
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/7A092C88E9E211EFAD188675C4F9AE02.roa
File: 7A092C88E9E211EFAD188675C4F9AE02.roa (raw, json)
Hash identifier: VYzj3AeenQpibuJcJi+RGSfALT2kN6QBqvlUfKfEKWM=
Subject key identifier: D2:D0:ED:DB:EB:40:1D:65:A2:27:4C:53:A3:A8:11:1F:89:08:07:55
Certificate issuer: /CN=A91F5BCC/serialNumber=1E48EFE53E62ED204BA7A694384CBAC9246794A7
Certificate serial: DC
Authority key identifier: 1E:48:EF:E5:3E:62:ED:20:4B:A7:A6:94:38:4C:BA:C9:24:67:94:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/7A092C88E9E211EFAD188675C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:15:01 +0000
ROA not before: Thu 29 Jan 2026 05:29:18 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 153493
IP address blocks: 2401:e720::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl
rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:38:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5BCC, serialNumber=1E48EFE53E62ED204BA7A694384CBAC9246794A7
Validity
Not Before: Jan 29 05:29:18 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a41fb5-f894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:62:b6:38:d0:06:9b:35:2f:46:0c:36:7a:b8:
12:d8:71:db:8e:0f:17:f5:85:58:2c:20:1e:f3:41:
a8:ca:d1:73:f7:ba:92:c7:54:10:46:f8:a5:b2:d0:
2e:7a:ee:87:c3:f4:b3:5f:54:0f:9d:80:3f:17:99:
98:13:85:61:29:ae:51:16:c7:fc:16:ef:e2:8c:1e:
15:d0:e9:16:ef:ff:f7:11:0b:ad:68:52:f4:cd:7a:
5d:0c:08:74:59:db:fe:64:7e:53:c9:38:13:2b:87:
78:f6:ac:fa:76:5a:92:e2:f9:ae:56:68:cc:06:87:
71:85:39:66:e5:c9:3f:bc:e9:f9:ab:30:57:2c:ee:
2c:9d:33:c3:7a:39:b6:9a:04:ad:04:62:42:ee:81:
e8:3d:bd:d1:cd:95:ed:20:7c:be:aa:c5:cb:64:a8:
51:8f:f1:22:98:a7:fa:05:f4:ba:dc:a2:64:dc:83:
b4:dc:c5:da:ee:34:75:3d:39:83:18:ef:1b:1b:3a:
5a:a1:4b:b6:3b:89:63:88:38:8e:61:c2:da:45:7d:
ab:7c:3d:4b:ba:7d:0b:fa:fd:de:f8:63:28:df:b1:
fb:50:2c:35:a9:ca:91:21:8c:b8:26:e2:59:63:8a:
ed:72:6b:0b:92:c0:77:b1:18:d9:e6:c2:ff:74:c3:
af:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D0:ED:DB:EB:40:1D:65:A2:27:4C:53:A3:A8:11:1F:89:08:07:55
X509v3 Authority Key Identifier:
keyid:1E:48:EF:E5:3E:62:ED:20:4B:A7:A6:94:38:4C:BA:C9:24:67:94:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/7A092C88E9E211EFAD188675C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:e720::/32
Signature Algorithm: sha256WithRSAEncryption
94:03:6b:d8:fa:50:1b:f4:6e:1f:77:c5:19:34:57:89:fc:58:
f0:f1:84:13:b9:7e:72:07:7d:31:de:16:a3:f8:26:30:2a:a4:
ca:23:14:78:ec:ca:fe:c1:82:f2:82:54:b0:c5:4f:11:96:c3:
5f:7c:6f:20:1e:d7:79:e0:e5:51:aa:06:76:fe:ec:cd:ea:6f:
dd:ff:01:c1:f6:5c:98:ae:e6:9c:1c:42:5d:a0:4c:32:5d:c4:
b7:57:87:39:34:c4:e2:2f:80:31:17:f8:43:1e:5e:ec:a8:54:
92:c5:c8:e3:26:78:49:73:06:84:05:43:cf:12:c3:c8:b9:70:
83:fc:aa:16:da:e9:d8:e8:04:25:ee:ad:1d:ff:91:64:00:24:
30:7e:7d:84:2d:82:6f:25:77:48:5d:b5:57:2d:de:f4:c1:d0:
b1:19:80:c8:74:a5:e1:63:5e:da:af:f4:b9:77:b9:1a:2a:97:
db:5b:b6:56:aa:5c:ba:ed:93:4c:97:ab:85:6a:8e:1f:eb:08:
62:87:14:15:55:85:33:43:c2:e6:7c:7c:a6:7e:22:87:9c:af:
7d:2e:9e:42:73:20:18:e6:6f:41:6f:b4:8b:ad:21:db:4a:cf:
70:41:df:d3:c3:d0:9a:bc:12:18:5a:15:0d:8a:a7:f5:03:4f:
02:5d:cb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:52 2026 by rpki-client