
$ rpki-client -vvf rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/65009C2C081D11F19944049E323D8C67.roa
File: 65009C2C081D11F19944049E323D8C67.roa (raw, json)
Hash identifier: tE0/hZPJ/MXUNdrjbUTRpqb4i6ft44xl0fQQy9zLFzM=
Subject key identifier: CF:BC:C4:AA:FB:42:8E:64:44:D1:DE:BF:4F:B1:77:4B:76:AF:4F:60
Certificate issuer: /CN=A91126E7/serialNumber=8C5BC3DBEFD7D7E8642A8F8979EFB673F0E1F317
Certificate serial: 6E
Authority key identifier: 8C:5B:C3:DB:EF:D7:D7:E8:64:2A:8F:89:79:EF:B6:73:F0:E1:F3:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/65009C2C081D11F19944049E323D8C67.roa
Signing time: Sun 01 Mar 2026 17:44:44 +0000
ROA not before: Thu 12 Feb 2026 14:23:26 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 19905
IP address blocks: 2403:c580:fff3::/48 maxlen: 48
2403:c580:fffd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.crl
rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:17:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91126E7, serialNumber=8C5BC3DBEFD7D7E8642A8F8979EFB673F0E1F317
Validity
Not Before: Feb 12 14:23:26 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a47b0c-be94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:db:f4:1f:c6:cd:e9:6c:1d:4c:dc:d3:3e:96:
8b:bb:d7:93:c4:78:57:1c:97:8c:e0:fa:27:58:7d:
b4:9f:27:f5:70:88:a2:ee:6a:f9:79:7e:f2:69:1e:
66:a2:90:90:ab:3c:44:cd:7f:41:2b:f4:8a:ce:9c:
cd:0f:c5:4f:72:76:36:78:45:2b:c2:21:4e:a4:95:
b3:5f:41:ff:0b:1f:d1:e9:53:dd:b3:89:7b:70:7f:
39:77:b7:e9:de:81:47:ab:35:d2:fb:76:db:5e:28:
46:96:9b:f3:5d:5e:10:3c:61:18:f1:a9:81:9f:6d:
df:c7:ce:cf:b1:15:0f:20:a0:1f:ce:72:67:c6:e6:
f0:4c:c1:e1:20:de:2f:cb:1d:db:b7:f6:da:a3:d1:
5a:fb:7c:d4:23:21:1a:79:ba:36:1e:b6:ad:04:4a:
44:14:b2:f4:28:72:64:37:54:6e:7c:c8:05:3e:7b:
96:ed:f2:d4:6e:15:a1:98:bf:57:f8:da:5a:40:88:
64:95:47:f8:07:95:14:94:8c:72:43:9e:76:24:be:
c8:66:94:49:97:18:12:71:d0:63:0c:16:64:4a:52:
86:1c:03:72:03:4c:29:8f:06:32:ce:73:87:fc:da:
34:2d:1b:5c:c4:6c:ad:a6:9c:7b:c9:2c:18:89:d2:
8c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BC:C4:AA:FB:42:8E:64:44:D1:DE:BF:4F:B1:77:4B:76:AF:4F:60
X509v3 Authority Key Identifier:
keyid:8C:5B:C3:DB:EF:D7:D7:E8:64:2A:8F:89:79:EF:B6:73:F0:E1:F3:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/65009C2C081D11F19944049E323D8C67.roa
sbgp-ipAddrBlock: critical
IPv6:
2403:c580:fff3::/48
2403:c580:fffd::/48
Signature Algorithm: sha256WithRSAEncryption
3b:4c:8d:b6:15:80:cb:c4:b8:1e:83:8f:ac:11:e9:07:91:98:
4d:84:7b:8f:b0:c0:d6:7b:37:f3:74:57:a3:8d:f7:a0:17:41:
f8:be:b9:00:ce:db:fd:39:7d:6c:10:c7:f8:94:1c:b2:ed:49:
d1:b9:7d:53:20:20:f7:24:80:9b:48:81:dd:d8:71:cb:5b:de:
1e:e8:ee:c3:a0:40:ad:61:41:79:fb:3b:89:db:38:2e:99:69:
58:b1:a0:4f:0e:be:ad:a8:52:35:8c:58:57:50:8c:a0:95:cf:
ec:53:17:72:18:c3:09:94:a9:00:dc:90:48:18:d0:4b:57:a5:
49:3e:15:bc:ec:2f:e2:c4:a4:49:5e:9d:a3:95:94:25:24:2d:
3a:4a:9c:5f:b3:f5:df:ba:7f:1f:51:27:98:1f:74:fb:5b:6a:
be:71:55:b5:e1:f7:71:6b:ac:55:5d:f0:fe:ae:8c:fd:8b:cc:
ae:c9:d6:03:dd:df:bc:81:b0:48:7c:07:64:02:b2:80:6b:72:
f2:7a:f8:a5:0b:2c:52:3d:4c:d9:c0:8a:1f:c8:6e:bf:d0:c4:
10:98:5a:fc:b5:88:23:cc:f2:05:f4:af:82:e8:22:45:d9:db:
ba:7d:9a:29:a0:27:af:01:e5:79:ff:92:05:d8:6f:dd:b3:ca:
21:bc:d1:fb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
MjZFNzExMC8GA1UEBRMoOEM1QkMzREJFRkQ3RDdFODY0MkE4Rjg5NzlFRkI2NzNG
MEUxRjMxNzAeFw0yNjAyMTIxNDIzMjZaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTQ3YjBjLWJlOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDC2/Qfxs3pbB1M3NM+lou715PEeFccl4zg+idYfbSfJ/VwiKLuavl5fvJpHmai
kJCrPETNf0Er9IrOnM0PxU9ydjZ4RSvCIU6klbNfQf8LH9HpU92ziXtwfzl3t+ne
gUerNdL7dtteKEaWm/NdXhA8YRjxqYGfbd/Hzs+xFQ8goB/OcmfG5vBMweEg3i/L
Hdu39tqj0Vr7fNQjIRp5ujYetq0ESkQUsvQocmQ3VG58yAU+e5bt8tRuFaGYv1f4
2lpAiGSVR/gHlRSUjHJDnnYkvshmlEmXGBJx0GMMFmRKUoYcA3IDTCmPBjLOc4f8
2jQtG1zEbK2mnHvJLBiJ0ow5AgMBAAGjggJsMIICaDAdBgNVHQ4EFgQUz7zEqvtC
jmRE0d6/T7F3S3avT2AwHwYDVR0jBBgwFoAUjFvD2+/X1+hkKo+Jee+2c/Dh8xcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyNkU3L0FDQjVGNzQ2OURE
NDExRjBBNjlGQzYzRkM0RjlBRTAyL2pGdkQyLV9YMS1oa0tvLUplZS0yY19EaDh4
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvakZ2RDItX1gxLWhrS28tSmVlLTJjX0RoOHhjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MjZFNy9BQ0I1Rjc0NjlERDQxMUYwQTY5RkM2M0ZDNEY5QUUwMi82NTAwOUMyQzA4
MUQxMUYxOTk0NDA0OUUzMjNEOEM2Ny5yb2EwKwYIKwYBBQUHAQcBAf8EHDAaMBgE
AgACMBIDBwAkA8WA//MDBwAkA8WA//0wDQYJKoZIhvcNAQELBQADggEBADtMjbYV
gMvEuB6Dj6wR6QeRmE2Ee4+wwNZ7N/N0V6ON96AXQfi+uQDO2/05fWwQx/iUHLLt
SdG5fVMgIPckgJtIgd3Ycctb3h7o7sOgQK1hQXn7O4nbOC6ZaVixoE8Ovq2oUjWM
WFdQjKCVz+xTF3IYwwmUqQDckEgY0EtXpUk+FbzsL+LEpElenaOVlCUkLTpKnF+z
9d+6fx9RJ5gfdPtbar5xVbXh93FrrFVd8P6ujP2LzK7J1gPd37yBsEh8B2QCsoBr
cvJ6+KULLFI9TNnAih/Ibr/QxBCYWvy1iCPM8gX0r4LoIkXZ27p9mimgJ68B5Xn/
kgXYb92zyiG80fs=
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:03:15 2026 by rpki-client