
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/6645DC148FC811F08B8AA75FC4F9AE02.roa
File: 6645DC148FC811F08B8AA75FC4F9AE02.roa (raw, json)
Hash identifier: EjqSo3SW+tOTV2FfgYGjfnvYu8XgeXYJLsSNDtZjQcU=
Subject key identifier: 3E:4F:FA:3E:A2:3B:95:D8:C4:6E:B4:44:16:88:81:15:69:EE:91:86
Certificate issuer: /CN=A91E1D51/serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D
Certificate serial: 58
Authority key identifier: DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/6645DC148FC811F08B8AA75FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:29:58 +0000
ROA not before: Fri 12 Sep 2025 11:05:32 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 154184
IP address blocks: 202.6.206.0/23 maxlen: 24
2402:2660::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl
rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:32:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1D51, serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D
Validity
Not Before: Sep 12 11:05:32 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a3dce6-b00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b6:99:84:3d:84:b2:d1:1a:1f:4c:aa:80:fb:
6e:33:b7:12:67:24:a3:2a:88:e6:cf:61:a6:b2:d5:
2f:48:f5:69:e3:70:04:ce:59:04:99:a5:5c:58:6f:
ca:58:e2:4c:2f:e7:e2:c2:af:54:0a:1b:36:44:6a:
21:cb:0f:5c:2f:2e:7f:dd:9c:b8:b6:0e:85:fd:4e:
33:6c:c6:2b:72:31:36:95:c2:4b:a9:b7:f4:88:cb:
9f:b1:ea:43:fe:8d:35:05:11:db:8a:5d:da:ec:fe:
de:2f:f9:66:6e:ce:a6:2b:de:86:16:31:74:75:d5:
ef:12:4d:94:c0:ee:ca:50:43:cd:0f:07:0e:fc:1f:
2b:1f:e9:43:e6:d8:69:33:dd:e1:a1:b4:d5:ce:6e:
b1:6d:64:65:43:1b:e9:a2:00:4e:48:14:a5:6b:1c:
29:78:9d:bf:74:53:60:23:45:3a:ff:e0:5d:03:1d:
be:07:66:e4:60:1d:1a:16:ac:2c:c0:8d:95:13:72:
33:da:95:ef:a3:cc:04:bb:d7:35:67:f6:2c:f8:3a:
d5:0e:bc:45:b6:c4:e4:b1:61:0c:22:c4:d1:1f:c1:
eb:54:57:b5:3d:3a:98:82:87:26:0a:42:4e:8a:aa:
91:89:3a:2f:47:9e:de:0f:b5:f1:00:dc:6d:34:50:
e7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4F:FA:3E:A2:3B:95:D8:C4:6E:B4:44:16:88:81:15:69:EE:91:86
X509v3 Authority Key Identifier:
keyid:DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/6645DC148FC811F08B8AA75FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.6.206.0/23
IPv6:
2402:2660::/32
Signature Algorithm: sha256WithRSAEncryption
26:c4:27:98:25:bb:23:e3:da:90:3e:83:be:f7:6e:8d:13:01:
ff:5e:83:03:d8:29:f9:bc:16:98:ca:fc:ac:a8:ba:be:55:de:
88:46:90:11:08:36:5c:3b:28:af:50:28:5f:7e:33:66:75:49:
e3:1d:f8:fb:6a:07:84:c7:e7:fd:72:16:7f:6d:c6:e2:d0:08:
12:d5:a3:3b:4e:be:75:a3:b7:a3:1e:7d:e5:e7:fe:ee:2e:ba:
fe:c9:5f:c5:f9:cd:1d:4a:75:4e:58:41:1f:b1:87:2b:33:e6:
88:91:9d:de:51:ec:a8:9a:12:a3:29:98:f9:96:de:11:c6:0d:
df:fe:cc:5c:6a:ad:24:64:3f:79:54:82:8b:a7:e7:bf:38:4d:
d5:5b:29:2e:64:ef:e9:ea:a7:90:64:dd:7a:7b:13:d4:31:c7:
43:bf:60:04:4c:7a:cc:c5:c3:f2:68:56:98:8a:ff:c0:a0:d2:
84:9d:a0:f3:5e:c4:df:2f:62:56:e9:b8:e5:16:6c:e6:8b:5b:
0f:41:a1:77:11:57:ea:2c:a1:df:c6:ce:91:7c:b1:6a:3d:d5:
b9:3d:2a:f2:70:c3:be:75:51:8b:19:e2:21:2a:5a:6e:8c:24:
53:dd:ae:02:62:eb:6a:19:e2:96:5b:06:dd:8f:f0:5c:8e:23:
5e:1f:7e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:29:08 2026 by rpki-client