
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/E6FD5EBCBA3A11EBA9482F5AC4F9AE02.roa
File: E6FD5EBCBA3A11EBA9482F5AC4F9AE02.roa (raw, json)
Hash identifier: 5NKCQJLuqvr9nbUC17fmFGMoTVPmZp3opZKxATu37k8=
Subject key identifier: 4E:DD:A4:8B:A6:90:53:55:9C:6C:C7:90:FB:35:E1:A0:80:34:D1:13
Certificate issuer: /CN=A91E1D77/serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119
Certificate serial: 0986
Authority key identifier: 86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/E6FD5EBCBA3A11EBA9482F5AC4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:45:41 +0000
ROA not before: Sat 14 Jun 2025 20:36:21 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 9221
IP address blocks: 2406:dc0:232c::/47 maxlen: 48
2406:dc0:235e::/47 maxlen: 48
2406:dc0:23e4::/47 maxlen: 48
2406:dc0:883e::/47 maxlen: 48
2406:dc0:8850::/47 maxlen: 48
2406:dc0:88bc::/47 maxlen: 48
2406:dc0:88ca::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl
rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 13:45:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2438 (0x986)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1D77, serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119
Validity
Not Before: Jun 14 20:36:21 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a59485-a62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:86:97:32:18:f2:10:af:22:d6:35:83:a9:13:
7f:93:c4:13:55:58:14:99:c6:65:51:c7:b6:cf:da:
cd:bf:2b:1c:a1:f8:f2:fd:da:87:05:fb:67:9f:a3:
05:3b:10:74:3a:c9:e7:4e:64:87:f1:74:9b:76:7d:
5b:1c:f7:d5:e2:0e:72:84:4f:37:4f:b0:ed:67:32:
f0:b3:7d:c5:ab:99:46:14:0c:19:21:84:1f:c3:6b:
56:40:73:30:b6:76:f3:6f:6e:d9:33:a3:9a:dd:9f:
97:68:b3:a2:ea:21:cb:c8:5d:2e:14:e2:bc:59:61:
28:34:de:4e:ac:79:d0:af:64:2a:8b:a0:a9:da:9d:
b4:64:01:f6:b7:61:1a:e7:3b:b9:2c:c4:5e:1f:9d:
79:30:8f:46:c9:b2:27:d1:68:65:c2:00:92:02:8c:
e6:2b:b0:f3:3d:77:d5:95:e3:d6:3b:af:ac:ec:4b:
19:79:cc:d7:3a:df:97:6d:ed:f5:51:20:2b:a0:03:
d6:df:dd:7c:a7:5d:c1:ea:28:ab:03:48:e9:16:4c:
5a:2a:e9:ad:c2:c4:b0:65:80:b8:46:4c:16:60:f9:
8a:bc:39:aa:91:1c:a6:95:d2:0f:73:8f:93:b1:f9:
d4:2e:bb:75:85:5c:ef:8d:6a:40:b0:7e:6b:ae:cf:
6c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DD:A4:8B:A6:90:53:55:9C:6C:C7:90:FB:35:E1:A0:80:34:D1:13
X509v3 Authority Key Identifier:
keyid:86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/E6FD5EBCBA3A11EBA9482F5AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:dc0:232c::/47
2406:dc0:235e::/47
2406:dc0:23e4::/47
2406:dc0:883e::/47
2406:dc0:8850::/47
2406:dc0:88bc::/47
2406:dc0:88ca::/47
Signature Algorithm: sha256WithRSAEncryption
b7:c4:d9:d3:6b:e0:b9:1b:94:87:e8:07:48:c2:57:9e:e6:7a:
f9:c4:76:d1:ef:b3:7f:6a:1d:73:c9:db:49:58:55:ab:bb:58:
26:73:e0:37:1d:46:fe:62:1a:a6:31:4e:5b:4d:a4:aa:f6:09:
e6:d7:74:6c:b5:7a:be:3d:86:c9:8c:fb:32:cc:d4:bb:84:96:
13:72:ed:ad:7f:83:0f:0d:8b:22:8e:a0:53:72:03:13:bd:dd:
ed:16:d3:ab:7b:21:16:f7:09:db:90:f9:ba:21:f1:42:67:17:
2a:c9:84:43:6a:0c:17:dc:dc:4c:88:42:5b:d6:14:b2:72:f9:
4a:17:5e:0b:56:0c:e6:ac:c1:24:37:62:0e:3a:24:23:36:ff:
69:8c:ce:e5:4b:3f:1e:c4:96:3c:e7:e8:f7:bb:7d:1c:03:41:
2c:b5:e9:51:ca:54:8e:15:85:bd:34:e8:9e:27:32:4a:de:91:
2e:22:b5:1f:30:93:90:8e:08:69:70:a9:50:e2:01:a0:e9:9f:
1d:d9:f8:3c:b7:a3:43:c3:f4:68:bc:5f:24:05:72:68:0a:25:
75:35:a5:6e:df:3b:0f:07:fb:10:49:5f:38:64:c6:dd:8f:e7:
45:f3:da:52:cc:ed:50:d8:47:98:0a:60:4e:4b:cb:f1:eb:e0:
ab:9d:aa:be
-----BEGIN CERTIFICATE-----
MIIFdTCCBF2gAwIBAgICCYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTFENzcxMTAvBgNVBAUTKDg2QzIzQzE3QkM0RDIwRUUxNkYwOTJEMzVBMkNGNjU1
NEZFQzcxMTkwHhcNMjUwNjE0MjAzNjIxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OTQ4NS1hNjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv4aXMhjyEK8i1jWDqRN/k8QTVVgUmcZlUce2z9rNvyscofjy/dqHBftnn6MF
OxB0OsnnTmSH8XSbdn1bHPfV4g5yhE83T7DtZzLws33Fq5lGFAwZIYQfw2tWQHMw
tnbzb27ZM6Oa3Z+XaLOi6iHLyF0uFOK8WWEoNN5OrHnQr2Qqi6Cp2p20ZAH2t2Ea
5zu5LMReH515MI9GybIn0WhlwgCSAozmK7DzPXfVlePWO6+s7EsZeczXOt+Xbe31
USAroAPW3918p13B6iirA0jpFkxaKumtwsSwZYC4RkwWYPmKvDmqkRymldIPc4+T
sfnULrt1hVzvjWpAsH5rrs9s3QIDAQABo4ICmTCCApUwHQYDVR0OBBYEFE7dpIum
kFNVnGzHkPs14aCANNETMB8GA1UdIwQYMBaAFIbCPBe8TSDuFvCS01os9lVP7HEZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUQ3Ny80QjY0MjdFMkFC
RjkxMUVBODhBQUUzMkNDNEY5QUUwMi9oc0k4Rjd4TklPNFc4SkxUV2l6MlZVX3Nj
UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hzSThGN3hOSU80VzhKTFRXaXoyVlVfc2NSay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTFENzcvNEI2NDI3RTJBQkY5MTFFQTg4QUFFMzJDQzRGOUFFMDIvRTZGRDVFQkNC
QTNBMTFFQkE5NDgyRjVBQzRGOUFFMDIucm9hMFgGCCsGAQUFBwEHAQH/BEkwRzBF
BAIAAjA/AwcBJAYNwCMsAwcBJAYNwCNeAwcBJAYNwCPkAwcBJAYNwIg+AwcBJAYN
wIhQAwcBJAYNwIi8AwcBJAYNwIjKMA0GCSqGSIb3DQEBCwUAA4IBAQC3xNnTa+C5
G5SH6AdIwlee5nr5xHbR77N/ah1zydtJWFWru1gmc+A3HUb+YhqmMU5bTaSq9gnm
13RstXq+PYbJjPsyzNS7hJYTcu2tf4MPDYsijqBTcgMTvd3tFtOreyEW9wnbkPm6
IfFCZxcqyYRDagwX3NxMiEJb1hSycvlKF14LVgzmrMEkN2IOOiQjNv9pjM7lSz8e
xJY85+j3u30cA0EstelRylSOFYW9NOieJzJK3pEuIrUfMJOQjghpcKlQ4gGg6Z8d
2fg8t6NDw/RovF8kBXJoCiV1NaVu3zsPB/sQSV84ZMbdj+dF89pSzO1Q2EeYCmBO
S8vx6+Crnaq+
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:25:27 2026 by rpki-client