:8c:52:f0:d7:2b:95:b8:da:60:e2:4c:61:21:
bd:72:39:5f:4c:3d:82:ff:38:b7:f3:07:14:2f:75:45:96:ea:
bb:f1:b3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:37:08 2026 by rpki-client