
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/D0D94718CB8111E89EDE697DC4F9AE02.roa
File: D0D94718CB8111E89EDE697DC4F9AE02.roa (raw, json)
Hash identifier: cIxtJWgcXzpekN854h+Gn0iT4S0YYTFuZrY9rIh4a6M=
Subject key identifier: 17:CF:3C:0A:3F:2E:0D:D9:17:87:FE:B4:B0:34:6B:4E:C5:B0:9F:50
Certificate issuer: /CN=A91E46B1/serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6
Certificate serial: 1521
Authority key identifier: 30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/D0D94718CB8111E89EDE697DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:45:14 +0000
ROA not before: Tue 08 Jul 2025 17:25:31 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 23779
IP address blocks: 138.243.0.0/16 maxlen: 31
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl
rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:13:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5409 (0x1521)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E46B1, serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6
Validity
Not Before: Jul 8 17:25:31 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a442e9-9f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:77:97:a0:70:86:1e:c4:15:0b:0f:9a:47:1c:
b9:b0:6b:93:f5:50:cf:f8:3c:ec:52:b8:de:63:52:
27:d8:e0:0f:cb:40:5a:e4:4c:84:2b:6a:6f:b9:40:
cd:47:98:c2:cd:27:63:c9:80:77:5f:21:7e:67:98:
bb:c7:b5:b8:bc:8c:81:7a:02:b0:51:f9:14:78:b8:
73:36:ab:7d:e6:c4:65:b1:fc:72:bb:b5:ea:3e:2b:
05:bc:4c:3c:56:91:c4:e5:4a:e9:ef:c8:89:30:c4:
a0:d5:c7:bc:08:8d:fd:fb:49:e3:0a:f4:3f:85:e9:
44:13:99:fa:e4:4e:ad:a2:ae:c2:24:59:aa:69:07:
99:5a:b5:7f:42:eb:47:88:76:b6:4f:a6:df:fe:c3:
d5:84:ff:77:0a:11:6d:65:27:3b:e0:be:7a:2d:1d:
d9:20:d4:fd:37:7f:a3:b2:d4:0a:63:2f:15:54:35:
2f:5e:13:51:2a:45:6d:50:ea:14:78:9b:c5:15:26:
35:6e:bd:50:87:1c:07:44:a0:7b:34:aa:20:3f:84:
49:12:c7:6d:ad:c5:c4:2a:74:99:a7:7d:30:aa:92:
46:74:18:f8:1d:ff:d6:48:de:64:72:19:26:f2:4f:
04:18:d9:13:a2:02:56:c6:3f:fb:0a:7b:8f:2e:96:
62:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CF:3C:0A:3F:2E:0D:D9:17:87:FE:B4:B0:34:6B:4E:C5:B0:9F:50
X509v3 Authority Key Identifier:
keyid:30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/D0D94718CB8111E89EDE697DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
138.243.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b7:71:b5:c2:10:e7:0f:d4:dc:a6:ec:58:58:b3:81:dc:7b:2b:
a3:42:16:3d:fc:0d:4f:b7:e7:ed:61:be:9f:38:19:3a:7c:05:
81:19:01:f1:73:37:89:18:e2:30:d8:f8:f9:e1:b2:6f:26:61:
bb:26:67:eb:64:65:35:a9:7c:fe:0d:fa:cb:86:7d:20:aa:c4:
8f:7a:84:93:14:37:92:9b:a8:8a:c4:1c:66:21:f6:e0:cc:91:
bf:12:1d:0e:32:a0:78:ba:4a:2b:db:58:2e:36:e6:63:dc:c1:
e6:0e:ef:17:31:8d:ca:2f:86:76:a1:74:5a:1f:21:b1:d6:7a:
fb:44:17:c2:93:e2:bb:73:20:f0:82:3b:ee:0d:98:ed:57:f8:
65:b1:59:0e:47:0a:89:f2:1f:af:59:60:bf:12:e6:86:85:e4:
b8:23:84:59:70:f6:c1:e6:b1:ec:47:25:54:41:83:e4:db:53:
b4:40:e6:db:ba:b1:89:a0:20:2a:66:70:3c:0c:bc:92:cf:66:
4f:69:11:36:34:b9:a2:db:f4:c2:2d:5c:dd:3f:d9:a6:f5:d4:
4c:c7:c7:0e:49:31:54:86:35:c2:46:c8:06:88:cb:ea:a9:34:
95:08:17:4f:26:65:5d:30:73:6c:65:ea:f5:fb:0a:6f:06:2e:
e6:c9:93:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:21 2026 by rpki-client