
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/C1C279D6997C11F0BDB1853FC4F9AE02.roa
File: C1C279D6997C11F0BDB1853FC4F9AE02.roa (raw, json)
Hash identifier: 4mPqfTPQ2fcMHjXPMtWwiqLKnBhl1p74F2zSiB+yYkk=
Subject key identifier: 36:CD:B6:5A:99:70:5A:D1:6C:65:78:8C:40:20:12:1D:DD:85:FD:28
Certificate issuer: /CN=A91E4463/serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67
Certificate serial: 0CA2
Authority key identifier: 77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/C1C279D6997C11F0BDB1853FC4F9AE02.roa
Signing time: Wed 24 Sep 2025 19:29:15 +0000
ROA not before: Wed 24 Sep 2025 19:29:15 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 65780
IP address blocks: 2400:9940:1142::/48 maxlen: 48
2400:9940:1143::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl
rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 18:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3234 (0xca2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4463, serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67
Validity
Not Before: Sep 24 19:29:15 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=68d4468b-4dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fd:ca:46:76:65:b9:f4:c1:0d:33:c8:0f:e5:
73:18:fc:c5:bf:32:71:eb:3a:e3:e6:9f:e8:61:31:
83:f6:0c:49:41:2c:77:d6:23:9b:2a:51:74:fa:f7:
aa:1f:c0:42:7e:ab:fd:3d:68:df:6d:4e:b4:f3:67:
39:c9:c0:4a:87:31:b8:c0:04:58:69:a0:a0:1b:67:
86:22:90:b9:c5:82:a3:17:7f:c9:05:70:af:96:7e:
4b:49:d0:c3:76:2e:94:13:ed:7b:36:95:f3:7d:ce:
68:0f:93:f8:79:68:83:a8:64:8b:a4:40:43:fd:34:
97:4f:70:74:a5:59:1d:dd:60:2c:4d:27:15:8f:66:
1e:6e:77:bf:f0:0f:45:11:cf:78:a5:47:0a:cc:76:
35:c1:3b:6c:a2:50:e5:64:bc:2f:60:36:24:53:8e:
05:2a:49:fe:8c:cf:21:7d:b7:00:d7:52:3d:83:70:
8e:13:88:d1:74:29:73:c4:0b:25:8f:91:0b:27:56:
dd:9a:c1:2a:2d:d2:dd:ec:b7:e7:81:8e:49:46:fd:
ec:47:a5:52:4c:a1:05:7f:f5:b2:63:c2:fc:9b:f2:
82:ea:00:1c:8e:16:b7:c6:fe:bd:50:04:a7:f3:23:
41:d3:40:79:09:c7:6e:6c:fa:7a:fb:12:a0:24:6e:
93:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CD:B6:5A:99:70:5A:D1:6C:65:78:8C:40:20:12:1D:DD:85:FD:28
X509v3 Authority Key Identifier:
keyid:77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/C1C279D6997C11F0BDB1853FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:9940:1142::/47
Signature Algorithm: sha256WithRSAEncryption
91:f9:41:23:23:ff:74:93:e2:a6:7d:85:7b:38:22:1d:6d:14:
1f:b8:cc:d4:18:3d:d7:6c:83:54:3b:2c:e1:38:15:b4:a4:e1:
bb:f7:78:b2:df:be:dc:3b:bc:d8:95:03:2f:13:e9:c2:bd:46:
bd:db:d3:4e:0a:3b:7f:5f:d2:8a:a5:63:83:e1:77:30:de:43:
6a:d7:83:04:d3:09:f0:53:44:52:f4:7a:7d:b9:fc:14:07:ab:
d6:a7:13:56:02:91:91:69:86:5d:44:e4:7d:2a:75:5d:35:01:
cb:68:16:92:f9:2d:50:88:5b:5d:e9:c0:f2:9b:70:89:1f:62:
b4:1a:1a:c5:2f:4f:60:1c:2f:06:16:34:a4:79:0d:49:c4:a1:
29:25:71:38:32:88:15:a7:de:34:c6:01:09:66:20:23:08:3f:
46:5a:92:43:93:5d:7e:a8:98:36:51:12:67:77:4a:65:34:c3:
b2:15:4f:6b:8c:40:39:de:ef:20:59:3f:37:25:69:e7:55:06:
0a:e1:5e:3e:de:78:8f:8a:80:1f:ce:8c:3f:56:8f:39:3e:d7:
6d:1e:46:3b:54:20:75:c4:d8:09:4a:e6:bf:c6:86:cf:51:36:
d7:c2:d3:81:de:1f:ad:b5:c8:10:ac:b8:40:fc:5d:4a:02:76:
47:49:d6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:12:28 2025 by rpki-client