
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/063FA6B25B2811F09B9A3A54C4F9AE02.roa
File: 063FA6B25B2811F09B9A3A54C4F9AE02.roa (raw, json)
Hash identifier: COnh5OBflDrTiNerSPEVrAoEkIl/6x/Vx+xkw8ZayhI=
Subject key identifier: E2:E7:4F:CF:1B:62:3B:11:14:F6:66:4A:4B:B4:5B:7A:29:B9:30:41
Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Certificate serial: 026D
Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/063FA6B25B2811F09B9A3A54C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:53:05 +0000
ROA not before: Mon 03 Nov 2025 03:48:02 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 13383
IP address blocks: 2402:be0:fffa::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 621 (0x26d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Validity
Not Before: Nov 3 03:48:02 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a47d01-acf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7b:26:45:3d:12:dc:4f:d3:c7:40:6d:39:41:
81:56:fd:03:67:e9:95:27:cb:b7:c7:16:f5:28:c8:
9f:9d:be:27:6d:9a:60:37:11:6b:5c:dc:88:c8:8b:
59:da:cc:d2:7a:05:62:04:64:f2:64:1e:6f:af:92:
9d:79:7c:cb:19:9b:5e:cb:16:d1:64:05:cc:e0:6c:
3e:23:55:51:b7:71:5d:dc:cb:4a:e3:8c:52:0c:a3:
0e:05:ca:0a:07:6f:bb:0d:79:ab:97:f1:1b:60:0a:
09:85:6a:e2:4f:23:4f:18:0e:1b:f6:4c:5d:7c:6a:
2f:5d:a7:dc:03:17:3c:40:41:ca:70:01:5b:f1:04:
00:8b:bc:69:5a:63:56:c0:cf:ab:8a:e5:10:54:72:
4c:64:b8:45:7c:fc:62:65:e9:b6:d4:a4:b9:55:a0:
e3:f9:6e:3f:12:79:ce:27:0c:19:31:fc:4a:14:09:
a0:4d:99:22:54:14:9c:d0:bd:84:bb:0c:1b:19:15:
fb:7e:73:4c:6e:ad:14:00:a9:95:6c:05:37:ab:34:
f3:38:c7:0c:99:e7:e9:ba:86:99:3d:b0:de:7b:ad:
de:e7:bf:d4:5e:86:37:df:97:f2:1b:d5:0c:d2:af:
01:f8:34:34:34:c8:e2:fe:dd:39:17:3f:41:73:52:
35:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E7:4F:CF:1B:62:3B:11:14:F6:66:4A:4B:B4:5B:7A:29:B9:30:41
X509v3 Authority Key Identifier:
keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/063FA6B25B2811F09B9A3A54C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:be0:fffa::/47
Signature Algorithm: sha256WithRSAEncryption
73:c5:12:1e:d1:18:b3:9e:e8:2e:1b:f0:c3:55:b0:6f:5d:09:
bf:3a:40:6b:80:44:32:c0:1d:d7:df:75:35:81:0c:c5:04:0b:
ac:1e:c2:3e:e3:de:5a:e9:c4:6a:f7:f2:c7:87:83:b2:9c:48:
84:dc:ca:79:de:55:f6:e9:62:72:b1:be:85:70:9b:28:b3:49:
54:60:f0:bc:08:eb:d7:4e:70:c2:ec:79:71:b9:2f:16:28:a2:
2e:b2:82:af:32:b4:e6:e2:ca:92:aa:07:0f:fb:13:a0:b9:5a:
85:6f:d4:dd:67:37:db:73:0d:42:c2:0e:46:b0:7a:34:ac:12:
4d:fa:87:5c:62:b8:81:18:d7:50:ae:2c:2a:69:ea:f6:b5:4a:
1a:fe:30:7d:ce:45:98:1e:55:1f:36:49:36:2a:67:9d:77:fd:
21:05:65:87:c7:47:28:75:58:d1:dc:fd:a3:47:3d:77:e7:62:
3b:50:5f:bd:4b:d9:0e:57:79:a2:42:a4:70:8c:37:8a:eb:d1:
ec:db:54:9e:60:d8:77:c7:ea:3e:98:5f:61:c7:95:91:ee:12:
5b:28:cf:eb:f1:83:60:fb:6c:03:ed:2c:14:28:c3:83:16:04:
cc:42:be:e9:4b:20:d2:81:bd:8d:74:cb:58:4b:67:40:84:2e:
05:52:ce:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:19 2026 by rpki-client