
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/64B2DE72AC1011ED8592693FC4F9AE02.roa
File: 64B2DE72AC1011ED8592693FC4F9AE02.roa (raw, json)
Hash identifier: fbmqeqVKiqA0r2a2Diispb0Kfg/Ww32W2ewxBa+GSGg=
Subject key identifier: 2F:C5:D4:81:FE:E6:E0:57:46:EC:20:F0:DF:43:78:27:58:53:9A:4B
Certificate issuer: /CN=A91F8E9B/serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9
Certificate serial: 0261
Authority key identifier: 44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/64B2DE72AC1011ED8592693FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:57:30 +0000
ROA not before: Fri 05 Sep 2025 03:08:53 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 24234
IP address blocks: 2400:b400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl
rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 609 (0x261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8E9B, serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9
Validity
Not Before: Sep 5 03:08:53 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a437ba-5e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c2:b2:03:70:e0:97:7e:c1:6f:da:7a:af:43:
7d:87:83:86:9c:5a:63:e1:2e:11:43:72:52:56:c2:
1a:19:1d:f8:0c:e2:fc:de:8d:a5:b5:5b:fd:2c:db:
06:63:22:a0:af:81:53:f5:71:db:1a:5e:43:1c:7d:
76:7a:52:f8:7a:08:d8:11:20:35:42:05:9a:c0:90:
50:ec:c8:25:f0:0b:02:76:4b:03:76:67:5b:30:d4:
89:05:98:4e:41:2b:9e:b8:e2:9b:bd:75:8c:50:d8:
e5:70:af:b3:bb:2f:35:f8:e8:f2:4b:fb:61:15:0c:
66:8d:61:88:77:8a:db:51:11:c8:91:8e:0f:46:6a:
45:5b:8d:70:66:f4:8e:15:ca:e1:26:2b:35:c3:88:
5a:c5:21:b3:24:00:b3:e6:4b:25:e8:46:b0:c3:21:
d8:20:ba:eb:97:85:c8:42:95:49:38:f4:2b:b3:50:
8f:8e:27:1a:a6:c5:42:88:66:d7:2a:01:7f:67:79:
df:2e:07:a3:c2:c3:b7:1a:89:dc:52:2a:76:1c:fb:
86:86:15:97:c6:cc:a8:eb:8d:41:5c:8d:8c:52:2c:
c6:cc:ca:f2:66:1a:d1:ba:78:71:af:6d:b8:0d:7b:
10:3d:a8:98:9d:60:b8:47:74:15:33:d9:39:83:dc:
fb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C5:D4:81:FE:E6:E0:57:46:EC:20:F0:DF:43:78:27:58:53:9A:4B
X509v3 Authority Key Identifier:
keyid:44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/64B2DE72AC1011ED8592693FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:b400::/32
Signature Algorithm: sha256WithRSAEncryption
8d:5d:de:9a:a2:86:b3:60:25:f1:2c:f0:1c:fe:b4:17:26:0b:
4b:07:b8:09:5a:e7:aa:90:15:6f:7e:47:7b:81:7f:05:d6:d7:
4a:65:72:e5:be:b3:11:7b:16:f0:90:b6:3a:26:9d:ba:03:52:
d7:21:f1:31:47:da:76:6f:0f:3b:77:0b:38:d7:b0:49:22:75:
9a:47:e1:8a:cb:49:60:22:80:f0:37:ea:b0:db:7a:44:ac:c9:
6a:f8:1e:87:f5:2d:04:3b:8d:05:14:0f:58:4c:29:dd:f9:6f:
96:bb:80:23:8c:db:2a:e5:9f:6f:62:e3:c9:02:0b:a2:3c:55:
d0:bf:fa:60:89:7c:a2:73:ed:70:df:23:e4:a5:d1:35:f3:61:
06:90:8e:6f:ac:b9:09:e4:8e:f3:8e:50:09:12:73:be:56:54:
5a:72:a9:d4:96:ac:30:a2:4c:26:8e:24:b3:cc:15:d0:14:e5:
ef:0f:dc:bd:89:8d:7c:43:24:3b:92:86:52:47:cf:05:a9:2f:
55:f3:1e:e2:37:7e:d0:c7:ef:be:91:fa:13:04:81:5b:68:9e:
69:61:0d:00:22:64:df:58:89:c0:89:bf:a2:ef:74:19:e3:7c:
eb:12:c7:32:13:2c:be:f9:4b:80:3c:a6:c8:70:3b:0d:37:ea:
c0:66:23:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:47 2026 by rpki-client