
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/3AB1C050E13911F0A327D96A6F6F56BC.roa
File: 3AB1C050E13911F0A327D96A6F6F56BC.roa (raw, json)
Hash identifier: 3J0PRAsiX/YNmC8ajSEkPsap7GGbAxh9uW1xyzUwSQE=
Subject key identifier: 24:44:F2:CF:FB:1C:FE:9D:3C:D3:42:18:28:F3:65:23:24:AC:42:37
Certificate issuer: /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial: 02B2
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/3AB1C050E13911F0A327D96A6F6F56BC.roa
Signing time: Sun 01 Mar 2026 18:30:59 +0000
ROA not before: Thu 25 Dec 2025 02:27:16 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 204910
IP address blocks: 2401:b60:e210::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 690 (0x2b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Validity
Not Before: Dec 25 02:27:16 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a485e3-5595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3b:4b:dd:33:66:25:7f:1d:8f:6b:a4:e7:90:
d8:8a:6e:d8:b2:95:8f:95:11:21:10:ea:b3:6c:c2:
39:19:55:db:52:0f:0e:8f:b8:a3:f2:92:e6:a3:0f:
d8:4d:4b:ea:27:39:12:9e:69:78:6d:3b:49:3b:ae:
40:11:56:0a:67:d6:64:c4:cc:d6:5d:4a:cf:75:79:
78:1a:9d:1b:f6:2a:a4:de:ed:97:7e:b1:7f:2c:41:
47:9d:93:1e:7f:d2:ec:78:1b:2b:78:c2:ab:a0:55:
88:58:32:f0:7f:3b:db:42:31:48:d1:e7:c6:06:1a:
92:37:df:1b:ef:78:e9:c3:24:fd:fe:fe:ff:bc:83:
2c:bb:ac:1a:b1:23:92:3f:c8:82:b3:34:f3:e4:70:
67:66:6d:f4:e7:95:3d:0f:16:89:e9:c7:53:e9:d9:
8c:16:e6:33:6f:d6:8c:57:35:1f:ec:ef:3d:15:ad:
14:88:ee:16:c1:f0:5b:9e:f6:bb:5b:e5:60:e0:2f:
51:dd:80:70:34:d4:79:46:e6:ff:20:91:4d:8b:47:
01:7c:22:ea:92:1a:51:ae:48:32:f1:f1:74:42:df:
88:9a:d9:10:02:08:47:42:60:1d:7b:04:d3:48:cc:
a9:f8:53:8c:92:7a:77:cb:f1:e4:85:16:3c:94:2b:
5f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:44:F2:CF:FB:1C:FE:9D:3C:D3:42:18:28:F3:65:23:24:AC:42:37
X509v3 Authority Key Identifier:
keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/3AB1C050E13911F0A327D96A6F6F56BC.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:b60:e210::/44
Signature Algorithm: sha256WithRSAEncryption
63:17:fe:34:e2:78:ca:e5:00:26:53:53:fb:ca:3b:88:8c:7f:
5a:d9:85:ee:4f:45:d1:30:ec:cb:34:c3:33:05:0d:80:ef:90:
75:08:38:7a:5a:6f:c2:d7:23:46:11:a1:ab:0b:ad:b5:32:4e:
9a:83:01:04:75:30:af:aa:96:c6:00:7c:84:98:e8:ea:5e:69:
7f:ec:44:d1:bc:91:f1:73:80:eb:8a:03:d6:70:53:8c:1a:b4:
92:82:9e:98:80:94:0a:a0:28:15:0c:0a:78:13:81:8c:ce:60:
0b:54:dc:eb:6e:f3:26:46:31:f7:2e:c5:74:21:c4:0a:2b:33:
c8:19:ad:b9:38:64:c6:4c:4f:c5:76:34:29:c3:e1:78:02:16:
61:3a:c3:34:ea:4d:9e:a5:6f:22:48:00:77:c7:85:10:07:a2:
5e:71:7b:26:a6:94:8e:c8:4a:35:9a:76:c6:61:6f:a2:0c:43:
90:71:5d:92:79:5e:8e:1b:4c:20:ee:00:8b:ac:9e:07:ab:45:
a1:f0:ee:a7:47:e8:18:46:65:90:c9:fd:10:be:85:4b:eb:db:
89:65:3e:36:be:30:46:d6:e5:67:f3:82:7c:73:5f:20:54:82:
e0:77:f3:53:3d:20:e2:ec:40:ff:af:a7:04:43:06:0f:e0:e5:
a7:7b:35:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:43:58 2026 by rpki-client