
$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/1F740B32EEC611F0B6553517716F56BC.roa
File: 1F740B32EEC611F0B6553517716F56BC.roa (raw, json)
Hash identifier: gopwfSKGN1mCCHSx58qmeTC4uj/Dhy9G5y6duhNO4mg=
Subject key identifier: 7C:22:12:36:CF:10:B4:50:62:88:A6:1E:4B:C4:C8:C4:A3:F5:CD:5F
Certificate issuer: /CN=A911695A/serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A
Certificate serial: 3C
Authority key identifier: 94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/1F740B32EEC611F0B6553517716F56BC.roa
Signing time: Mon 02 Mar 2026 11:27:42 +0000
ROA not before: Sun 11 Jan 2026 08:18:35 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 20473
IP address blocks: 2001:df6:3e40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl
rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:37:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911695A, serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A
Validity
Not Before: Jan 11 08:18:35 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a5742e-05bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:68:5b:24:31:c6:5e:c1:09:58:36:24:db:1d:
53:d0:93:7b:67:e3:bf:f6:31:2b:43:4e:92:bf:e0:
06:3d:b9:2b:f5:c4:72:76:04:61:09:7a:55:00:34:
12:1a:07:32:e0:e9:db:9b:14:2c:58:23:27:08:a7:
47:5f:1b:db:04:3a:cf:e5:03:92:dc:bf:60:05:a7:
f7:2c:47:94:d0:5e:ba:52:b0:05:3b:78:ba:ef:0f:
5f:6d:06:20:43:89:24:0c:d2:2b:d3:30:4e:3a:26:
30:13:70:eb:20:7a:98:64:2b:04:f1:81:a4:49:c1:
43:a4:6e:53:ac:0e:26:1a:b0:3b:11:59:16:c4:9a:
89:20:ee:a1:72:a5:e1:e4:9c:73:af:68:6e:e6:64:
9d:12:d3:fb:73:27:ea:0c:12:6c:d7:4a:c1:1d:95:
4e:ef:ca:7a:78:64:db:f1:73:91:f5:58:8b:38:31:
ba:b9:10:93:24:f4:0e:ac:13:64:55:f1:70:93:33:
05:04:07:9e:19:58:73:a7:43:50:70:9f:c9:0d:2e:
6f:b7:ae:df:3e:89:c0:c5:0e:7b:80:23:75:82:d8:
17:c5:ec:df:9c:36:1e:0a:95:d9:24:15:52:71:bd:
8a:9d:63:b8:96:ee:e1:60:f7:42:e8:89:01:fb:22:
68:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:22:12:36:CF:10:B4:50:62:88:A6:1E:4B:C4:C8:C4:A3:F5:CD:5F
X509v3 Authority Key Identifier:
keyid:94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/1F740B32EEC611F0B6553517716F56BC.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:3e40::/48
Signature Algorithm: sha256WithRSAEncryption
3f:0b:75:27:d2:76:0f:48:20:dc:1b:36:d0:e0:a8:ae:84:9a:
c3:06:6f:03:c1:00:3d:d4:bf:bb:a9:0d:52:b7:c0:2d:53:94:
b4:e3:86:13:f6:8b:f2:25:68:86:e3:83:c4:94:09:74:e4:d5:
9c:ba:ba:16:74:a1:a7:6a:b8:30:69:ce:d6:cf:6f:76:aa:a7:
b0:f6:06:51:c3:44:b3:b6:d1:ce:47:d2:01:8b:ba:2a:56:2f:
bf:a2:38:42:b4:90:3a:c8:2c:db:9e:08:6e:19:3d:0b:1d:8e:
ce:79:8d:05:41:64:1e:e8:ca:61:8b:78:c9:98:ba:10:cb:3d:
bd:ff:cb:84:57:5b:4b:2e:51:04:cd:86:cb:fe:66:e4:c7:6a:
1d:83:ed:af:ac:7e:7c:07:7a:68:13:3b:60:ae:fa:b9:ff:5e:
03:21:ad:7e:16:e3:6f:18:de:16:e0:9b:d9:e9:db:9b:09:a1:
3f:e3:16:69:2a:46:98:ee:bd:ed:4c:1c:a9:33:38:37:1b:a8:
37:12:69:93:ef:63:6d:c1:0b:8f:ea:68:ae:ac:87:15:f7:3f:
81:21:1c:c0:d5:11:29:b7:3e:31:d7:d6:21:34:57:8f:3e:f7:
0c:54:94:f7:2b:3a:4d:10:fc:3d:ac:c2:de:65:4b:d9:c6:b7:
f2:0c:a5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:14:41 2026 by rpki-client