
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/7857C144B87211EE98B04B19C4F9AE02.roa
File: 7857C144B87211EE98B04B19C4F9AE02.roa (raw, json)
Hash identifier: C2BRAJ6U5hkevbHK+5ceIjb92XJVfacv1GEqT4+6nOM=
Subject key identifier: FE:59:3B:1A:0C:9D:EE:9D:15:EC:FB:FB:FD:AD:AD:6B:3D:77:B3:2F
Certificate issuer: /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial: 02B1
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/7857C144B87211EE98B04B19C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:30:58 +0000
ROA not before: Fri 17 Oct 2025 04:30:15 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 211759
IP address blocks: 2401:b60:200::/44 maxlen: 48
2401:b60:3150::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 689 (0x2b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Validity
Not Before: Oct 17 04:30:15 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a485e2-d9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:26:97:1f:11:dc:d6:00:43:33:15:fe:b3:23:
65:29:bc:c1:7c:69:df:33:98:10:96:07:76:6f:77:
58:92:62:3a:dc:53:e8:5d:3f:c7:f2:dd:34:46:70:
50:70:8f:3b:d5:db:bb:1d:ee:bf:2e:1f:f4:75:39:
2a:94:fa:59:2d:fa:d0:92:91:b9:8f:76:42:5f:82:
1a:04:68:b0:b0:b0:a7:9e:49:3e:4f:2d:5d:78:d8:
ec:f6:c0:21:5b:80:8f:c0:73:e4:56:c4:1f:b6:f4:
c4:04:03:39:81:74:5d:45:41:e5:a6:e7:0b:38:7f:
c6:a6:c9:ca:ee:ab:b6:e2:49:24:22:f2:ca:62:45:
7c:93:0b:09:f9:e4:c5:03:de:db:43:a4:4b:c8:dd:
92:0b:51:54:34:6d:73:0f:96:18:a9:70:59:64:50:
3d:4e:75:28:ca:8c:42:34:84:a3:32:5e:62:a3:97:
a0:1f:36:af:a7:e4:9f:02:cb:af:18:0f:35:d6:f7:
2c:35:78:31:0e:b3:12:61:46:f9:c4:ef:44:8d:f2:
12:a4:f0:e0:3d:89:f8:9f:11:5b:b4:7c:10:bb:77:
90:b0:c5:13:89:bc:8c:da:3a:cf:e5:67:15:3f:79:
d1:cb:70:10:71:04:b7:88:be:87:d4:21:9e:de:d7:
d3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:59:3B:1A:0C:9D:EE:9D:15:EC:FB:FB:FD:AD:AD:6B:3D:77:B3:2F
X509v3 Authority Key Identifier:
keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/7857C144B87211EE98B04B19C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:b60:200::/44
2401:b60:3150::/44
Signature Algorithm: sha256WithRSAEncryption
13:a8:62:7c:cf:85:4a:a7:2a:48:1f:3b:7c:06:e6:6d:88:10:
3a:3b:70:19:71:69:b3:0d:40:e8:0d:bb:6e:8b:54:b6:ca:4e:
2f:2e:7f:4f:ef:b1:3d:5c:9e:1d:c6:96:00:e0:6f:76:2d:20:
83:16:84:e1:f2:b7:e5:06:0a:f3:d8:ef:3d:e0:e7:72:71:e2:
80:61:83:21:56:4f:3a:19:74:50:a9:4b:82:2f:57:6b:dd:6f:
d3:fe:7b:45:48:0e:f2:d9:fe:e4:c6:97:53:8c:80:71:98:ae:
78:40:e1:3b:de:e2:2a:d6:5b:64:81:3c:1b:c8:89:35:5f:9a:
21:9d:86:2a:c4:b3:26:93:69:22:dd:b2:54:6f:06:60:d4:21:
3a:7d:7c:60:64:32:17:5d:3f:b8:d3:60:ef:38:39:19:e6:90:
4e:fd:cf:71:0d:4a:d4:43:90:c3:e2:0a:7f:7b:7d:38:90:b6:
64:0f:44:b3:a5:d1:1a:d0:ef:95:7f:22:b9:de:74:1f:6a:b8:
e0:6b:dc:4e:19:55:49:56:6d:20:ad:da:b0:10:90:9e:5a:49:
72:06:30:3b:e3:75:0e:99:ce:6a:a6:f2:19:76:73:ba:b5:f6:
60:c7:26:8a:f8:67:f3:8b:38:75:2d:c6:91:df:96:97:24:4d:
b8:18:9c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:38:22 2026 by rpki-client