
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/66D4A06E651411EF9F534031C4F9AE02.roa
File: 66D4A06E651411EF9F534031C4F9AE02.roa (raw, json)
Hash identifier: zkNUDLjXuqFNaipi5YVq9yVdI9wqBX+vkJTiE60LyPI=
Subject key identifier: 91:56:35:19:57:98:2C:86:3A:2F:77:0C:1D:32:8C:EA:81:EE:93:7B
Certificate issuer: /CN=A91F006D/serialNumber=46F972D7B83DCA061DB9DFAAF0177F2DDF1EE90A
Certificate serial: 01C0
Authority key identifier: 46:F9:72:D7:B8:3D:CA:06:1D:B9:DF:AA:F0:17:7F:2D:DF:1E:E9:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/66D4A06E651411EF9F534031C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:20:05 +0000
ROA not before: Thu 15 Jan 2026 03:22:46 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 137970
IP address blocks: 36.50.74.0/24 maxlen: 24
2001:df3:43c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.crl
rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:10:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448 (0x1c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F006D, serialNumber=46F972D7B83DCA061DB9DFAAF0177F2DDF1EE90A
Validity
Not Before: Jan 15 03:22:46 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a45925-51e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e4:c1:ec:34:f2:ae:bb:e5:e4:13:29:92:8a:
8c:5c:1e:60:50:ed:37:43:b2:32:68:98:1d:b9:8e:
cb:28:e5:c8:dd:8a:1f:3a:b2:22:8f:d5:5e:38:7d:
0e:aa:72:32:7d:f2:87:7a:19:2b:56:77:77:e5:91:
8d:31:37:70:10:e7:00:17:bf:cc:ad:7b:11:62:91:
23:cb:81:19:79:1c:49:fe:0e:08:46:b0:6e:08:b3:
61:71:d9:ee:34:a4:54:ad:a9:13:91:77:2f:53:89:
97:bc:7d:e0:62:95:92:99:65:77:46:cb:c7:72:c5:
8f:e3:66:44:44:50:03:a3:ae:c9:51:7b:7a:a0:03:
41:cc:aa:fe:b9:f2:03:fe:e6:7a:d6:b8:49:ac:c8:
43:80:99:85:56:5d:cf:3f:1d:81:28:f2:6c:72:17:
dd:a7:49:9e:9b:74:6a:53:6b:e2:c7:e7:e8:e4:5a:
eb:9b:9d:42:6f:a0:cf:49:86:1f:f7:74:5f:c1:2d:
4f:51:b7:5f:38:b6:a0:61:d7:6c:76:68:f5:d1:11:
11:63:6b:f2:b5:cb:8d:a6:04:21:a3:87:dd:84:a4:
16:81:2d:e6:13:4f:11:69:83:3f:87:db:78:cb:e9:
d9:b1:fd:0d:a6:8c:07:6f:37:b4:04:49:e3:f4:f4:
de:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:56:35:19:57:98:2C:86:3A:2F:77:0C:1D:32:8C:EA:81:EE:93:7B
X509v3 Authority Key Identifier:
keyid:46:F9:72:D7:B8:3D:CA:06:1D:B9:DF:AA:F0:17:7F:2D:DF:1E:E9:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/66D4A06E651411EF9F534031C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
36.50.74.0/24
IPv6:
2001:df3:43c0::/48
Signature Algorithm: sha256WithRSAEncryption
82:09:6b:7c:a5:17:06:4c:64:54:f4:70:0b:be:c5:f5:b5:12:
33:35:ba:6d:ed:e2:2c:2a:65:27:a5:bc:f4:93:97:19:f0:e8:
68:00:67:32:f0:b6:9f:e3:23:e9:37:af:fc:28:bb:6c:85:27:
5d:ba:5b:0f:39:a1:15:90:8b:e8:0e:15:6e:64:27:f2:28:20:
d0:04:e7:79:3d:ca:a4:a9:af:45:82:60:08:2a:32:d1:ab:ec:
67:3c:c5:6d:05:1d:ae:e6:af:3c:01:ce:67:7b:81:63:04:26:
30:95:f3:1e:7a:6c:8e:5d:fe:ff:63:2b:ae:2b:df:38:ae:2e:
e8:42:29:18:10:52:d0:ac:e2:97:2f:5f:2e:01:41:dc:05:3e:
6c:6d:18:1f:03:24:75:e6:b8:43:1c:b5:d0:86:fb:5c:56:d2:
4b:e5:eb:32:de:1b:e6:78:2a:aa:81:3a:69:3c:71:73:00:7f:
96:8e:78:15:55:34:36:b9:13:b2:ab:69:6b:9a:97:4c:7b:36:
f9:71:cf:78:c2:df:2c:46:d2:44:36:6f:79:72:95:33:31:95:
73:48:5a:0f:7b:46:4d:50:39:fc:b4:86:76:51:8d:36:9e:8c:
72:af:2e:19:91:82:46:5a:64:69:70:5f:2b:0f:82:e9:1c:de:
10:10:a5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:05:33 2026 by rpki-client