
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/11CCFCD8DB0B11F0BC36350982D3641D.roa
File: 11CCFCD8DB0B11F0BC36350982D3641D.roa (raw, json)
Hash identifier: iqoDOOCu/fngDkkSni/oqHyjislrgnbGvgYBpgWoetA=
Subject key identifier: CE:64:9A:C5:B5:5E:54:DB:DD:C2:A0:8E:84:82:9D:57:94:64:52:BC
Certificate issuer: /CN=A91DF195/serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5
Certificate serial: 63
Authority key identifier: 61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/11CCFCD8DB0B11F0BC36350982D3641D.roa
Signing time: Sun 01 Mar 2026 15:16:51 +0000
ROA not before: Wed 31 Dec 2025 07:24:42 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 2764
IP address blocks: 2001:df5:f042::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl
rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:29:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF195, serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5
Validity
Not Before: Dec 31 07:24:42 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a45863-0260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:24:a3:94:46:33:63:16:75:3c:e6:01:bf:e9:
11:c0:70:30:73:c1:83:e2:ff:a6:ec:f0:cd:0d:7c:
d8:99:08:6e:b6:5d:ee:d4:a4:d5:41:16:df:bb:d4:
31:f6:40:a4:15:c7:94:b8:24:76:04:aa:2d:b5:a8:
ee:6f:36:63:0c:6b:db:79:57:9c:f0:1c:43:2b:1e:
2b:50:7e:92:71:b9:fc:e8:c3:ae:90:d8:97:26:0f:
5d:69:6b:20:b5:be:8a:6d:ea:f8:9b:18:bc:b5:a4:
4a:f7:39:de:d1:56:64:75:a4:25:a8:39:50:1b:2d:
d0:ef:f3:02:ff:fb:7e:24:38:e5:99:80:97:37:54:
7b:2f:f0:88:9e:fc:43:72:87:d9:f7:d5:bd:6b:81:
d7:f7:68:fd:83:8b:11:74:8d:96:3c:b0:3e:18:a6:
85:63:1c:f8:cf:b8:f2:07:6d:dc:9c:75:3b:d6:a3:
f7:fc:9f:2c:6c:f0:16:b5:c3:85:69:3b:30:25:0a:
dc:2b:18:bc:95:cd:f6:92:14:7d:a7:fd:e9:ef:cf:
90:f2:91:b6:82:f5:fc:0f:f3:3b:82:ed:7c:d0:9b:
9b:d6:dc:46:b4:3c:54:59:a7:71:5d:6a:94:56:da:
7a:5d:73:fd:32:2b:fc:0c:85:3c:a1:2f:20:7f:3b:
5e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:64:9A:C5:B5:5E:54:DB:DD:C2:A0:8E:84:82:9D:57:94:64:52:BC
X509v3 Authority Key Identifier:
keyid:61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/11CCFCD8DB0B11F0BC36350982D3641D.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:f042::/47
Signature Algorithm: sha256WithRSAEncryption
76:ab:02:95:2c:1d:05:a8:b0:4a:6f:9c:16:8c:eb:ce:3c:df:
76:a0:71:7b:29:ce:15:ed:68:37:bb:d6:89:a2:d4:47:8e:8d:
bc:3f:6f:b4:3e:cf:83:15:df:6f:3b:99:1a:ca:98:12:0a:6c:
b0:8e:87:29:f8:7b:62:0c:43:28:2c:d1:29:67:7b:75:f8:a9:
f1:64:ed:ad:d0:79:36:df:72:2c:eb:16:5f:d0:97:18:c3:d0:
0a:2f:f5:9b:d8:71:b2:ca:14:08:7c:57:bd:94:fc:57:5b:df:
83:6b:e0:f3:19:b6:2b:b4:a6:2c:5a:93:39:b2:00:48:4e:2b:
a1:33:23:76:57:5c:61:2b:b6:77:f2:14:1a:f1:38:67:93:a1:
57:a8:28:21:19:58:2b:79:91:30:70:20:d3:c5:15:e8:1b:ac:
4d:f8:0e:b0:de:10:fa:0a:ae:d4:2d:0c:ac:d2:f2:d2:14:4f:
22:3a:a4:7f:fb:d0:27:7a:1a:77:3b:95:8b:5f:f6:a3:46:b2:
7f:cc:35:31:df:6b:c9:20:ef:26:d9:55:c0:36:72:be:78:b7:
7c:43:f6:33:ad:f3:f6:55:f2:7f:2c:bd:4b:5d:3b:e3:96:df:
65:67:ab:14:dc:13:cf:2d:28:04:16:12:7f:39:6c:5c:c7:b3:
ed:c8:c8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:28 2026 by rpki-client