
$ rpki-client -vvf rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/D922E45E468D11F0B5D0835EC4F9AE02.roa
File: D922E45E468D11F0B5D0835EC4F9AE02.roa (raw, json)
Hash identifier: HBHirPwIg8T3HMiSC7xRXD2o3Qo0xRqSAK0Lb8fw1XM=
Subject key identifier: FF:53:9E:62:E1:0E:68:EB:CC:88:F3:B2:EB:14:50:8F:4B:21:B5:DB
Certificate issuer: /CN=A911750B/serialNumber=3B8358535BC628564AF56F31D8758648E1D04304
Certificate serial: D4
Authority key identifier: 3B:83:58:53:5B:C6:28:56:4A:F5:6F:31:D8:75:86:48:E1:D0:43:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/D922E45E468D11F0B5D0835EC4F9AE02.roa
Signing time: Tue 21 Jul 2026 08:34:35 +0000
ROA not before: Tue 21 Jul 2026 08:34:35 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 151660
IP address blocks: 2402:1060::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl
rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911750B, serialNumber=3B8358535BC628564AF56F31D8758648E1D04304
Validity
Not Before: Jul 21 08:34:35 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a5f2f1b-76c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:3a:f7:72:d3:a9:3d:4b:d0:cd:7f:5f:93:
59:4f:81:9f:03:11:0d:03:b1:ba:ad:1e:35:eb:7d:
bd:42:f5:3e:9f:93:e5:55:e3:a4:70:45:69:3b:a2:
b2:a3:aa:ab:4a:6b:7b:fb:a8:e5:6e:cb:5f:a8:78:
ee:f8:13:6c:a7:d3:c3:a5:51:89:ed:0f:be:3e:97:
80:f0:a6:a8:6e:20:1b:9d:1f:bf:87:84:75:a0:68:
82:fd:9b:24:2b:1b:fc:c3:06:60:f4:5d:2d:17:64:
93:fe:be:69:d9:ab:4d:9d:dd:19:a2:d3:b4:be:9f:
8b:b9:0a:e8:fa:f3:4c:5d:2e:5f:dd:32:f3:4a:9c:
33:f1:f6:c9:b4:07:31:fe:22:0b:11:03:d9:44:54:
fd:48:f2:25:ca:f3:34:dc:3d:ec:ce:d4:72:9f:49:
95:79:f6:4b:f1:e3:da:30:ba:dc:30:90:54:df:22:
31:2c:cf:ec:51:38:fa:7c:ff:98:66:07:0e:54:ff:
c3:b0:ad:7f:10:6a:d6:8d:88:92:c6:b7:ed:ee:12:
f3:f7:a5:c6:60:39:6c:88:2d:a6:e3:a0:12:a7:d9:
bf:36:f4:2e:91:41:78:f5:c1:12:ac:50:2f:4b:f9:
bf:69:99:40:43:17:6d:d2:6b:75:47:a3:25:2e:d4:
c9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:53:9E:62:E1:0E:68:EB:CC:88:F3:B2:EB:14:50:8F:4B:21:B5:DB
X509v3 Authority Key Identifier:
keyid:3B:83:58:53:5B:C6:28:56:4A:F5:6F:31:D8:75:86:48:E1:D0:43:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/D922E45E468D11F0B5D0835EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:1060::/32
Signature Algorithm: sha256WithRSAEncryption
61:12:39:74:dc:51:14:55:1f:8c:7f:5c:9d:38:bf:0a:dd:26:
e1:fa:5c:fd:06:f0:44:98:e4:05:e0:b8:19:8a:cd:c6:a2:7b:
0b:58:15:0b:63:a1:86:2d:0f:c2:bf:cf:90:31:8a:36:27:14:
d8:11:78:74:fd:5d:4b:d7:4f:78:a8:dd:ee:c4:94:ce:40:da:
6f:96:8c:d6:b6:2e:07:5c:d6:97:d9:15:e1:13:70:73:66:2e:
a7:64:d5:ce:3e:66:b8:d2:63:f3:97:d6:14:64:52:55:51:4b:
b0:f5:6a:15:43:34:ef:ff:c4:80:18:67:31:27:61:28:ca:11:
88:d0:96:df:57:46:52:ed:e1:de:61:c6:c0:8b:50:a9:01:dc:
e5:34:0c:ff:ac:36:44:34:c5:d5:8c:11:b9:08:ba:d9:b8:03:
fc:3b:cb:b2:21:b1:e0:c3:a5:1c:1d:d7:14:69:17:a8:b6:12:
95:bf:35:fb:08:28:47:0b:99:6a:c2:3d:a9:37:64:43:d7:59:
ed:6c:97:5b:11:13:da:d6:90:d2:9b:8a:75:a3:eb:5d:57:6e:
4d:19:87:39:87:a7:85:35:25:1e:dd:19:4f:12:5a:15:ca:f3:
33:a1:4e:f8:fe:ed:7d:29:45:00:01:9b:ce:49:ea:68:17:77:
23:c3:77:cd
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTc1MEIxMTAvBgNVBAUTKDNCODM1ODUzNUJDNjI4NTY0QUY1NkYzMUQ4NzU4NjQ4
RTFEMDQzMDQwHhcNMjYwNzIxMDgzNDM1WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTVmMmYxYi03NmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuQk693LTqT1L0M1/X5NZT4GfAxENA7G6rR416329QvU+n5PlVeOkcEVpO6Ky
o6qrSmt7+6jlbstfqHju+BNsp9PDpVGJ7Q++PpeA8KaobiAbnR+/h4R1oGiC/Zsk
Kxv8wwZg9F0tF2ST/r5p2atNnd0ZotO0vp+LuQro+vNMXS5f3TLzSpwz8fbJtAcx
/iILEQPZRFT9SPIlyvM03D3sztRyn0mVefZL8ePaMLrcMJBU3yIxLM/sUTj6fP+Y
ZgcOVP/DsK1/EGrWjYiSxrft7hLz96XGYDlsiC2m46ASp9m/NvQukUF49cESrFAv
S/m/aZlAQxdt0mt1R6MlLtTJMwIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFP9TnmLh
DmjrzIjzsusUUI9LIbXbMB8GA1UdIwQYMBaAFDuDWFNbxihWSvVvMdh1hkjh0EME
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzUwQi82NEQwNzc0ODQ2
OEMxMUYwODRCNkE1MzlDNEY5QUUwMi9PNE5ZVTF2R0tGWks5Vzh4MkhXR1NPSFFR
d1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL080TllVMXZHS0ZaSzlXOHgySFdHU09IUVF3US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTc1MEIvNjREMDc3NDg0NjhDMTFGMDg0QjZBNTM5QzRGOUFFMDIvRDkyMkU0NUU0
NjhEMTFGMEI1RDA4MzVFQzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJAIQYDANBgkqhkiG9w0BAQsFAAOCAQEAYRI5dNxRFFUfjH9cnTi/
Ct0m4fpc/QbwRJjkBeC4GYrNxqJ7C1gVC2Ohhi0Pwr/PkDGKNicU2BF4dP1dS9dP
eKjd7sSUzkDab5aM1rYuB1zWl9kV4RNwc2Yup2TVzj5muNJj85fWFGRSVVFLsPVq
FUM07//EgBhnMSdhKMoRiNCW31dGUu3h3mHGwItQqQHc5TQM/6w2RDTF1YwRuQi6
2bgD/DvLsiGx4MOlHB3XFGkXqLYSlb81+wgoRwuZasI9qTdkQ9dZ7WyXWxET2taQ
0puKdaPrXVduTRmHOYenhTUlHt0ZTxJaFcrzM6FO+P7tfSlFAAGbzknqaBd3I8N3
zQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:56:04 2026 by rpki-client