
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/D83192B0152B11EE85ED4B1DC4F9AE02.roa
File: D83192B0152B11EE85ED4B1DC4F9AE02.roa (raw, json)
Hash identifier: LGeozBW8ScIny7vfJj5gLatMSQ4kRYXTUOoqvl6ruXM=
Subject key identifier: F2:13:EB:97:52:C1:7F:C9:8D:E9:12:D4:07:49:F3:D4:E8:5B:C2:C8
Certificate issuer: /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Certificate serial: 04C6
Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/D83192B0152B11EE85ED4B1DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:57:51 +0000
ROA not before: Fri 07 Mar 2025 00:45:59 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 133429
IP address blocks: 2400:54a0:2110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1222 (0x4c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D51A0, serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Validity
Not Before: Mar 7 00:45:59 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a47e1f-51ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a5:0f:af:36:a9:75:e9:f1:b5:26:b4:24:de:
dd:c0:09:10:c2:26:20:5a:52:bb:e7:8b:8c:d0:12:
a0:40:50:59:e5:c1:7b:b0:2a:b1:b3:25:0a:1f:98:
e9:20:ed:f6:42:86:b6:eb:be:58:d2:2d:64:c2:40:
99:34:ff:2b:d9:93:fe:50:15:9a:cd:72:0c:33:18:
28:5b:3c:b8:cb:94:8e:af:f5:79:a1:5f:55:c7:56:
56:2c:5a:1f:b9:9e:57:6d:45:74:1f:eb:a5:9c:77:
ce:57:8a:b1:ed:e5:37:5f:42:1c:4c:cf:d1:2f:a8:
ea:9e:8a:09:17:86:02:e4:4a:bc:04:ec:22:0b:e6:
5c:38:7c:8f:8c:41:17:7a:33:ab:1b:c7:7f:ca:fa:
d4:dc:c0:2f:b2:d1:95:25:9c:a5:b7:16:7a:80:e4:
24:8f:c2:26:9d:c5:df:e6:7d:86:c4:ea:79:70:bf:
2d:93:e2:1c:37:3f:8d:c2:21:70:1c:33:c6:20:42:
a9:86:1e:c3:51:44:41:45:78:b2:08:9d:70:b3:c0:
e6:7f:24:c0:c3:31:cc:2c:28:f3:a9:b1:75:ae:a1:
c1:07:6f:fb:1d:cb:47:33:1a:ba:56:56:6f:d9:32:
69:03:07:b1:38:1c:03:7e:07:6a:27:cc:5d:60:22:
26:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:13:EB:97:52:C1:7F:C9:8D:E9:12:D4:07:49:F3:D4:E8:5B:C2:C8
X509v3 Authority Key Identifier:
keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/D83192B0152B11EE85ED4B1DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:54a0:2110::/48
Signature Algorithm: sha256WithRSAEncryption
4b:a2:e8:e4:c5:f3:d9:d7:69:58:9c:18:ea:47:d0:54:e4:a7:
ae:ec:40:4c:e4:84:e8:f0:9e:6f:38:69:46:06:b8:5e:a4:95:
1a:9c:9c:bd:82:b9:e7:a6:45:ba:b2:78:41:b7:c7:84:f8:57:
b0:cd:6f:05:8e:6b:79:69:68:a6:ec:25:41:b5:f2:79:33:47:
ce:90:a9:b3:75:23:fc:97:77:f1:c4:7c:23:1f:bf:0d:89:0d:
69:80:0b:9a:74:63:55:73:ca:a2:c4:48:64:43:1a:b4:93:db:
91:c5:50:8f:d4:03:d4:fc:cc:66:5c:fb:39:fa:5d:71:2e:91:
80:d6:7d:1e:09:d3:e7:e5:74:8a:e2:8e:9a:f3:f9:63:82:b2:
69:ba:ff:0b:21:5d:5d:47:f4:79:32:19:04:c6:35:c6:33:fb:
af:e7:39:32:e0:a0:85:b2:6a:f4:f6:66:d9:29:9a:a5:67:1b:
ee:3f:19:9a:0c:8c:7a:32:7c:e2:00:37:77:16:77:9b:a8:82:
e0:33:c3:8b:79:44:04:b6:7c:8c:f2:8f:3a:06:96:54:cd:29:
49:03:f4:10:89:c2:54:4b:d9:e4:b7:3d:76:fc:70:15:5c:fa:
46:6b:7f:6f:a9:7c:55:2a:fd:3a:56:64:57:7e:6e:af:2f:fa:
02:91:3f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:16 2026 by rpki-client