
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/215F871ECF5E11F0872AA04EC4F9AE02.roa
File: 215F871ECF5E11F0872AA04EC4F9AE02.roa (raw, json)
Hash identifier: qRzgyqSJD3NVIso8hW8cnnF0x8uRdec/QS+blqObl20=
Subject key identifier: 53:65:FC:75:0C:FE:FA:9F:41:F5:55:7A:C8:11:A9:4A:33:57:AE:7E
Certificate issuer: /CN=A91EFBA1/serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6
Certificate serial: 197F
Authority key identifier: 41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/215F871ECF5E11F0872AA04EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:11:09 +0000
ROA not before: Tue 02 Dec 2025 09:06:05 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 139793
IP address blocks: 2400:dac0:8::/48 maxlen: 48
2400:dac0:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl
rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6527 (0x197f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFBA1, serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6
Validity
Not Before: Dec 2 09:06:05 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a448fd-bbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:94:35:8d:00:5b:11:9d:5a:ea:2e:64:8d:37:
72:86:0d:d5:16:e3:55:80:6e:85:26:68:f1:08:91:
30:86:1d:64:89:15:fb:c0:67:9e:9b:73:d3:89:e1:
15:7f:a2:db:9e:47:ee:b1:45:9a:49:91:3b:b1:f0:
1a:e5:13:19:a4:a2:70:9c:6b:fa:58:33:fd:15:6e:
b9:29:f7:76:97:34:85:dd:78:60:35:69:66:ba:26:
ba:a9:8a:47:6e:7a:49:a0:83:46:7e:1b:bb:48:d8:
18:8f:de:97:54:2e:0a:77:e1:77:c2:0e:95:72:98:
69:52:80:8b:56:fa:ca:f0:22:69:34:e5:06:83:ab:
21:21:c4:51:17:f9:52:16:b3:21:79:0b:ab:5f:49:
fb:e1:f9:f8:95:a4:ed:29:ed:55:ec:51:d7:43:a9:
da:55:ae:81:1e:d7:e8:cf:c7:20:b9:2d:c2:77:4b:
15:21:63:6e:71:e4:d1:27:90:27:10:8a:48:26:38:
4b:1a:e8:ec:74:78:60:dd:68:2f:04:0d:b2:0d:0f:
e0:cb:25:09:c7:5a:0c:42:28:2e:7d:ff:dd:c5:80:
a5:59:9c:a3:3a:b9:3a:2f:66:67:f2:99:06:4c:f5:
6c:f3:a5:9e:12:68:74:a2:b8:cb:ed:6e:ed:c2:4e:
55:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:65:FC:75:0C:FE:FA:9F:41:F5:55:7A:C8:11:A9:4A:33:57:AE:7E
X509v3 Authority Key Identifier:
keyid:41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/215F871ECF5E11F0872AA04EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:dac0:8::/47
Signature Algorithm: sha256WithRSAEncryption
06:ab:d6:d8:76:62:c4:a8:2f:1d:04:58:1f:b7:b7:41:fb:c4:
6f:21:70:7f:a0:8a:a9:f1:f6:4a:8f:47:d1:20:f9:99:56:bd:
6c:32:5b:a9:5e:38:32:fd:0b:64:2e:9d:d5:90:98:c7:be:4c:
53:b4:58:fa:b5:93:f3:84:ef:e4:70:02:f0:2e:f9:f0:5a:2f:
3d:99:4a:d9:9a:8f:11:3d:d3:91:a4:98:f3:3f:84:cc:c5:b9:
36:32:f9:35:05:f7:54:b9:d8:62:3e:f2:d8:ba:03:ee:a0:7e:
7b:2e:11:73:fc:d8:c3:23:3f:bd:85:5d:c3:ff:1e:81:1c:0d:
1d:8c:93:a3:24:a5:61:a7:e2:f4:83:87:03:bb:a0:b0:8f:fe:
57:0a:2e:19:23:4a:5b:45:0f:81:d9:e2:fb:b7:32:c4:1c:f1:
22:79:83:72:79:db:00:29:15:73:57:f0:0a:b8:70:2c:24:d2:
3f:9f:bc:a5:e4:aa:2c:92:37:dc:02:92:b8:28:b1:30:bc:b6:
e0:8d:cc:a1:0a:5e:51:7a:67:b9:83:47:20:8d:e8:aa:c8:48:
07:3a:7b:de:02:b5:03:94:35:43:cb:3d:fa:69:1a:8c:ba:8c:
d2:29:81:7c:06:1f:cf:f4:7c:f2:8c:01:93:93:67:21:1b:11:
80:fd:37:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:11:46 2026 by rpki-client