
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/935296A6558B11F0BB2DB436C4F9AE02.roa
File: 935296A6558B11F0BB2DB436C4F9AE02.roa (raw, json)
Hash identifier: oQTNR8UezgQA4tGlsLZvjgGgLBz+VcjntBI8Klr+/KA=
Subject key identifier: 13:7A:30:7E:9C:2C:55:6B:F5:59:18:29:84:CC:42:F0:44:7E:A3:7D
Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Certificate serial: 0273
Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/935296A6558B11F0BB2DB436C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:53:10 +0000
ROA not before: Mon 03 Nov 2025 03:48:07 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 153997
IP address blocks: 2402:be0:fefe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 627 (0x273)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Validity
Not Before: Nov 3 03:48:07 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a47d06-070a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3b:4e:95:63:0e:6b:7b:e8:26:93:d1:c3:b7:
58:f8:a1:26:56:9f:3c:fe:4c:a2:ec:60:a7:b9:2d:
5a:bd:15:07:05:42:e8:54:ff:8b:c1:72:bf:1a:46:
f3:92:f1:81:95:a2:69:42:59:b8:70:c2:24:ef:45:
f6:a8:97:ca:47:58:7a:5c:b2:1e:33:1a:88:dc:b7:
3b:e0:a4:32:ef:d7:8f:7b:6e:55:b1:02:c2:03:65:
64:af:dc:0f:be:c6:8b:c8:55:ba:23:94:96:94:b5:
62:1b:e7:aa:94:d6:e0:98:ce:9e:e3:11:67:51:71:
60:4c:45:a2:21:78:aa:5f:db:c2:6d:b9:04:0a:c0:
b9:6e:6f:43:6e:6a:2e:24:5b:68:73:31:19:b8:cf:
7d:c8:01:51:59:04:48:66:ca:c9:3e:e7:ce:82:bc:
2b:b6:80:73:3e:ab:b7:cf:3d:b2:63:05:92:ef:92:
f7:40:74:50:cf:83:97:02:4b:c9:0e:2c:ea:bd:82:
41:21:7e:cb:00:4e:a1:b2:52:e9:5d:75:26:79:eb:
85:28:b9:51:c6:03:46:bb:ec:0f:59:d1:d4:21:d0:
ce:a8:45:78:23:51:31:ce:bf:58:30:eb:4c:cd:26:
19:5d:02:64:27:16:b9:8d:e3:c2:ef:73:01:9a:75:
78:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7A:30:7E:9C:2C:55:6B:F5:59:18:29:84:CC:42:F0:44:7E:A3:7D
X509v3 Authority Key Identifier:
keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/935296A6558B11F0BB2DB436C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:be0:fefe::/48
Signature Algorithm: sha256WithRSAEncryption
18:9a:9c:2f:2c:5f:25:50:ab:6a:76:4a:d3:11:6c:18:fe:b3:
d6:03:a6:86:5c:1b:b2:38:d1:f9:7b:38:ff:4b:78:ae:67:bd:
3f:fd:66:f6:49:bc:71:45:7c:f3:85:16:da:88:dd:44:92:93:
fc:8a:af:65:a5:66:c6:5e:39:d5:fa:2b:cb:9d:0d:45:e6:59:
84:2a:7f:63:28:e9:e0:8b:64:34:9c:d4:3b:ff:7b:c2:66:d8:
cb:54:5c:65:07:42:46:c5:00:ee:fb:7d:0a:04:4d:48:09:5f:
bb:13:f7:90:72:a3:f0:99:6d:d9:4a:ee:20:43:38:40:86:bb:
d9:89:99:08:8b:f6:3f:8b:5f:1d:8e:7e:9f:a4:d1:a5:4b:7d:
12:65:15:ce:aa:ea:52:dd:87:7c:20:b0:b8:7c:e4:a7:8f:e4:
83:0b:48:74:9f:26:a9:62:16:84:66:33:48:45:eb:3d:b3:7f:
2e:6a:2b:a3:cb:92:6e:2c:51:01:d9:95:74:35:ec:ba:95:d4:
e4:4f:7c:80:07:ef:83:b9:28:66:00:ad:e1:0b:51:96:d8:c2:
a9:3f:95:50:78:bf:68:33:76:28:d8:96:f6:97:e3:95:4d:75:
96:08:db:68:62:cc:43:99:bf:0a:d7:70:d0:1f:32:d5:e1:ed:
a4:2c:3d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:26:42 2026 by rpki-client