
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/CA7DCCFE5EE511ECA6B8CA48C4F9AE02.roa
File: CA7DCCFE5EE511ECA6B8CA48C4F9AE02.roa (raw, json)
Hash identifier: MZAkwEcI/RhPtb0HLVaP6vZemaPmWHrryFBvzadhdrI=
Subject key identifier: 64:21:17:30:7C:EA:77:81:8A:5F:E5:94:FB:13:8B:BE:EA:98:F4:4B
Certificate issuer: /CN=A91E0EF2/serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A
Certificate serial: 04CF
Authority key identifier: 3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/CA7DCCFE5EE511ECA6B8CA48C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:47:34 +0000
ROA not before: Sun 01 Mar 2026 01:20:39 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 9342
IP address blocks: 144.218.0.0/16 maxlen: 24
169.201.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl
rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1231 (0x4cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0EF2, serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A
Validity
Not Before: Mar 1 01:20:39 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a43566-6580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:79:8c:1c:8c:f2:ea:6e:bb:db:82:93:05:60:
5b:18:93:dc:e0:ef:e1:24:a7:2e:35:99:71:42:a4:
07:c1:a3:87:7f:fa:65:3b:be:b4:3d:77:46:30:f4:
6a:1f:af:e0:a4:83:72:fc:7f:e3:0b:04:60:e5:d3:
7f:0e:56:2f:c7:96:54:fe:b9:6d:80:7d:18:8a:ed:
60:c9:04:15:ad:de:cb:e9:11:ad:81:f9:27:d0:62:
85:da:fd:2f:c3:4d:14:44:0d:51:8a:83:b6:61:e7:
5a:c3:a2:84:0d:0f:65:aa:1a:45:ac:82:9c:e1:d8:
9a:b9:9f:23:f9:ec:3c:c2:0e:1f:a1:c8:41:0c:ac:
e8:dd:f7:47:80:f6:ea:65:bc:92:9c:03:e1:67:12:
7e:ad:c3:01:36:80:e1:0c:db:9a:2f:14:d0:94:0f:
ec:58:9a:ca:87:0e:56:a7:65:50:9e:af:9a:73:f1:
88:b1:fb:00:b2:c5:a5:e5:28:e2:83:29:33:52:b7:
08:69:01:8b:ce:7a:0e:3d:c5:05:3f:b4:48:e0:0d:
b7:af:be:df:8e:32:7c:88:b8:2e:a1:65:8b:0d:d5:
07:cb:ee:8b:13:92:36:e8:1d:5c:28:6e:2a:3b:b0:
2b:09:80:7d:8e:c2:cc:e0:0a:a1:d3:bf:a2:b7:0a:
eb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:21:17:30:7C:EA:77:81:8A:5F:E5:94:FB:13:8B:BE:EA:98:F4:4B
X509v3 Authority Key Identifier:
keyid:3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/CA7DCCFE5EE511ECA6B8CA48C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
144.218.0.0/16
169.201.0.0/16
Signature Algorithm: sha256WithRSAEncryption
89:d9:9b:21:b0:47:3d:0f:8c:9e:c1:5b:71:64:f6:cf:93:9a:
6a:7d:78:94:fe:ed:a9:c7:38:dc:e6:cb:28:01:09:0e:ec:de:
61:ab:23:37:45:87:af:c7:ca:f5:33:62:06:99:2f:59:58:95:
da:81:1e:ed:d2:fc:37:9e:12:0b:0d:6e:5b:12:c4:32:82:6f:
03:e0:1d:2e:7a:2c:9c:8d:55:60:0c:5a:71:95:6e:c2:1e:1a:
51:81:65:ab:e0:77:6b:b4:25:fd:97:04:54:61:5c:27:80:b5:
c8:8a:78:d1:60:3c:6a:31:aa:a4:14:b4:1d:5d:58:41:a3:40:
15:54:7d:3d:0f:38:f5:1c:10:51:ef:79:7a:e4:dc:c1:1a:ef:
3d:46:df:6d:71:95:ce:14:20:df:2c:2f:71:ce:72:6a:b8:22:
17:6e:5b:c0:86:0f:9e:16:8b:72:ed:8a:51:47:30:7a:eb:70:
7e:19:a0:68:79:bf:b8:1e:da:a9:c6:e6:19:ca:23:8b:69:27:
c9:8b:16:6b:64:7e:7b:2b:6b:89:ba:a9:d3:d8:62:84:54:83:
40:8e:6a:ef:88:93:52:40:da:1e:ed:e1:f8:85:78:dc:ba:10:
9a:d7:19:38:15:b2:c8:8d:dd:ad:6a:3a:de:80:77:14:eb:67:
53:e5:06:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:48:56 2026 by rpki-client