
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/F693F2689CB811EB97F77E14C4F9AE02.roa
File: F693F2689CB811EB97F77E14C4F9AE02.roa (raw, json)
Hash identifier: YMv0r7cgJCxpk4HSp8I/SfGyxuRnawMQX2mraCd5KmQ=
Subject key identifier: 5E:6D:86:DA:14:A8:4E:F0:E7:05:FE:BF:69:75:5A:8E:4E:89:EB:93
Certificate issuer: /CN=A91EAE3D/serialNumber=6B567C843E42523E0E5B64F64A0F2AE05517BB70
Certificate serial: 150F
Authority key identifier: 6B:56:7C:84:3E:42:52:3E:0E:5B:64:F6:4A:0F:2A:E0:55:17:BB:70
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/F693F2689CB811EB97F77E14C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:55:58 +0000
ROA not before: Fri 20 Feb 2026 17:14:42 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 9443
IP address blocks: 139.216.0.0/16 maxlen: 16
139.218.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.crl
rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:45:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5391 (0x150f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE3D, serialNumber=6B567C843E42523E0E5B64F64A0F2AE05517BB70
Validity
Not Before: Feb 20 17:14:42 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a4618e-ba62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e5:b1:0d:9f:a8:f5:d6:57:4d:4e:94:37:f5:
f6:d0:8d:a3:08:58:af:9b:fd:3d:a8:b3:06:e1:97:
21:0c:a7:58:b4:f2:b7:9e:68:2d:06:19:fe:13:2f:
50:f2:32:7c:50:e6:4e:0a:64:75:f0:10:87:db:9c:
25:89:a6:d3:dd:28:5d:d1:7a:c3:4a:eb:44:79:9a:
ac:4e:5d:18:3d:51:ab:45:db:39:89:d8:25:db:14:
e2:8a:51:32:86:37:47:06:25:55:d8:b2:99:56:49:
3e:81:5d:5d:2d:4b:bf:ea:9f:c7:58:bb:bc:7b:be:
13:c2:ed:9f:3a:e4:f8:09:ed:b3:c6:1a:43:82:e1:
06:59:65:a4:db:dd:c5:cb:5c:f6:c8:bc:1a:c8:a1:
92:14:69:89:69:58:c3:12:5d:3c:53:27:6e:c6:32:
7a:03:bf:89:21:a6:85:55:9c:c1:9d:4e:e3:9c:7e:
db:a4:2d:03:84:d2:20:de:72:91:e8:32:47:77:5f:
29:66:eb:8d:22:aa:d7:ec:28:15:cf:a4:bb:9f:4c:
43:2d:5e:c0:71:21:dc:82:c7:5d:ec:f5:62:d5:d1:
f1:6f:a2:5a:ef:2e:c9:c7:f2:d5:1b:2a:ae:2f:20:
3d:ed:ff:6e:51:96:96:b6:06:74:82:47:fc:d0:4b:
4e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6D:86:DA:14:A8:4E:F0:E7:05:FE:BF:69:75:5A:8E:4E:89:EB:93
X509v3 Authority Key Identifier:
keyid:6B:56:7C:84:3E:42:52:3E:0E:5B:64:F6:4A:0F:2A:E0:55:17:BB:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/F693F2689CB811EB97F77E14C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
139.216.0.0/16
139.218.0.0/16
Signature Algorithm: sha256WithRSAEncryption
69:0d:a9:32:35:df:8e:5c:e5:4e:d5:b8:13:31:3a:54:6f:d3:
c1:87:78:c8:99:2b:3e:80:3d:7e:be:20:b3:a4:b5:00:e9:17:
ed:44:dd:7f:15:4a:4a:51:ed:e5:c5:0b:c8:88:3d:4f:39:1c:
c1:3d:ff:c4:eb:d9:18:59:52:08:ba:36:29:5b:12:ce:34:47:
0b:ea:9c:f7:52:35:27:10:a0:d4:08:4f:69:51:72:02:22:2b:
5a:cb:11:e3:76:c9:fa:e0:88:6b:81:38:4b:17:93:fb:2b:6b:
7f:06:25:e0:ab:0a:36:ac:0f:57:0c:d0:37:db:4c:39:af:85:
5f:be:b1:f7:36:f8:fa:d9:e5:4a:4b:ee:28:bf:b2:c4:d8:5e:
b6:52:e0:22:ab:3e:6e:2e:95:20:9b:b6:db:cd:dc:a9:82:b9:
00:6f:86:ac:c0:78:23:a4:21:68:24:51:a9:81:69:bd:48:22:
53:13:8d:80:b0:01:60:5f:bc:bc:5b:34:09:7c:78:85:f3:2b:
55:04:9b:c6:6f:3a:33:62:37:b0:b5:46:36:42:f4:88:9b:e2:
be:98:12:32:e5:b8:23:b7:74:70:9d:fd:00:17:da:70:52:fe:
49:88:1c:74:22:34:d2:34:06:83:03:0c:6b:58:25:c9:f0:91:
6f:47:e8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:50:42 2026 by rpki-client