
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/FFD0154CC51111F081EB9984C4F9AE02.roa
File: FFD0154CC51111F081EB9984C4F9AE02.roa (raw, json)
Hash identifier: s9ovKXk6i7U35KNY19JGw8V3ccjwmwtWthKx7l0Dc6c=
Subject key identifier: BA:41:FC:F8:A1:47:54:91:EE:5F:FB:90:09:0B:3C:27:24:E0:70:FF
Certificate issuer: /CN=A91FDC84/serialNumber=377E4F5861E6D801D6871F86C941F58708FAF3B5
Certificate serial: 36
Authority key identifier: 37:7E:4F:58:61:E6:D8:01:D6:87:1F:86:C9:41:F5:87:08:FA:F3:B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N35PWGHm2AHWhx-GyUH1hwj687U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/FFD0154CC51111F081EB9984C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:00:05 +0000
ROA not before: Wed 19 Nov 2025 06:35:54 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 154377
IP address blocks: 2001:df6:5640::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.crl
rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N35PWGHm2AHWhx-GyUH1hwj687U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDC84, serialNumber=377E4F5861E6D801D6871F86C941F58708FAF3B5
Validity
Not Before: Nov 19 06:35:54 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a3d5e5-2785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f1:6a:77:4a:b3:3b:76:f6:e0:01:09:36:70:
b9:10:36:d9:63:24:aa:22:b9:78:d4:62:d8:2b:f0:
27:4f:21:00:b0:4d:3e:af:ef:fe:0a:fb:ba:eb:08:
1b:40:4b:82:34:10:71:da:8c:2c:9b:74:cb:14:d3:
a5:ce:f0:c2:c3:af:55:2c:ed:86:99:57:24:ff:8e:
69:31:3d:41:17:10:a9:42:d5:cc:1b:51:64:27:de:
32:e7:26:cd:e4:e1:c9:38:68:d8:b1:42:d9:3b:6f:
2a:cd:cd:18:7a:82:7c:07:69:9e:57:28:3e:15:5d:
6a:dd:36:e8:e3:95:30:54:6c:e6:d6:f5:8b:e0:e3:
dc:f2:e0:4c:3a:81:dc:19:bd:63:7f:49:bb:aa:96:
22:ca:99:bc:87:25:15:80:f4:cc:a9:a5:7e:a1:13:
89:f4:9a:31:6f:80:e7:b0:ad:a9:b5:84:67:12:a3:
62:1d:42:4d:4c:69:ff:df:c9:a0:87:1f:7a:b5:2b:
9f:58:14:59:34:64:8b:1a:b8:96:13:65:83:9d:9a:
f8:d1:01:10:fb:6e:70:28:03:08:b8:34:70:18:13:
24:32:b0:1e:68:62:2c:d9:b5:56:7e:4d:8d:ff:1e:
30:bc:b9:61:28:d9:56:ae:dd:00:c9:5f:78:69:31:
96:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:41:FC:F8:A1:47:54:91:EE:5F:FB:90:09:0B:3C:27:24:E0:70:FF
X509v3 Authority Key Identifier:
keyid:37:7E:4F:58:61:E6:D8:01:D6:87:1F:86:C9:41:F5:87:08:FA:F3:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N35PWGHm2AHWhx-GyUH1hwj687U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/FFD0154CC51111F081EB9984C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:5640::/48
Signature Algorithm: sha256WithRSAEncryption
85:36:3e:9f:97:61:d4:6a:86:51:50:06:28:f6:ec:ea:7d:1f:
e9:42:36:9f:b3:d3:bd:e4:d2:30:d3:02:b0:10:02:c1:af:3a:
f1:fa:4b:7b:a6:20:1b:92:0a:5d:02:66:65:89:3f:dd:a0:d6:
ee:25:a5:d4:74:be:10:2b:54:39:b5:e0:92:b8:df:12:0b:ad:
fa:69:88:7f:f9:69:8c:ed:02:cb:82:df:f4:b1:19:09:b8:70:
0d:e0:e2:6d:c1:fc:62:2f:09:bb:7a:4e:80:7e:4f:a8:2e:f1:
34:fd:84:4c:bc:d9:a0:89:d8:eb:27:be:f7:fc:04:e9:61:3a:
fc:60:15:9d:56:77:af:14:e8:26:6b:94:68:ac:4a:9a:dd:3c:
18:1c:2d:3c:e9:5a:88:42:ba:f1:d2:e3:14:7a:47:28:19:05:
fa:12:f3:83:10:03:4a:67:ed:7b:e2:a5:9f:2e:13:91:75:bc:
fc:c1:60:52:8c:d1:5a:c6:5c:e6:0b:65:64:b5:84:f9:25:1a:
d9:b6:de:69:a0:1c:48:15:15:03:e6:03:5e:65:89:92:eb:2f:
44:57:35:63:ec:72:47:37:e6:08:3c:31:df:59:67:9c:63:25:
82:9c:59:8b:24:68:c5:6c:de:cd:6f:e1:a3:b5:7a:26:c9:45:
9d:3d:8d:6c
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
REM4NDExMC8GA1UEBRMoMzc3RTRGNTg2MUU2RDgwMUQ2ODcxRjg2Qzk0MUY1ODcw
OEZBRjNCNTAeFw0yNTExMTkwNjM1NTRaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNkNWU1LTI3ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+8Wp3SrM7dvbgAQk2cLkQNtljJKoiuXjUYtgr8CdPIQCwTT6v7/4K+7rrCBtA
S4I0EHHajCybdMsU06XO8MLDr1Us7YaZVyT/jmkxPUEXEKlC1cwbUWQn3jLnJs3k
4ck4aNixQtk7byrNzRh6gnwHaZ5XKD4VXWrdNujjlTBUbObW9Yvg49zy4Ew6gdwZ
vWN/SbuqliLKmbyHJRWA9MyppX6hE4n0mjFvgOewram1hGcSo2IdQk1Maf/fyaCH
H3q1K59YFFk0ZIsauJYTZYOdmvjRARD7bnAoAwi4NHAYEyQysB5oYizZtVZ+TY3/
HjC8uWEo2Vau3QDJX3hpMZZfAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUukH8+KFH
VJHuX/uQCQs8JyTgcP8wHwYDVR0jBBgwFoAUN35PWGHm2AHWhx+GyUH1hwj687Uw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEQzg0L0U4RUFDQUU0QzUx
MDExRjA4OTA4Qjc1RkM0RjlBRTAyL04zNVBXR0htMkFIV2h4LUd5VUgxaHdqNjg3
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTjM1UFdHSG0yQUhXaHgtR3lVSDFod2o2ODdVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
REM4NC9FOEVBQ0FFNEM1MTAxMUYwODkwOEI3NUZDNEY5QUUwMi9GRkQwMTU0Q0M1
MTExMUYwODFFQjk5ODRDNEY5QUUwMi5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAgAQ32VkAwDQYJKoZIhvcNAQELBQADggEBAIU2Pp+XYdRqhlFQBij2
7Op9H+lCNp+z073k0jDTArAQAsGvOvH6S3umIBuSCl0CZmWJP92g1u4lpdR0vhAr
VDm14JK43xILrfppiH/5aYztAsuC3/SxGQm4cA3g4m3B/GIvCbt6ToB+T6gu8TT9
hEy82aCJ2Osnvvf8BOlhOvxgFZ1Wd68U6CZrlGisSprdPBgcLTzpWohCuvHS4xR6
RygZBfoS84MQA0pn7XvipZ8uE5F1vPzBYFKM0VrGXOYLZWS1hPklGtm23mmgHEgV
FQPmA15liZLrL0RXNWPsckc35gg8Md9ZZ5xjJYKcWYskaMVs3s1v4aO1eibJRZ09
jWw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:41:27 2026 by rpki-client