
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/E2D9B7A6B32611F0BE8DF029C4F9AE02.roa
File: E2D9B7A6B32611F0BE8DF029C4F9AE02.roa (raw, json)
Hash identifier: E3Ke3Xy/6Z8DXkSqpxZkye2OZYgZjF6Qzh75z3050z8=
Subject key identifier: 58:F9:BD:54:05:22:D0:6C:F4:28:F9:F3:A9:B4:EB:6D:CD:C9:B8:C1
Certificate issuer: /CN=A91E4B86/serialNumber=14D5AD2722ACA86AD34F0F9A344726CB66980831
Certificate serial: BF
Authority key identifier: 14:D5:AD:27:22:AC:A8:6A:D3:4F:0F:9A:34:47:26:CB:66:98:08:31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/E2D9B7A6B32611F0BE8DF029C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:16:57 +0000
ROA not before: Fri 27 Feb 2026 06:25:23 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 153551
IP address blocks: 2001:df4:f840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl
rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:36:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191 (0xbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4B86, serialNumber=14D5AD2722ACA86AD34F0F9A344726CB66980831
Validity
Not Before: Feb 27 06:25:23 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a42029-439b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c2:72:26:fe:8f:d0:c8:23:55:31:2c:9b:bb:
58:c2:c4:b5:0e:47:56:3c:db:58:cd:1f:85:12:24:
86:6a:3f:c4:26:c0:01:e2:92:94:7c:30:89:4e:4d:
6b:fe:9f:d5:49:a6:43:ce:5b:e2:5b:2b:e2:1b:8b:
09:15:06:f6:f6:65:fd:47:5f:d5:d3:f9:aa:e3:32:
58:41:b0:30:a5:b5:81:e1:9a:3a:79:1d:75:c3:fa:
22:22:64:d3:f6:7e:25:4d:a6:56:a6:51:0c:44:46:
f6:40:8c:fa:13:f4:9a:68:09:65:da:02:9e:f5:10:
b4:f6:3b:36:50:6c:ef:c2:af:ae:cd:c0:4d:53:7a:
2f:9d:be:81:da:2f:2a:2d:1c:25:df:b8:38:6d:0b:
a1:46:c5:23:15:51:a4:8a:86:b6:d2:7b:d3:b3:40:
dc:0f:be:8c:39:9a:4d:51:1b:0a:7b:97:2f:c5:52:
02:c8:0c:e3:f6:ad:7c:72:5f:c8:12:66:b3:5d:6a:
83:06:23:fe:32:b8:7d:d4:00:24:e4:28:43:e6:40:
fc:0d:67:ef:69:31:26:b3:a9:9a:b7:01:72:97:6f:
23:c0:99:a6:dd:51:65:f2:f1:4b:56:e7:fb:a1:a1:
ed:f2:bc:0c:ee:db:05:0c:4e:78:63:98:89:c6:c3:
46:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F9:BD:54:05:22:D0:6C:F4:28:F9:F3:A9:B4:EB:6D:CD:C9:B8:C1
X509v3 Authority Key Identifier:
keyid:14:D5:AD:27:22:AC:A8:6A:D3:4F:0F:9A:34:47:26:CB:66:98:08:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/E2D9B7A6B32611F0BE8DF029C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:f840::/48
Signature Algorithm: sha256WithRSAEncryption
91:b4:89:4a:fb:51:14:a3:be:37:f2:bd:40:07:e1:19:8f:53:
cb:4f:e4:7f:d1:3f:62:fa:df:99:f7:60:06:d1:ff:9e:db:6a:
5c:2b:be:a7:2f:8a:e3:ac:83:07:94:d7:61:43:16:d3:bf:8b:
2a:b3:cd:33:f0:d4:db:d8:ce:8b:3c:91:f1:47:f7:93:a4:c1:
45:5e:4d:3e:03:86:ac:f3:39:5f:f5:9f:f8:30:39:36:8f:fd:
fc:4f:be:91:5b:fb:ad:55:68:e5:28:64:b3:94:c3:9f:33:9d:
62:f4:51:d7:94:aa:8b:e0:df:5c:0c:02:55:1e:a8:1a:47:fe:
70:ae:44:a5:3c:3b:c8:5e:fc:93:35:7a:f0:32:5c:d2:b4:57:
fd:ab:35:b6:b8:25:3a:e6:8b:0e:f0:26:e5:19:01:69:8f:f5:
a5:a5:55:90:38:89:c9:ac:59:7f:de:12:d7:1e:76:60:68:e9:
88:ac:ba:1d:f6:b7:94:91:ff:b0:24:6d:04:42:14:68:5a:2f:
f3:9a:6a:cf:75:7c:9e:66:51:fe:b6:05:f3:4b:4b:93:19:e4:
c6:9e:21:eb:e3:33:53:98:3d:1f:ce:38:21:67:81:34:cf:56:
7f:61:bd:3b:4b:97:43:34:f2:40:8e:02:6e:7f:24:15:6e:45:
12:f8:f2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:50 2026 by rpki-client