
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/6E08B7E2B96111F0B44EA641C4F9AE02.roa
File: 6E08B7E2B96111F0B44EA641C4F9AE02.roa (raw, json)
Hash identifier: 58sEBeu/Lw41bnGWkn+BoX7gGqJ3oc1042/9t7Bx+7o=
Subject key identifier: 17:C2:95:4F:E8:E2:A1:8F:1E:8D:A2:07:3E:3A:C4:8C:4C:40:76:49
Certificate issuer: /CN=A91E9CD4/serialNumber=3F8F38630F4D3D70EDD9E5C91E36EC48EFB9FD62
Certificate serial: 40
Authority key identifier: 3F:8F:38:63:0F:4D:3D:70:ED:D9:E5:C9:1E:36:EC:48:EF:B9:FD:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P484Yw9NPXDt2eXJHjbsSO-5_WI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/6E08B7E2B96111F0B44EA641C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:07:41 +0000
ROA not before: Tue 04 Nov 2025 09:34:16 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 134077
IP address blocks: 2402:3760::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.crl
rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P484Yw9NPXDt2eXJHjbsSO-5_WI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9CD4, serialNumber=3F8F38630F4D3D70EDD9E5C91E36EC48EFB9FD62
Validity
Not Before: Nov 4 09:34:16 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a3d7ac-4186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:01:e4:b0:f9:10:ae:db:c5:0c:56:8f:6d:b1:
cd:95:aa:de:e5:12:82:92:ad:fd:a8:68:ff:4d:13:
e9:6a:eb:42:ab:6e:8e:d3:e9:e5:c9:57:a3:21:04:
dd:32:43:ce:95:a8:fb:a1:00:3f:aa:08:1d:e1:02:
c3:88:00:09:ad:e5:3a:3c:e8:61:b8:30:f9:03:c2:
a4:1e:46:64:f3:aa:92:04:6f:f1:85:4a:a4:53:eb:
aa:eb:3d:91:81:50:79:33:5e:4e:6e:38:91:07:89:
66:b0:f0:5f:15:f8:ed:85:9d:08:98:f4:82:a6:23:
85:a4:e5:08:7c:87:17:71:42:02:6b:a7:d5:92:a1:
13:c0:fc:85:54:48:81:d1:96:32:d7:65:de:2a:94:
c5:97:03:29:c7:b7:63:49:da:d4:ac:5f:31:41:78:
02:ff:cf:ef:bd:f8:b5:34:6e:f0:fe:0a:01:33:fb:
09:f4:b7:8a:27:5a:e3:ee:d9:4d:90:8a:0f:e3:b8:
6f:24:3d:4d:fe:f6:8f:6e:e5:92:49:3f:0a:b4:2e:
26:e2:4e:a7:c3:29:9d:af:50:2b:a3:43:0e:5a:ce:
0e:33:c3:ca:3a:ed:ca:c5:73:77:5f:f3:c3:0d:1c:
66:b2:46:b9:ed:4f:e2:e1:e7:46:14:73:a1:40:02:
25:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C2:95:4F:E8:E2:A1:8F:1E:8D:A2:07:3E:3A:C4:8C:4C:40:76:49
X509v3 Authority Key Identifier:
keyid:3F:8F:38:63:0F:4D:3D:70:ED:D9:E5:C9:1E:36:EC:48:EF:B9:FD:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P484Yw9NPXDt2eXJHjbsSO-5_WI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/6E08B7E2B96111F0B44EA641C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:3760::/32
Signature Algorithm: sha256WithRSAEncryption
23:12:31:be:41:45:07:60:0a:12:22:47:53:81:6f:46:8b:0a:
0b:06:2e:64:9d:7c:3d:d2:3c:bf:e6:db:45:6f:3f:35:54:b4:
2b:22:b9:ce:fc:c0:62:90:03:45:fe:a6:4b:2c:c0:93:4d:e9:
0d:9e:45:c7:44:2f:b8:09:b9:78:94:aa:e7:40:e3:03:55:47:
b8:58:aa:26:62:09:6a:5f:85:04:9f:39:78:eb:5f:d8:20:5e:
b8:1f:52:a1:0b:e3:78:71:83:67:cb:ff:67:cd:28:6f:1b:31:
49:93:d9:37:48:b6:04:b2:b2:23:b3:75:28:ea:9c:7f:df:cf:
3a:cd:e7:d7:e0:2c:65:bd:bc:f9:f3:e5:11:98:7e:75:ff:5c:
d1:cf:83:60:76:f5:a7:eb:0f:48:bc:4f:ae:bf:ec:59:0b:f8:
0a:be:ac:b6:99:f7:32:7a:f2:12:84:38:0c:7b:d8:7f:df:17:
40:6a:54:d5:6b:be:9c:e7:df:84:d3:cb:f2:46:64:b9:01:84:
73:34:2e:51:08:85:c7:4b:a7:b9:a6:38:ae:c1:81:85:ec:ba:
eb:7f:45:94:2c:cb:05:bc:0a:4f:f9:96:6f:3f:d8:ac:7e:80:
14:4d:02:37:66:40:b7:37:9f:0d:47:1b:f0:81:5f:0f:fb:e1:
60:37:03:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:05 2026 by rpki-client