
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/E9CF18DE0F7111F096BBCF24C4F9AE02.roa
File: E9CF18DE0F7111F096BBCF24C4F9AE02.roa (raw, json)
Hash identifier: tWtaLRbtDVtWiOlLn3BiRHdz2Yx30phG2bPvS2Dv5GU=
Subject key identifier: 59:CB:5B:31:91:31:35:7E:88:00:D8:1F:4B:8C:BC:7A:9F:49:95:49
Certificate issuer: /CN=A91E6CCA/serialNumber=DB13FBAF7B3B38DB7630DB0B97374DAAD0315ADE
Certificate serial: AF
Authority key identifier: DB:13:FB:AF:7B:3B:38:DB:76:30:DB:0B:97:37:4D:AA:D0:31:5A:DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/E9CF18DE0F7111F096BBCF24C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:27:29 +0000
ROA not before: Wed 09 Jul 2025 08:44:20 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 138975
IP address blocks: 2001:df3:d540::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl
rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:28:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175 (0xaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6CCA, serialNumber=DB13FBAF7B3B38DB7630DB0B97374DAAD0315ADE
Validity
Not Before: Jul 9 08:44:20 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a3f870-65ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:a4:e8:68:83:12:8a:06:e1:0c:03:a0:e4:
f1:91:c7:5c:53:e4:64:49:e0:0c:22:e4:9a:e9:6b:
db:5b:5b:08:bc:56:35:16:35:ff:de:71:9a:cf:63:
b6:39:0c:c8:14:7c:d4:64:62:85:56:fe:ad:a8:c5:
ab:8d:3c:ea:67:af:97:25:aa:88:29:5b:1f:c6:78:
1b:03:5f:0b:6a:a4:41:e0:ee:3a:f3:a9:fa:ba:45:
98:a8:0b:c3:25:c5:c3:7b:d1:b8:fc:ef:0d:81:8b:
6f:d0:0c:4d:2f:06:00:91:0b:15:cb:9d:e8:5c:e8:
cd:4d:f7:32:e4:4f:90:f7:3e:6a:13:00:52:13:97:
23:41:ce:16:c1:17:1f:1a:14:68:bd:4d:a6:0c:3b:
d3:54:c7:4c:c4:f1:72:46:fb:00:4a:80:4e:02:72:
0f:98:06:11:bc:57:0d:74:68:ef:fc:b4:e8:0c:0a:
36:59:55:cd:61:8a:50:3c:25:a9:8e:f7:6a:6a:2f:
84:3b:68:73:69:76:47:1d:bf:ba:9d:0b:e0:de:f1:
8e:7c:8e:02:d0:24:23:0d:71:e6:8f:b4:5c:61:dc:
92:2e:0a:45:4c:75:ce:8c:7b:49:fe:28:31:e7:f9:
83:a8:dc:7b:ca:41:78:cd:87:3c:89:17:ce:8d:cc:
77:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CB:5B:31:91:31:35:7E:88:00:D8:1F:4B:8C:BC:7A:9F:49:95:49
X509v3 Authority Key Identifier:
keyid:DB:13:FB:AF:7B:3B:38:DB:76:30:DB:0B:97:37:4D:AA:D0:31:5A:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/E9CF18DE0F7111F096BBCF24C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:d540::/48
Signature Algorithm: sha256WithRSAEncryption
61:6b:fb:46:28:89:75:14:29:28:bf:5e:be:02:be:1c:36:c1:
59:37:ba:54:30:ff:0f:c3:12:39:a7:c9:90:61:6d:64:40:d5:
40:cc:b0:48:fb:54:a0:1d:66:c9:db:46:56:ac:e3:f5:b7:74:
99:5a:a7:88:03:2d:00:8a:63:4f:89:95:79:dc:ff:fa:e9:b7:
b0:b7:ad:4b:d4:8f:51:82:59:ae:ec:1f:55:44:56:e9:45:e6:
da:a4:af:be:c0:08:78:b5:56:c7:60:16:e9:6f:d9:e3:76:b4:
2a:8f:cd:15:f6:ec:9b:d4:56:42:48:92:1c:62:9c:7d:74:b4:
ab:2c:96:de:31:16:5e:fe:a8:f1:78:fc:8e:f0:65:1c:fc:c4:
41:2f:de:9a:b0:28:3f:4f:0e:ad:a0:1a:c2:f7:05:f4:80:63:
5f:ff:26:26:05:53:7e:03:a1:1c:76:a5:de:59:18:88:93:87:
c9:5b:c3:cb:52:4b:23:fa:31:e8:67:50:0e:4f:f5:2b:b8:74:
31:e3:63:88:6d:09:bf:42:58:6c:55:8e:7a:08:64:4e:c3:04:
66:71:02:e6:5a:84:15:8f:3c:b6:d9:0c:20:7a:43:8c:52:80:
46:ed:4c:4e:ac:f2:f1:5c:40:a5:65:8f:e2:e7:33:85:a2:57:
d1:e1:fc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:45 2026 by rpki-client