
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/12032AE02EAC11EFB73C0767C4F9AE02.roa
File: 12032AE02EAC11EFB73C0767C4F9AE02.roa (raw, json)
Hash identifier: wyT3A7piAuRFJYSmj03a1CgN5dYY1alX8ULeMn9nACs=
Subject key identifier: AA:7F:4C:E6:F1:53:4D:A4:B1:D7:EC:B2:98:E4:AD:7E:B3:17:A8:4E
Certificate issuer: /CN=A91FA6FF/serialNumber=CAE3DB8ADEE7A16AB6CA537F2347B0205BDF4F76
Certificate serial: 016A
Authority key identifier: CA:E3:DB:8A:DE:E7:A1:6A:B6:CA:53:7F:23:47:B0:20:5B:DF:4F:76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/12032AE02EAC11EFB73C0767C4F9AE02.roa
Signing time: Fri 27 Mar 2026 04:40:58 +0000
ROA not before: Fri 27 Mar 2026 04:40:58 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 15830
IP address blocks: 2401:9f20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.crl
rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:41:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 362 (0x16a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA6FF, serialNumber=CAE3DB8ADEE7A16AB6CA537F2347B0205BDF4F76
Validity
Not Before: Mar 27 04:40:58 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69c60a5a-8947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c8:22:63:a6:ba:d6:ea:83:76:f2:78:64:ab:
84:71:ea:28:c3:a5:c0:29:c1:66:0f:bc:35:ea:78:
1d:d5:55:fe:85:6c:8f:77:e4:d3:9e:dc:02:be:74:
34:f7:53:f8:f5:d9:df:9b:f5:97:4a:97:87:09:73:
58:b7:76:1c:ff:77:07:60:b8:0e:0b:86:dc:8a:b2:
79:02:56:54:f9:93:2b:b8:cc:e4:f0:c6:8c:64:73:
bf:38:9c:61:f6:61:12:91:96:e4:55:b2:d3:38:e0:
53:29:aa:78:56:72:6b:d1:c5:75:c5:c3:e7:03:94:
74:27:a6:ec:7f:2f:12:03:0a:1f:74:7e:0a:cc:48:
cd:ea:de:e6:41:6a:7c:2b:c8:a6:ac:9f:c5:2c:29:
75:90:fc:16:9b:cc:c6:f8:a9:35:63:16:11:77:a1:
5d:c5:f4:00:ab:bf:86:2c:28:35:2e:65:c5:80:fb:
36:9a:c9:07:29:f2:59:79:5c:7d:d1:1b:c0:69:76:
f3:ef:ee:c2:ea:d2:4a:19:86:f8:3b:b5:df:11:18:
9b:af:c8:9d:b8:1f:5a:e9:c9:96:9c:58:fb:b8:05:
56:7f:35:bb:87:45:5c:4d:9d:db:61:f9:f2:2b:6e:
00:93:10:3f:aa:34:be:1e:58:af:f4:e2:4d:c1:2d:
1b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7F:4C:E6:F1:53:4D:A4:B1:D7:EC:B2:98:E4:AD:7E:B3:17:A8:4E
X509v3 Authority Key Identifier:
keyid:CA:E3:DB:8A:DE:E7:A1:6A:B6:CA:53:7F:23:47:B0:20:5B:DF:4F:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/12032AE02EAC11EFB73C0767C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:9f20::/32
Signature Algorithm: sha256WithRSAEncryption
b3:ae:f8:7f:0f:2a:72:18:21:6d:de:92:80:c5:ee:3e:22:24:
16:74:05:bf:42:5f:14:76:f9:a4:a5:99:8a:ee:48:a3:db:8a:
b3:3b:ff:2f:40:11:e8:d8:74:05:74:b4:94:9e:9d:d9:11:c0:
62:10:d6:ec:6a:2a:09:4a:bb:25:46:77:b9:12:2e:ec:c5:28:
46:6a:d6:9d:dd:3a:34:49:dc:27:37:93:67:a5:c6:44:19:dc:
d2:ab:bc:79:0f:2d:a8:aa:58:93:73:0e:1f:a4:68:fc:67:06:
7b:de:b4:1a:d8:f7:e8:3d:5e:92:e5:2c:78:30:82:b0:7a:98:
63:b5:cc:e4:10:b6:91:b0:b3:d0:a3:22:f6:41:41:a5:48:2b:
cb:79:07:c0:ed:4f:fe:71:3d:99:6b:b3:7f:85:b2:72:82:ce:
4e:4f:c8:10:77:9f:0e:6d:7b:9e:e6:7e:68:6b:24:92:1b:ad:
f8:16:28:3e:3c:02:3a:09:5a:0d:0a:25:3b:4e:7d:a9:8e:ef:
c2:27:aa:f7:0f:c4:78:70:0c:b7:bc:2e:00:a1:29:56:96:a6:
f5:48:df:3a:45:5a:b7:77:17:af:10:e9:1d:7c:38:b4:1f:3d:
11:50:c2:cf:08:b0:b4:4d:a8:3e:66:7f:fc:56:d1:ad:ac:99:
73:fa:6e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:08 2026 by rpki-client