
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/792023A8E0DD11EE86DB926AC4F9AE02.roa
File: 792023A8E0DD11EE86DB926AC4F9AE02.roa (raw, json)
Hash identifier: 8j8UggU/cOGDsFTMUgNVbsmPDrBcfc9iBtV2U1i4LIQ=
Subject key identifier: EC:02:07:27:3A:2D:32:3D:F6:23:78:44:39:C2:E1:90:74:D6:C1:80
Certificate issuer: /CN=A91E5D61/serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD
Certificate serial: 1373
Authority key identifier: 5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/792023A8E0DD11EE86DB926AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:17:45 +0000
ROA not before: Sat 02 Aug 2025 14:50:23 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 38255
IP address blocks: 2001:255::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl
rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:52:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4979 (0x1373)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D61, serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD
Validity
Not Before: Aug 2 14:50:23 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a490d9-722e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:81:38:19:ae:a5:b6:a5:b7:32:ae:f2:a6:8b:
d1:5b:82:67:88:2b:97:12:0f:37:b5:11:be:c4:09:
1d:9b:8e:7e:ed:0c:64:19:b4:0e:ff:41:fe:01:5b:
d6:f6:6e:c6:ca:d5:ad:65:67:07:89:58:6a:26:14:
af:4c:1c:9b:8c:e0:6f:dd:a0:9a:f2:20:71:f5:b3:
b6:1f:cc:4c:ae:42:65:d4:d7:5b:af:5f:a6:69:05:
98:d2:3f:2e:bc:d8:65:a5:e3:23:0d:c8:08:58:52:
a1:76:07:16:f9:83:7c:37:59:c1:7c:d9:5d:58:84:
8b:0f:45:3b:d0:92:a1:ce:a8:96:3d:4b:44:65:a3:
f5:ec:4f:63:96:17:1e:ac:de:24:23:a4:33:09:6e:
c6:2c:c8:93:ed:59:9e:8e:2f:9f:04:fe:cd:34:4f:
5f:d5:c9:99:aa:3d:6e:95:75:42:a3:09:cb:a2:2c:
d5:96:d4:79:2b:cc:01:80:6a:9e:2c:3f:9c:94:99:
bb:42:87:6c:d3:ef:b5:a3:3a:27:fc:87:3f:44:17:
7c:e0:40:21:fa:4c:d0:69:83:1d:98:76:bd:a7:03:
fc:e4:a1:e4:c2:75:7c:8d:7a:89:d6:65:ce:60:21:
03:39:03:49:66:6e:0e:78:3f:ff:b7:53:92:cf:db:
64:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:02:07:27:3A:2D:32:3D:F6:23:78:44:39:C2:E1:90:74:D6:C1:80
X509v3 Authority Key Identifier:
keyid:5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/792023A8E0DD11EE86DB926AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:255::/32
Signature Algorithm: sha256WithRSAEncryption
7f:04:94:23:30:7f:88:a7:8d:81:4a:44:fc:39:c4:29:9b:b0:
89:57:24:a0:2a:19:6d:c5:c2:86:01:f2:31:0a:e9:fc:12:de:
58:4a:1d:5b:fd:c9:4c:d4:04:2e:f6:3c:63:69:f5:f1:1b:31:
95:72:10:65:8f:2f:a9:5e:b7:5b:ce:91:e9:d1:9e:85:ed:3e:
55:79:d4:24:18:61:94:00:64:fa:d1:85:a9:68:25:9d:c9:7b:
07:3b:38:37:e0:f3:ed:d3:da:8f:ae:7f:8c:27:22:95:68:0e:
57:f6:57:8d:b1:9d:a3:d6:21:61:3c:1b:08:b0:aa:5b:52:c8:
4c:9d:ea:f9:d1:1a:a3:18:73:90:e3:e4:75:86:f4:8b:06:2e:
19:53:e6:25:ce:88:4f:4b:37:94:7e:03:7f:c2:96:54:35:f2:
7f:c0:8f:c2:a9:1a:90:45:63:f5:8e:63:5a:94:79:2d:a0:f0:
7f:d5:49:93:2f:1c:e3:41:ed:2b:3a:24:de:31:02:cd:b9:d8:
b8:1a:51:32:f5:d8:60:45:b3:b8:9c:fa:eb:18:1f:5d:f8:39:
e8:b2:96:35:b8:09:15:ae:7a:ef:d1:28:28:14:52:a0:2d:10:
9c:98:3e:82:92:b0:91:11:59:c7:ff:d4:ae:c2:59:a6:6d:33:
da:04:ed:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:04 2026 by rpki-client