
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/4FF339D8F01D11EB8C4B505BC4F9AE02.roa
File: 4FF339D8F01D11EB8C4B505BC4F9AE02.roa (raw, json)
Hash identifier: kzmw6JQnHsEPxWEaFvMAvmSNfBwkvf6++ngi0TT5BK0=
Subject key identifier: 32:6E:4B:AE:70:BC:D6:EA:C3:AE:DE:09:FC:C5:FC:81:93:E2:D9:BD
Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81
Certificate serial: 1B91
Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/4FF339D8F01D11EB8C4B505BC4F9AE02.roa
Signing time: Thu 26 Mar 2026 15:11:14 +0000
ROA not before: Thu 26 Mar 2026 15:11:14 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 399077
IP address blocks: 116.51.24.128/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl
rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:30:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7057 (0x1b91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6D5D, serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81
Validity
Not Before: Mar 26 15:11:14 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69c54c92-0b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:72:1d:db:c1:65:fd:e4:fd:30:c4:22:dc:70:
83:97:7d:a7:9f:79:dc:f2:a2:8b:2e:b7:aa:73:e1:
2b:dc:ea:57:4e:b0:57:56:44:be:d5:c4:cc:24:1b:
40:22:1d:df:b1:84:9b:f4:de:b7:7e:54:3e:46:07:
72:1c:6b:3f:0a:47:52:c6:2d:8d:84:5c:a2:fc:1f:
07:30:9b:74:cc:d8:37:9a:6c:2a:99:8b:dc:4a:e8:
ba:f6:90:bb:01:6c:eb:a9:ad:13:c5:ef:b7:01:6f:
44:3c:e3:15:ba:fd:62:30:5d:22:c6:7b:25:69:0d:
af:a3:cb:42:5b:a1:5e:90:85:d1:34:6a:9a:b9:72:
18:54:17:06:fe:de:a5:5f:80:a7:03:a6:26:fb:eb:
27:9d:45:d3:47:60:03:07:f1:af:79:ff:4f:ca:b3:
28:96:55:f5:28:78:37:01:ab:61:75:29:e6:95:55:
0e:ef:1f:d6:a1:08:99:bb:60:53:44:8f:33:f9:26:
6a:2f:9b:b4:c3:f8:b0:b7:49:0e:9b:1d:43:24:30:
7c:7c:d6:d9:95:2a:05:49:61:4c:b7:86:59:8e:2b:
67:46:5c:2a:a5:65:0c:2f:b5:f9:14:6a:43:28:1e:
12:23:0d:73:2a:a3:ac:c5:3f:0a:a2:80:5e:f8:93:
66:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6E:4B:AE:70:BC:D6:EA:C3:AE:DE:09:FC:C5:FC:81:93:E2:D9:BD
X509v3 Authority Key Identifier:
keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/4FF339D8F01D11EB8C4B505BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
116.51.24.128/25
Signature Algorithm: sha256WithRSAEncryption
b3:bb:fb:89:7f:ac:72:b7:00:0b:bd:c7:8e:5c:75:46:52:90:
68:f5:f2:f7:d5:26:98:99:80:23:10:23:e8:10:c1:e8:d7:97:
85:f4:f1:d5:bc:d7:15:6b:48:ce:88:3a:d9:68:9a:77:b5:54:
82:6b:88:1a:fb:a7:2a:1e:7e:d4:8b:3f:f1:54:89:6f:06:55:
b7:2f:0e:6f:9b:6b:ac:7f:d2:a1:34:c4:16:1f:81:f1:9b:8f:
82:79:9c:29:f1:89:db:fa:3a:b6:54:2a:be:e2:d2:65:cd:1b:
3c:47:c1:f8:1d:41:a7:ce:4c:5b:49:58:bb:7e:82:aa:39:97:
59:5b:f7:bc:7d:9f:68:57:ba:55:b8:75:ad:b0:ad:0a:78:b7:
fa:4d:2b:80:fd:43:5e:32:e4:f7:8f:2b:d2:4a:2b:ef:17:12:
13:63:d4:22:d3:8b:5e:ad:8a:7d:58:56:77:a1:1f:af:7c:06:
cb:a0:49:40:8a:47:77:28:b0:47:ea:00:37:53:ef:b4:be:1b:
55:f7:c3:09:0a:7a:b3:71:36:52:d1:fa:ca:be:4f:d6:47:53:
3a:01:46:a6:21:02:2b:7f:a3:dd:e3:28:1c:2c:57:64:10:1a:
c9:d8:5e:9f:34:58:f8:3b:ff:98:ec:df:6a:5e:de:2a:02:7c:
5e:5a:65:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:38:27 2026 by rpki-client