
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/E84C2B9083D711EE871C4048C4F9AE02.roa
File: E84C2B9083D711EE871C4048C4F9AE02.roa (raw, json)
Hash identifier: baXnAWpmWHmpgnfFDG1+WkWi97Ed0TsVeq4m6wjaigM=
Subject key identifier: 31:8B:97:70:B3:2D:53:FF:CE:EE:B4:28:70:89:4E:B2:24:5B:89:83
Certificate issuer: /CN=A91F9CD7/serialNumber=F1F163D854FE733BE2540F37A344FF6A5A5AC9F6
Certificate serial: 01B6
Authority key identifier: F1:F1:63:D8:54:FE:73:3B:E2:54:0F:37:A3:44:FF:6A:5A:5A:C9:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8fFj2FT-czviVA83o0T_alpayfY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/E84C2B9083D711EE871C4048C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:01:34 +0000
ROA not before: Thu 01 Jan 2026 03:22:36 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 136774
IP address blocks: 45.65.56.0/23 maxlen: 23
2001:df3:5c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.crl
rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8fFj2FT-czviVA83o0T_alpayfY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:45:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438 (0x1b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9CD7, serialNumber=F1F163D854FE733BE2540F37A344FF6A5A5AC9F6
Validity
Not Before: Jan 1 03:22:36 2026 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a41c8e-d4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e1:00:17:73:0e:2f:70:86:e8:96:5a:f7:82:
f7:e9:ed:28:55:23:ad:54:c7:d4:13:67:5c:fe:87:
ed:e2:f7:03:2e:4a:43:5e:61:e5:1b:27:cb:10:41:
7e:d1:da:11:c8:05:08:45:9e:e5:27:35:84:53:50:
cd:61:1c:28:5e:13:09:8f:42:f1:d3:f5:a2:06:69:
e9:35:09:4f:8e:88:72:08:98:cd:58:b4:05:35:ca:
da:c5:a3:59:47:c7:aa:04:f4:d2:35:17:36:2c:9d:
ae:fe:91:80:eb:15:fd:6d:7d:7b:05:95:3b:9a:3b:
66:49:fb:72:1d:3d:65:d1:2b:60:c2:45:d5:e2:8c:
b8:0f:f8:7a:39:39:1e:f0:7f:3d:db:8d:ce:68:4c:
31:44:da:8d:a6:c4:e6:d7:16:5e:dc:64:77:aa:09:
17:04:6b:88:10:64:52:09:94:b7:c9:8e:34:52:99:
cd:93:9a:17:aa:96:59:a6:66:24:9d:35:44:e0:18:
03:33:b8:82:3f:b5:b2:e0:fa:b9:2a:1b:a9:c8:9c:
1f:5d:29:8b:03:76:d2:b9:f1:56:74:61:65:e1:c5:
64:00:4b:6c:09:6e:66:93:b4:84:6c:05:11:3b:62:
8e:56:38:7c:01:a4:48:f2:0c:c5:72:96:91:96:a7:
47:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8B:97:70:B3:2D:53:FF:CE:EE:B4:28:70:89:4E:B2:24:5B:89:83
X509v3 Authority Key Identifier:
keyid:F1:F1:63:D8:54:FE:73:3B:E2:54:0F:37:A3:44:FF:6A:5A:5A:C9:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8fFj2FT-czviVA83o0T_alpayfY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/E84C2B9083D711EE871C4048C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.65.56.0/23
IPv6:
2001:df3:5c0::/48
Signature Algorithm: sha256WithRSAEncryption
12:0a:4d:f9:a6:2e:c8:5a:15:58:b8:65:14:b8:4c:7e:ad:d0:
a6:9e:c7:41:76:0d:16:f8:76:fa:4b:ba:70:87:af:e0:e3:ef:
4f:6b:0e:7e:a5:e5:3d:ad:af:25:a7:40:c6:c7:ad:39:90:ad:
aa:cd:2d:97:f9:66:d0:8f:cc:2f:10:ca:3f:0e:21:55:20:ff:
6a:2e:85:0b:dd:90:5a:37:a5:38:72:d6:7d:9f:d2:a3:ac:72:
13:6c:06:22:5c:4b:b4:26:9f:f5:d7:b0:3d:42:9c:b8:23:5c:
08:f1:ad:1e:21:f7:27:40:51:40:f3:6e:a6:5a:28:46:a6:95:
5c:d8:b2:12:68:bb:a8:3a:d8:4b:60:7b:4f:b1:69:12:df:7c:
b7:9a:ff:35:8a:34:87:30:26:fa:66:29:02:e2:88:33:83:44:
26:79:46:1e:74:2b:ef:94:d1:10:d0:09:1a:28:3e:1d:88:cb:
f1:54:70:20:0e:6a:9a:4f:d1:91:fa:16:aa:a9:4d:df:63:7d:
bc:06:86:d0:38:4c:e5:30:da:0b:c9:eb:96:b2:83:63:9d:3c:
a7:91:1d:c9:ff:8a:1b:14:83:62:9f:ae:f4:02:29:03:f2:a1:
31:91:77:f9:9f:1c:9a:8b:76:52:3a:06:1b:a1:df:d5:b6:4a:
12:35:10:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:49:47 2026 by rpki-client