
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/7E4270063AF011EC9E421056C4F9AE02.roa
File: 7E4270063AF011EC9E421056C4F9AE02.roa (raw, json)
Hash identifier: OaLKzRWPKKcTGw6rmWCHPUNpoog0PfcR906ei0W6zKM=
Subject key identifier: 82:6F:46:59:67:E7:D9:71:39:F5:6E:CD:01:77:C0:F8:72:2F:4A:1B
Certificate issuer: /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
Certificate serial: 0966
Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/7E4270063AF011EC9E421056C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:41:53 +0000
ROA not before: Fri 02 May 2025 21:01:36 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 38254
IP address blocks: 2404:c140:956e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl
rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:25:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2406 (0x966)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEDFD, serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
Validity
Not Before: May 2 21:01:36 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a45e41-75d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2a:a4:f0:6d:18:b7:cd:23:60:22:8b:77:65:
f2:b1:61:26:42:79:da:ff:99:de:b6:4d:21:d6:09:
38:ec:37:18:62:3c:07:8f:7b:ec:98:b4:5f:17:0c:
96:e2:d1:47:c7:a6:72:85:04:16:ad:da:a2:66:1c:
b6:42:b8:37:8e:76:9c:31:fe:c9:93:2e:90:76:f4:
7d:02:c6:92:8c:0d:85:7f:1d:07:c7:b2:cf:5a:2d:
dd:7e:f7:6b:26:4d:9f:06:d1:44:b3:81:76:fa:82:
47:a6:70:1b:4c:dc:20:cb:69:da:48:16:8d:43:a9:
e7:0e:59:6d:9e:f8:87:89:09:fc:29:27:16:9e:51:
4f:98:09:f2:5b:d9:3e:16:3f:16:18:86:96:d9:77:
62:f4:d8:6c:6d:bd:9e:57:b3:9a:c0:52:b5:c9:c9:
ac:1f:de:be:7c:42:80:12:ac:5f:15:8e:96:da:bb:
02:c0:cf:6f:30:57:87:48:12:eb:93:6f:d6:9b:c4:
19:b3:d2:80:80:8a:73:8a:41:be:65:0d:62:58:ba:
04:81:5a:7a:54:ab:42:ac:0e:81:23:5a:3f:f7:23:
58:79:19:f2:b0:cc:7d:67:a0:e0:d7:b3:8a:20:bc:
eb:43:02:3d:ef:0f:1f:77:91:80:a1:9c:11:3c:75:
98:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6F:46:59:67:E7:D9:71:39:F5:6E:CD:01:77:C0:F8:72:2F:4A:1B
X509v3 Authority Key Identifier:
keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/7E4270063AF011EC9E421056C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2404:c140:956e::/48
Signature Algorithm: sha256WithRSAEncryption
54:b6:72:76:3b:11:c1:48:b4:55:26:71:1c:f0:1e:a8:98:9a:
f2:f8:de:d9:ca:fa:9d:f5:a2:ee:56:53:d0:be:64:fc:e2:da:
6c:15:7d:c7:de:84:d6:2d:05:2c:79:55:b8:79:ad:18:c9:d3:
6b:bb:07:68:3a:40:33:57:e0:5d:78:24:7e:fb:e1:ac:d9:f1:
28:27:c5:0e:85:b0:0a:36:9c:bb:e7:c3:de:27:3b:ce:87:50:
a1:03:c1:3b:f5:57:81:6f:f2:1b:dc:21:09:da:3e:42:ae:a3:
c9:98:47:02:85:ba:1d:f4:6d:18:40:78:49:c3:d6:e8:04:9e:
02:04:67:02:13:0a:40:8e:0e:5c:51:60:1b:b2:e2:8b:cf:ec:
1b:82:fb:f3:5d:01:bc:40:db:64:f4:a5:b2:1f:b3:25:81:3e:
1a:07:c5:46:99:dd:dc:2d:22:26:22:89:ef:2d:a0:36:d0:a7:
59:2d:44:dc:5f:c3:88:31:26:f4:8e:f1:ca:e4:38:75:a0:a1:
3a:fb:bb:b7:2f:6f:35:fa:52:7b:c6:8a:c6:1e:b4:e9:60:18:
8d:3c:a2:60:92:26:cc:9f:8f:b4:eb:c2:35:6b:47:a5:2f:f7:
bb:81:a9:12:20:ee:3e:b2:54:93:72:c8:a1:d1:fc:ea:15:5b:
8b:03:69:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:26:58 2026 by rpki-client