
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/F9424C6C80FA11ED9B35954DC4F9AE02.roa
File: F9424C6C80FA11ED9B35954DC4F9AE02.roa (raw, json)
Hash identifier: kA6NvISB8IT/6NkuxuF6Q7P9ApF1p1wHgdDAw6Jwa34=
Subject key identifier: 66:06:31:01:ED:AA:8B:DE:F1:AE:57:50:4C:A8:CF:8A:3E:07:3A:CF
Certificate issuer: /CN=A91F81AD/serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B
Certificate serial: 02C0
Authority key identifier: 3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/F9424C6C80FA11ED9B35954DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:28:48 +0000
ROA not before: Sat 27 Sep 2025 02:30:35 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 7575
IP address blocks: 138.80.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl
rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 704 (0x2c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F81AD, serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B
Validity
Not Before: Sep 27 02:30:35 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a44d20-600e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:80:ab:92:98:c0:73:fe:c4:8f:ea:01:37:22:
0c:5f:24:cc:7c:89:f8:84:5c:d2:be:2f:e4:09:6e:
be:9b:5c:ac:a1:e7:37:11:ab:f1:59:4b:51:e1:a6:
d7:9e:9a:ef:0d:03:c4:f9:1e:96:98:87:5f:21:42:
32:25:04:f3:ec:aa:9a:58:e7:d3:2d:47:f2:c6:d0:
e5:e9:96:3e:88:3d:17:c2:df:1a:ae:d8:4c:4d:c3:
03:c0:a3:14:b0:ec:02:93:43:bf:37:d5:fa:f1:12:
47:43:07:20:9a:1c:6b:e2:ee:ae:2e:e9:29:95:6f:
b7:60:de:44:09:e5:53:67:7e:15:77:96:33:34:17:
32:af:46:35:bf:1c:06:0a:90:2f:71:e8:f8:82:8a:
82:7a:f2:45:18:4a:f2:86:5e:83:24:6f:a3:c2:f1:
a3:1c:74:8f:ba:a6:2b:13:ef:ba:9a:f7:ad:a0:43:
06:d4:71:9b:08:2c:54:c7:f3:e9:c0:84:62:12:61:
47:8e:0e:22:1b:db:c7:41:3c:43:21:d8:12:24:8d:
1d:11:f3:4a:1a:ff:e5:79:9b:ba:19:93:cb:a4:0a:
9e:ed:98:f7:35:cb:27:18:db:73:fc:86:58:37:c2:
4b:0c:e4:eb:25:78:f8:7b:f7:84:81:15:f5:20:fd:
0c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:06:31:01:ED:AA:8B:DE:F1:AE:57:50:4C:A8:CF:8A:3E:07:3A:CF
X509v3 Authority Key Identifier:
keyid:3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/F9424C6C80FA11ED9B35954DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
138.80.0.0/16
Signature Algorithm: sha256WithRSAEncryption
97:c0:1f:59:a8:53:fe:74:16:57:3c:21:98:ea:5d:8c:a1:92:
c0:96:98:ea:da:0f:f2:66:00:dd:cb:1d:c2:41:59:84:2a:f8:
54:27:6a:f3:7a:26:14:10:7c:69:1a:f6:0c:d6:4f:0a:fe:7c:
8d:3d:a9:c0:d3:03:ad:36:17:ca:b7:d3:29:66:c5:49:f7:03:
63:52:59:45:08:90:ba:d0:ab:3a:3b:7c:e9:b3:49:57:89:a0:
8d:6d:5e:f0:e4:a1:d4:fe:53:6d:50:1c:41:e3:8c:59:62:c1:
24:a0:c2:e0:fd:37:7d:00:b4:cf:22:d7:8c:cb:a2:dd:66:a0:
d8:5f:ac:f4:95:7e:dc:1d:58:e0:d4:7d:b6:fc:0e:b9:6f:36:
ec:91:38:18:46:bc:bf:fa:cc:4d:95:77:ce:2c:28:7c:f1:18:
06:90:18:1b:1f:19:2e:3b:73:26:e8:10:fd:54:54:d0:df:c8:
74:be:0f:f8:d2:5f:1a:bb:28:a1:41:10:50:d1:c7:32:3f:5d:
4d:e0:40:28:8a:37:95:20:00:b0:bc:d6:e0:31:ba:56:7f:2b:
33:ec:6d:79:f9:1c:92:b0:46:31:a0:6d:c3:44:4e:e6:ff:29:
37:e8:b0:fc:1d:1a:18:13:c5:0c:6d:f7:1c:ad:d7:2c:9b:71:
ad:bb:dd:51
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:53 2026 by rpki-client