
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/6360524E03D311F0A6C64177C4F9AE02.roa
File: 6360524E03D311F0A6C64177C4F9AE02.roa (raw, json)
Hash identifier: h1b6/h9LEiJ1eeHGuVj7K/mLtTcNcJqwMsamJCrkZpM=
Subject key identifier: 3D:21:74:A4:46:83:42:4C:3D:BA:03:DE:66:74:62:0E:AF:E0:86:3E
Certificate issuer: /CN=A91EAF4B/serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
Certificate serial: 01A5
Authority key identifier: AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/6360524E03D311F0A6C64177C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:02:52 +0000
ROA not before: Tue 18 Mar 2025 19:39:21 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 14007
IP address blocks: 2405:cbc0::/32 maxlen: 32
2405:cbc0:2000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl
rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421 (0x1a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAF4B, serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
Validity
Not Before: Mar 18 19:39:21 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a48d5c-4872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4a:33:73:66:9c:93:60:98:9e:ab:eb:6e:29:
3b:27:35:01:4f:01:4c:28:f1:df:a6:ab:8e:be:0f:
ad:87:9c:59:58:d2:27:5b:df:cd:ca:25:20:28:5b:
f3:67:4c:4e:1e:8f:83:17:69:54:c9:88:1d:30:b5:
1b:a1:82:4b:70:10:9d:5d:78:70:8c:e7:0d:b7:1c:
66:9b:dd:1d:ad:86:25:52:66:d3:fa:eb:74:0a:81:
3f:47:23:d5:31:73:cf:0c:fd:70:7c:46:15:b3:4c:
61:3d:68:c4:e6:5d:d5:72:fc:46:38:88:24:78:64:
b5:d5:e2:e5:de:b1:16:03:4a:a6:33:b2:41:82:8c:
09:74:51:0b:c0:e6:0e:d5:32:30:01:66:1b:73:a7:
b3:93:8f:4f:83:20:ec:0e:e6:58:f8:d3:fc:86:67:
d6:e4:94:00:c4:32:c1:0e:df:e6:96:a6:58:cf:72:
29:ba:47:56:7e:a9:88:90:43:e0:06:f6:f1:34:12:
0d:e7:33:5c:78:7c:e2:df:cd:22:fb:69:2f:8a:e3:
e1:b1:0a:8f:13:38:a4:8a:c5:83:21:d7:27:aa:60:
30:33:8a:3c:cc:eb:68:10:a7:2b:ee:97:b9:dd:b3:
27:32:a8:77:f7:f2:7c:01:67:9b:d4:8b:2d:b5:e4:
29:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:21:74:A4:46:83:42:4C:3D:BA:03:DE:66:74:62:0E:AF:E0:86:3E
X509v3 Authority Key Identifier:
keyid:AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/6360524E03D311F0A6C64177C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:cbc0::/32
Signature Algorithm: sha256WithRSAEncryption
0d:da:c0:e5:51:3b:36:62:43:44:3d:bf:01:74:ea:92:cd:2e:
62:10:d9:4e:73:3c:be:8a:9e:9c:57:2b:b0:28:22:bb:c2:89:
52:01:5b:7a:71:e8:c9:b3:81:0a:c4:fb:c3:7b:15:1d:d8:09:
00:9b:75:27:4c:10:bf:6c:35:5d:1a:3e:b3:6c:f0:c6:ba:0f:
7b:78:92:b1:ea:50:9c:30:c0:1a:d1:58:63:63:68:91:21:32:
1a:a5:e8:fd:fe:79:b5:2b:ac:66:9a:d8:ee:0a:e1:e7:46:e9:
64:ea:0a:8c:22:bc:38:6c:4c:0e:3a:42:28:1d:b0:6d:57:1f:
85:07:ee:4a:0e:66:ec:eb:24:b8:a9:44:9e:8a:d3:61:a7:c1:
70:95:84:78:72:71:94:37:fe:87:d0:f9:4f:c6:ff:a4:c3:24:
f3:10:aa:96:96:20:4c:b8:d4:f6:d4:20:d9:18:c4:ca:a5:a9:
ae:7e:06:db:24:15:88:c1:ab:b9:3e:dc:d0:75:0e:1d:94:4f:
4e:60:d4:41:75:f0:01:9a:f6:3b:b6:6d:25:7b:52:ec:6b:90:
d5:43:76:c1:ab:bd:d0:e1:8b:0d:84:e6:f7:04:5f:15:b7:85:
d8:ae:56:4f:6c:07:cb:58:35:74:3d:8e:d1:57:3e:6f:9b:92:
ad:07:7b:94
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFGNEIxMTAvBgNVBAUTKEFENzFERUMxMzg5QjE0QTAxMjAwMTA3Njk5MUY1OUFC
RTJDQUIxRTYwHhcNMjUwMzE4MTkzOTIxWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGQ1Yy00ODcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA10ozc2ack2CYnqvrbik7JzUBTwFMKPHfpquOvg+th5xZWNInW9/NyiUgKFvz
Z0xOHo+DF2lUyYgdMLUboYJLcBCdXXhwjOcNtxxmm90drYYlUmbT+ut0CoE/RyPV
MXPPDP1wfEYVs0xhPWjE5l3VcvxGOIgkeGS11eLl3rEWA0qmM7JBgowJdFELwOYO
1TIwAWYbc6ezk49PgyDsDuZY+NP8hmfW5JQAxDLBDt/mlqZYz3IpukdWfqmIkEPg
BvbxNBIN5zNceHzi380i+2kviuPhsQqPEzikisWDIdcnqmAwM4o8zOtoEKcr7pe5
3bMnMqh39/J8AWeb1IstteQpYQIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFD0hdKRG
g0JMPboD3mZ0Yg6v4IY+MB8GA1UdIwQYMBaAFK1x3sE4mxSgEgAQdpkfWaviyrHm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUY0Qi84NDg1OEY2QTQ3
MTkxMUVBOTA4NjMwNzJDNEY5QUUwMi9yWEhld1RpYkZLQVNBQkIybVI5WnEtTEtz
ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JYSGV3VGliRktBU0FCQjJtUjlacS1MS3NlWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUFGNEIvODQ4NThGNkE0NzE5MTFFQTkwODYzMDcyQzRGOUFFMDIvNjM2MDUyNEUw
M0QzMTFGMEE2QzY0MTc3QzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJAXLwDANBgkqhkiG9w0BAQsFAAOCAQEADdrA5VE7NmJDRD2/AXTq
ks0uYhDZTnM8voqenFcrsCgiu8KJUgFbenHoybOBCsT7w3sVHdgJAJt1J0wQv2w1
XRo+s2zwxroPe3iSsepQnDDAGtFYY2NokSEyGqXo/f55tSusZprY7grh50bpZOoK
jCK8OGxMDjpCKB2wbVcfhQfuSg5m7OskuKlEnorTYafBcJWEeHJxlDf+h9D5T8b/
pMMk8xCqlpYgTLjU9tQg2RjEyqWprn4G2yQViMGruT7c0HUOHZRPTmDUQXXwAZr2
O7ZtJXtS7GuQ1UN2wau90OGLDYTm9wRfFbeF2K5WT2wHy1g1dD2O0Vc+b5uSrQd7
lA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:25:55 2026 by rpki-client