
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/215F871ECF5E11F0872AA04EC4F9AE02.roa
File: 215F871ECF5E11F0872AA04EC4F9AE02.roa (raw, json)
Hash identifier: UJesNWFWd4QVKVnMq2EE5fzwYbSAHuhH8hkx2Vt9ZG0=
Subject key identifier: 77:4E:18:E1:FF:00:0B:B3:04:D0:FA:B8:2C:10:D7:93:13:8D:35:29
Certificate issuer: /CN=A91EFBA1/serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6
Certificate serial: 19A2
Authority key identifier: 41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/215F871ECF5E11F0872AA04EC4F9AE02.roa
Signing time: Thu 02 Apr 2026 17:19:56 +0000
ROA not before: Thu 02 Apr 2026 17:19:56 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 139793
IP address blocks: 2400:dac0:8::/48 maxlen: 48
2400:dac0:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl
rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:22:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6562 (0x19a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFBA1, serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6
Validity
Not Before: Apr 2 17:19:56 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69cea53c-5956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:de:55:4d:51:09:66:37:cb:e6:34:d7:f0:8d:
60:4e:84:af:9e:89:c7:7f:b1:39:0c:fc:c0:df:e5:
48:d9:6e:d1:17:bb:6c:fa:23:77:8a:03:70:af:a9:
ab:bf:c0:b9:f1:bb:2f:d7:91:5c:c8:22:f4:47:c9:
e9:61:66:99:e1:65:d5:0f:f6:9a:89:5d:71:6e:ac:
fc:2c:7d:55:81:d5:35:44:4f:ad:d8:76:aa:ae:0f:
6f:76:ee:ab:be:89:0e:ce:72:02:40:6d:9b:f8:68:
8e:7a:ab:bd:36:87:54:82:52:33:32:52:68:0c:7f:
c4:6a:63:34:29:31:f7:d3:5f:bf:53:3a:3f:ac:8f:
a7:fc:2e:5f:7a:08:14:b9:fa:7c:ca:18:a8:3f:82:
97:57:6a:24:c1:3a:2f:f4:e3:e1:c1:d2:68:86:65:
d5:3e:5f:b5:ad:1d:b6:70:5f:8f:f7:eb:8d:6b:de:
5d:0b:a1:6c:92:fe:db:69:3f:5e:e0:77:80:88:7f:
e8:73:21:f0:10:7d:7f:67:df:32:1d:18:fd:ed:79:
f5:9b:47:81:84:2a:2a:bb:86:b8:82:59:0a:b3:e0:
1e:1c:6d:df:bd:31:76:52:12:e5:c0:3b:d3:cf:fc:
19:d7:4e:40:6f:d8:fc:e1:a8:5d:79:0c:08:a7:2a:
e2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4E:18:E1:FF:00:0B:B3:04:D0:FA:B8:2C:10:D7:93:13:8D:35:29
X509v3 Authority Key Identifier:
keyid:41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/215F871ECF5E11F0872AA04EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:dac0:8::/47
Signature Algorithm: sha256WithRSAEncryption
1c:81:ed:e0:5b:ca:80:45:4f:8d:da:ac:fc:cf:6a:bc:01:ef:
1a:98:87:e7:c4:10:37:6d:d6:ac:4b:bc:48:bd:77:77:9d:ab:
33:81:c1:7e:54:57:40:a5:95:b3:7d:81:2e:15:53:92:0e:dd:
92:39:30:2a:07:91:b4:7c:0b:58:30:ea:36:7d:2e:b8:0b:06:
e2:b0:66:a9:2f:1a:c0:db:bf:6e:88:c0:08:46:24:23:6b:96:
87:f8:dc:ad:fc:a1:5f:71:4e:e1:da:7e:1c:2c:24:72:63:1c:
af:ca:89:f4:e6:41:37:5c:a6:4b:1d:09:b8:69:26:fa:4f:a4:
da:05:d6:66:16:11:b2:27:6d:61:36:f0:ba:75:04:10:69:e8:
91:68:82:a5:71:e0:79:0b:99:08:ea:45:cb:be:bc:41:15:2d:
f1:b5:39:e6:a8:e6:f4:a4:5e:c2:1b:db:05:07:12:d9:33:1f:
6f:15:6b:d5:f4:81:08:05:12:d9:ab:ab:d1:fb:98:f8:b2:34:
a5:0d:03:f3:57:5c:97:c2:83:2a:76:b2:ac:0d:97:75:fa:38:
e1:a9:9d:60:d8:2b:9a:57:8d:d0:2a:73:1c:41:8a:6f:f1:fd:
3b:b5:a3:74:8e:d1:94:00:a0:c2:3c:db:89:09:87:7e:4b:c5:
a1:f9:9d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:45:41 2026 by rpki-client