
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/91EDFFF27CBF11F0BCA8A74FC4F9AE02.roa
File: 91EDFFF27CBF11F0BCA8A74FC4F9AE02.roa (raw, json)
Hash identifier: JUhKEj8SXKCy6S8oeqW1ENv6R+HMPTPZWeDqctZ/CKU=
Subject key identifier: 12:C7:45:E2:CC:5B:FE:54:B1:EC:A4:18:E3:5A:E9:C1:DD:6A:E3:C8
Certificate issuer: /CN=A91E6B9A/serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966
Certificate serial: C7
Authority key identifier: 32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/91EDFFF27CBF11F0BCA8A74FC4F9AE02.roa
Signing time: Sun 07 Sep 2025 06:42:51 +0000
ROA not before: Sun 07 Sep 2025 06:42:51 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 139820
IP address blocks: 2401:be60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl
rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 05:29:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6B9A, serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966
Validity
Not Before: Sep 7 06:42:51 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68bd296b-4414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d2:49:76:5a:ec:04:15:3b:92:33:7b:f9:1b:
d2:02:48:80:f5:c8:a5:87:a6:b7:37:2c:21:6f:a2:
38:77:d2:23:89:69:d6:5c:eb:ea:ba:82:d7:04:08:
46:da:e2:0f:c5:8f:09:7b:a3:94:79:fa:d3:a2:66:
a3:ad:be:f0:ab:93:19:94:62:df:73:62:8d:3d:d5:
75:b1:7a:b2:c9:48:49:3e:7e:93:fa:2d:04:a2:48:
27:a2:91:f4:8a:f6:46:78:ee:da:f3:20:a4:6c:72:
82:c9:04:f4:0b:90:45:64:d2:39:45:bf:b0:35:11:
48:bf:be:4f:01:8a:b2:fd:a3:d4:95:63:6f:0f:11:
54:cd:14:11:ba:3e:53:3f:d8:ea:2a:27:d0:cd:9b:
35:d9:67:79:a2:af:0f:5d:f7:06:fe:9c:9d:23:1a:
a7:48:dc:c7:e5:c6:41:1c:ed:54:68:56:e5:ab:38:
b3:d5:32:7b:36:5c:c7:ea:4a:54:42:29:a7:08:1b:
da:df:41:95:6b:64:3d:74:ff:0d:ca:c6:13:38:e9:
4c:f6:d4:e1:d7:ae:72:2e:26:3d:8d:e5:70:16:f4:
91:87:c9:df:c7:4b:8d:50:24:b4:cd:72:42:80:24:
b7:c6:ba:dc:d2:d9:5d:b7:f6:f3:cb:e8:b8:eb:6c:
82:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C7:45:E2:CC:5B:FE:54:B1:EC:A4:18:E3:5A:E9:C1:DD:6A:E3:C8
X509v3 Authority Key Identifier:
keyid:32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/91EDFFF27CBF11F0BCA8A74FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:be60::/32
Signature Algorithm: sha256WithRSAEncryption
38:bc:34:37:7f:45:e7:0b:1c:24:ba:f7:d2:83:80:f3:6c:f5:
fb:ec:1b:fe:b2:a4:7b:11:ad:86:8a:55:e1:16:11:b8:ee:5f:
c4:91:87:7f:42:42:d2:c7:dc:91:08:85:8e:33:0d:6b:58:92:
77:3b:02:40:96:13:79:12:9f:6c:ae:1e:8e:e2:a4:10:2f:fd:
44:cb:0b:56:34:a4:6b:36:f1:73:b2:f2:3b:43:10:bb:87:46:
f9:ff:ab:de:59:96:b7:f2:5f:f2:37:6a:8f:99:1a:d4:ca:47:
1e:88:29:8e:95:d6:e7:27:52:e5:46:85:9b:c1:a0:df:23:0e:
a3:06:a0:25:e2:fb:91:e4:b8:5c:96:ad:8b:25:3e:43:9f:e8:
75:e0:6d:e5:f7:b4:09:f0:de:fa:d9:54:1b:ce:ac:cf:83:1f:
45:78:04:ac:cc:2b:32:4a:15:16:38:3b:c4:4f:86:8e:83:86:
54:01:c9:8a:87:76:4a:7d:7a:2a:78:ef:41:32:dd:1d:63:44:
7d:a6:b6:e6:58:f5:28:20:86:0c:d1:62:d7:9f:b6:83:f0:2f:
95:a2:ef:6b:ca:aa:9a:c5:89:60:e6:d2:14:94:23:40:7c:9b:
73:db:d8:72:d9:d2:a4:d4:a6:32:20:c7:9e:30:d8:b6:fa:60:
5f:cc:f5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:34:56 2025 by rpki-client