
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/39D4D290CB8311E88E74AD83C4F9AE02.roa
File: 39D4D290CB8311E88E74AD83C4F9AE02.roa (raw, json)
Hash identifier: UrcrtOTCqWfvjicRejtIIOjtBiViB3UqRZqRcJo62i4=
Subject key identifier: C6:66:11:50:D3:A0:5F:6F:C0:2F:71:B6:3F:BE:24:83:4D:CA:67:8F
Certificate issuer: /CN=A91E46B1/serialNumber=8C7D6BA1F15509ACF3131582597D5CAD9E419B4F
Certificate serial: 1516
Authority key identifier: 8C:7D:6B:A1:F1:55:09:AC:F3:13:15:82:59:7D:5C:AD:9E:41:9B:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/39D4D290CB8311E88E74AD83C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:32:37 +0000
ROA not before: Tue 08 Jul 2025 17:25:33 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 23779
IP address blocks: 2402:af40::/32 maxlen: 38
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.crl
rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:13:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5398 (0x1516)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E46B1, serialNumber=8C7D6BA1F15509ACF3131582597D5CAD9E419B4F
Validity
Not Before: Jul 8 17:25:33 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a423d5-f3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:31:be:4d:dc:00:c6:ab:ce:6d:dd:3c:4e:16:
93:e8:5b:49:8e:fd:cc:8d:9d:5b:a7:47:55:73:6d:
89:55:19:c1:ef:0d:95:d4:7f:76:11:25:c2:f5:d7:
58:65:61:1c:6a:8b:c2:52:aa:59:8c:a5:d6:3c:5c:
a1:e4:17:d3:ca:c6:96:9a:3c:95:d4:b6:c4:7b:b0:
fa:f0:59:f2:98:6e:72:32:d6:b3:a8:ae:7f:12:e0:
e5:c8:59:08:89:91:12:ac:ef:c6:e7:f0:60:2c:46:
73:0c:84:0a:35:11:09:fa:07:f0:c4:28:94:e0:f6:
01:38:fe:6b:89:81:19:48:90:d3:b1:7b:b8:b5:6f:
b0:f8:e9:a8:db:f9:92:3e:b1:ec:fc:37:4c:71:de:
e6:1b:bd:0c:b1:d9:38:58:46:e1:17:8b:47:d0:eb:
5a:25:6b:54:4c:73:53:dc:52:9d:4c:75:9f:ef:2c:
52:09:9c:e1:e3:56:a4:a3:7e:ff:49:49:b4:e5:d3:
00:93:f3:a7:40:5c:eb:cc:2f:66:42:94:c4:03:54:
fe:ed:b6:f5:a3:27:5c:13:8f:c1:5a:12:89:f0:04:
0e:b0:ca:d4:99:6c:6e:09:78:fc:56:43:66:65:f8:
94:a5:20:9e:05:8f:05:d7:e0:9b:4f:07:7b:8e:7c:
f5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:66:11:50:D3:A0:5F:6F:C0:2F:71:B6:3F:BE:24:83:4D:CA:67:8F
X509v3 Authority Key Identifier:
keyid:8C:7D:6B:A1:F1:55:09:AC:F3:13:15:82:59:7D:5C:AD:9E:41:9B:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/39D4D290CB8311E88E74AD83C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:af40::/32
Signature Algorithm: sha256WithRSAEncryption
1b:c5:e9:e7:30:4e:0c:60:81:b7:41:4d:40:f5:34:ba:9c:83:
0b:f6:aa:a7:b0:0e:74:53:f6:c4:a0:9e:26:65:07:a1:33:8f:
9d:e2:9c:8f:6a:7e:8d:cc:c4:00:5d:e0:88:63:0d:55:15:92:
45:d1:1d:a2:a9:a5:de:49:33:19:95:2f:77:8b:c4:29:9e:8c:
62:8f:2f:ad:9f:b1:7b:20:f5:9d:7e:8d:e2:75:a6:48:d3:b0:
fd:d2:7d:92:64:d9:b8:7b:60:14:32:2a:c6:4d:c9:c7:cc:29:
dc:56:10:b2:06:36:a2:db:e5:e5:40:b5:37:78:06:56:ed:ce:
52:e6:72:6f:23:05:38:0f:52:71:5f:49:42:28:e8:4d:6a:24:
64:83:a3:c9:48:73:d8:25:a4:8c:80:4f:f0:0e:7d:3c:43:13:
23:4b:67:80:43:9d:a3:f0:c2:ba:d4:e9:f4:0f:1d:3a:4f:8c:
24:11:51:2a:b4:d7:b6:21:ca:1a:aa:b7:79:b6:b3:4e:fc:d9:
dd:b9:e1:59:6d:ae:12:f5:95:45:b9:e9:b6:8e:fb:b7:26:b6:
d8:bb:fc:1b:22:53:3c:89:9d:89:8b:5b:98:1a:61:d9:d3:bb:
71:8f:a9:9f:ac:98:76:38:e7:22:7c:7b:9a:73:31:4d:f9:2f:
40:19:ad:ed
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgICFRYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTQ2QjExMTAvBgNVBAUTKDhDN0Q2QkExRjE1NTA5QUNGMzEzMTU4MjU5N0Q1Q0FE
OUU0MTlCNEYwHhcNMjUwNzA4MTcyNTMzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MjNkNS1mM2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApjG+TdwAxqvObd08ThaT6FtJjv3MjZ1bp0dVc22JVRnB7w2V1H92ESXC9ddY
ZWEcaovCUqpZjKXWPFyh5BfTysaWmjyV1LbEe7D68FnymG5yMtazqK5/EuDlyFkI
iZESrO/G5/BgLEZzDIQKNREJ+gfwxCiU4PYBOP5riYEZSJDTsXu4tW+w+Omo2/mS
PrHs/DdMcd7mG70Msdk4WEbhF4tH0OtaJWtUTHNT3FKdTHWf7yxSCZzh41ako37/
SUm05dMAk/OnQFzrzC9mQpTEA1T+7bb1oydcE4/BWhKJ8AQOsMrUmWxuCXj8VkNm
ZfiUpSCeBY8F1+CbTwd7jnz1FQIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFMZmEVDT
oF9vwC9xtj++JINNymePMB8GA1UdIwQYMBaAFIx9a6HxVQms8xMVgll9XK2eQZtP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZCMS9GOTBEOTQ3NjY3
OTcxMUU4QTc4OTFDNDhDNEY5QUUwMi9qSDFyb2ZGVkNhenpFeFdDV1gxY3JaNUJt
MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pIMXJvZkZWQ2F6ekV4V0NXWDFjclo1Qm0wOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTQ2QjEvRjkwRDk0NzY2Nzk3MTFFOEE3ODkxQzQ4QzRGOUFFMDIvMzlENEQyOTBD
QjgzMTFFODhFNzRBRDgzQzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJAKvQDANBgkqhkiG9w0BAQsFAAOCAQEAG8Xp5zBODGCBt0FNQPU0
upyDC/aqp7AOdFP2xKCeJmUHoTOPneKcj2p+jczEAF3giGMNVRWSRdEdoqml3kkz
GZUvd4vEKZ6MYo8vrZ+xeyD1nX6N4nWmSNOw/dJ9kmTZuHtgFDIqxk3Jx8wp3FYQ
sgY2otvl5UC1N3gGVu3OUuZybyMFOA9ScV9JQijoTWokZIOjyUhz2CWkjIBP8A59
PEMTI0tngEOdo/DCutTp9A8dOk+MJBFRKrTXtiHKGqq3ebazTvzZ3bnhWW2uEvWV
Rbnpto77tya22Lv8GyJTPImdiYtbmBph2dO7cY+pn6yYdjjnInx7mnMxTfkvQBmt
7Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:26:01 2026 by rpki-client