
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/3D68F8C29A4A11EA94706012C4F9AE02.roa
File: 3D68F8C29A4A11EA94706012C4F9AE02.roa (raw, json)
Hash identifier: gxt7j0/qgDHDY4eOy9nTFq4yiN1wN4Azb/F6N/jLPQo=
Subject key identifier: 28:F0:DD:14:80:89:F4:A1:DF:86:9A:6C:05:35:F8:57:72:17:DE:86
Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81
Certificate serial: 1B8E
Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/3D68F8C29A4A11EA94706012C4F9AE02.roa
Signing time: Thu 26 Mar 2026 15:11:01 +0000
ROA not before: Thu 26 Mar 2026 15:11:01 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 30821
IP address blocks: 116.51.16.112/28 maxlen: 28
116.51.22.160/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl
rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:30:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7054 (0x1b8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6D5D, serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81
Validity
Not Before: Mar 26 15:11:01 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69c54c85-5dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0c:34:07:77:81:b3:36:f8:08:98:36:d2:c2:
40:9e:b1:ad:fd:1f:03:78:a7:a0:14:d7:da:4f:21:
ad:ba:9d:7a:8f:6b:32:22:a3:74:24:08:c2:e7:ee:
f6:1e:d3:4f:dd:09:6b:c4:e4:47:55:eb:7e:de:f7:
a2:2a:0f:56:af:04:7a:f1:98:de:b6:ce:19:78:b9:
e0:be:2c:ce:82:7a:a4:21:b4:4b:d6:ef:cd:4a:8f:
3c:da:90:fb:db:ab:3e:a9:f4:22:16:f8:1b:d2:86:
e9:52:ac:0a:13:d4:f5:ca:a2:8f:ed:a8:8e:3c:7b:
1f:4c:31:0a:ec:8f:74:8d:9f:47:79:aa:ee:9e:f4:
c9:b5:c5:2e:7c:4e:84:d6:87:aa:95:2b:23:21:be:
12:7b:d4:04:d4:c2:55:f6:b6:db:13:ce:52:f8:d8:
d2:bc:6b:df:d5:b9:bc:79:ba:4e:8b:74:3a:b4:37:
e1:cb:64:f3:c7:8b:f8:f4:e4:31:2c:97:61:e1:10:
54:d5:00:0d:ee:2c:ab:27:67:cd:74:69:48:ca:cf:
fc:73:1d:51:6f:bb:d1:96:ae:a5:04:1c:ad:8f:4f:
2a:93:a8:a0:de:96:7f:c9:31:24:77:98:e2:ba:6e:
f4:fc:2a:f7:00:3e:6b:14:85:89:6f:c9:00:05:c4:
ed:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F0:DD:14:80:89:F4:A1:DF:86:9A:6C:05:35:F8:57:72:17:DE:86
X509v3 Authority Key Identifier:
keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/3D68F8C29A4A11EA94706012C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
116.51.16.112/28
116.51.22.160/28
Signature Algorithm: sha256WithRSAEncryption
27:85:41:dd:69:44:d5:30:55:75:12:3e:3c:e8:1c:6c:c8:60:
75:98:ea:35:5d:56:e0:3b:bb:15:6d:aa:f1:27:80:9e:45:81:
c3:4f:ee:a8:7d:29:87:0d:3f:ed:cd:05:63:6b:47:11:f4:e6:
a0:21:c6:e7:02:2a:14:0c:ee:82:01:c6:89:ec:42:03:21:af:
90:27:90:ed:74:41:42:74:9e:57:bd:96:b2:2f:cc:a1:ec:d6:
43:27:3e:a3:39:2f:32:64:3e:93:49:88:b0:73:01:f4:55:8e:
fc:76:95:df:65:66:35:7a:a8:77:64:d3:2b:e7:5b:7d:1c:aa:
29:c7:c1:e3:fd:87:78:40:6f:7d:c9:ac:ac:dd:13:a3:70:95:
49:70:f1:06:54:c7:43:56:48:7b:60:68:6c:f2:1a:04:dd:34:
4f:4a:fa:38:b3:3c:64:c6:ab:af:bd:ca:00:35:1b:76:40:61:
b8:4a:56:41:8f:f3:fd:c3:1b:7f:21:fd:42:e3:09:df:43:25:
5d:3a:29:23:05:bd:15:67:f7:d3:e2:60:2b:d3:7f:f3:f0:62:
1d:95:53:0f:1c:51:6a:49:f9:51:ea:7f:a8:aa:7f:c0:4d:d1:
21:cb:c4:98:c9:41:5d:82:ca:8e:7c:02:e4:fb:df:2d:b8:fd:
ed:05:2f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:37:23 2026 by rpki-client