
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/D385E420314711EBA579873DC4F9AE02.roa
File: D385E420314711EBA579873DC4F9AE02.roa (raw, json)
Hash identifier: OXpsFXQnHysc6JgYoLG/ywf9w/jV3FpEntMMj1+ecpM=
Subject key identifier: A2:DB:D0:73:D6:60:89:87:FD:56:FD:85:8C:1D:2D:51:85:E1:20:2C
Certificate issuer: /CN=A91F59A6/serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64
Certificate serial: 0919
Authority key identifier: E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/D385E420314711EBA579873DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:43:24 +0000
ROA not before: Thu 22 Jan 2026 18:15:00 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 138394
IP address blocks: 206.209.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl
rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2329 (0x919)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F59A6, serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64
Validity
Not Before: Jan 22 18:15:00 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a46cac-4baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:69:16:16:f8:67:0d:57:ba:a0:09:81:2d:4b:
b6:63:4d:4d:02:a3:5b:ee:1f:c9:23:d2:b5:a7:13:
37:eb:af:10:57:49:51:bc:e2:ec:2c:d4:8f:9b:9b:
e1:f4:96:3a:62:11:c8:81:2f:d3:89:3b:8f:33:6c:
a7:ab:ee:6f:90:4d:b5:1d:8c:62:e5:2c:a7:b3:8b:
1f:f7:3c:93:9d:ec:5d:a6:49:86:68:66:43:5b:c2:
b6:dc:47:0c:26:21:6c:6a:cd:34:63:57:d0:37:5c:
a0:de:f8:8b:09:12:86:f1:47:7a:c4:2f:81:7d:b2:
64:cc:18:26:ce:f9:fd:5f:ae:c2:b7:02:ba:27:d6:
aa:08:18:9a:19:96:d0:ee:be:25:49:40:dd:b3:ae:
56:8a:a2:5d:c3:dd:c9:1e:2f:ad:bf:89:51:34:0e:
50:80:f0:64:a5:4b:88:38:43:82:b7:cf:ca:52:66:
f0:d1:57:82:56:e7:6d:69:ac:0d:60:82:03:70:f9:
bb:70:49:a8:e2:7d:25:f8:3e:ac:c2:36:32:30:d6:
7b:1a:39:81:b1:62:53:c5:32:a8:35:cd:c9:4a:dd:
81:0f:13:e6:c4:ed:c6:c6:39:43:fd:11:e9:b6:ad:
4d:91:b6:eb:e8:3f:05:e2:1b:c3:d3:38:a3:53:97:
62:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DB:D0:73:D6:60:89:87:FD:56:FD:85:8C:1D:2D:51:85:E1:20:2C
X509v3 Authority Key Identifier:
keyid:E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/D385E420314711EBA579873DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
206.209.77.0/24
Signature Algorithm: sha256WithRSAEncryption
87:e9:0e:6b:46:c5:a6:1e:19:04:f3:63:5c:44:83:62:e8:4e:
88:b0:fe:64:b0:ca:6c:18:1b:04:49:58:8f:bf:77:c3:45:62:
db:c1:42:02:89:04:b0:d9:9b:1c:af:25:98:a7:b4:d6:2c:10:
45:a6:ac:7f:66:6b:75:17:35:7f:9b:5b:f2:22:29:42:83:cb:
42:65:d3:07:23:80:51:d5:62:63:1a:02:b5:8e:28:31:d2:66:
89:0a:21:24:6a:d1:71:00:f3:52:64:63:c3:6b:58:91:36:45:
a1:41:7a:52:cb:bc:63:dd:cb:60:13:03:62:75:b2:18:91:97:
de:23:d3:76:93:fc:30:da:11:c3:ca:95:ab:7b:ef:19:8a:18:
b4:b8:42:95:ee:a6:1b:c0:c6:6c:f0:35:aa:04:b7:c7:f0:4b:
29:ef:ae:11:61:b6:a8:71:01:7e:ed:07:4d:b4:33:65:7b:2d:
8c:14:a6:4d:87:7e:e3:ae:04:c2:66:a0:6a:1a:02:54:ad:93:
2e:2e:3d:09:fa:ba:4b:fd:a3:b2:c1:e0:89:04:08:28:ae:27:
79:e3:28:dd:a0:d8:f5:af:73:09:ed:0d:f0:7c:a9:db:03:a3:
8e:f9:af:61:dd:ea:34:f8:46:66:bf:a9:6b:0b:de:35:5f:36:
98:a3:fb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:40:03 2026 by rpki-client