
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/E6721B6E908211EFAC47F726C4F9AE02.roa
File: E6721B6E908211EFAC47F726C4F9AE02.roa (raw, json)
Hash identifier: TCFGjEUbtbknbQBN59Hok85NaQ19/9rM/pLnuqPupHo=
Subject key identifier: CB:A5:8D:BF:C0:37:2C:AA:FA:B9:5C:62:AF:BF:CC:35:E2:2B:2D:F9
Certificate issuer: /CN=A911F5C7/serialNumber=D550470613936D7D47B7197AB5256FA06E0BDC11
Certificate serial: 0109
Authority key identifier: D5:50:47:06:13:93:6D:7D:47:B7:19:7A:B5:25:6F:A0:6E:0B:DC:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VBHBhOTbX1Htxl6tSVvoG4L3BE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/E6721B6E908211EFAC47F726C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:00:08 +0000
ROA not before: Wed 01 Oct 2025 07:05:37 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 135103
IP address blocks: 2001:df4:75c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.crl
rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VBHBhOTbX1Htxl6tSVvoG4L3BE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:12:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265 (0x109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F5C7, serialNumber=D550470613936D7D47B7197AB5256FA06E0BDC11
Validity
Not Before: Oct 1 07:05:37 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a589d8-1a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3b:03:ca:cc:98:76:66:0c:06:e2:d9:a7:5a:
50:13:ce:5e:d9:7e:fa:1a:ce:29:2c:49:dc:d4:17:
77:4f:ba:cb:1f:32:2c:9f:b3:27:34:68:de:b6:7c:
dc:0a:a7:69:bb:b4:38:3e:a7:a4:fb:30:14:b0:37:
0a:ac:aa:b4:cc:15:7f:b9:1b:90:96:04:aa:74:6f:
6d:bd:ee:c2:78:20:4d:b2:a8:ad:08:fa:e9:ee:71:
ac:b8:bf:35:22:14:11:e8:1b:40:c4:1e:cf:2a:7b:
73:fe:36:9c:14:73:0d:2c:53:6a:ab:3f:ab:1e:6c:
96:18:09:00:1b:1a:c9:6b:30:be:a9:07:29:64:33:
7d:49:19:fc:d9:3b:14:da:a7:88:f7:8a:f3:c3:d8:
3f:4e:e2:6c:a7:77:5f:b6:b2:e9:f6:75:87:fb:a6:
09:79:a0:5b:ee:4e:d5:ef:4f:57:13:c2:62:ab:56:
a6:d3:50:53:00:73:18:62:c8:46:90:79:8d:9d:65:
f8:45:39:e6:54:b6:59:fb:7d:31:5d:63:19:63:82:
65:8b:48:e4:15:cb:81:90:ed:4a:48:02:a3:2d:7c:
b6:f9:4f:a7:ab:8d:f2:40:f0:0a:1e:4c:43:ae:20:
09:5f:6e:4a:50:1e:3e:9d:2a:e0:ed:b1:23:64:46:
23:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A5:8D:BF:C0:37:2C:AA:FA:B9:5C:62:AF:BF:CC:35:E2:2B:2D:F9
X509v3 Authority Key Identifier:
keyid:D5:50:47:06:13:93:6D:7D:47:B7:19:7A:B5:25:6F:A0:6E:0B:DC:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VBHBhOTbX1Htxl6tSVvoG4L3BE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/E6721B6E908211EFAC47F726C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:75c0::/48
Signature Algorithm: sha256WithRSAEncryption
61:36:a3:06:99:c8:f8:d1:8a:e5:67:7b:1f:ea:71:bf:3f:9e:
69:d4:b7:42:30:96:e4:ad:00:4f:cf:75:cb:6e:1a:f9:7f:46:
12:8d:88:e5:f5:e6:0e:2e:68:2a:b6:b9:d9:a0:ca:14:04:c8:
6b:ef:1a:74:04:1f:5b:af:2a:cb:eb:34:c4:bf:cc:9a:69:36:
79:f6:d6:5a:28:00:7c:9f:32:4f:dd:6e:12:5d:19:37:79:8a:
52:f0:43:20:e8:80:7e:7b:d1:27:0a:db:92:be:08:63:c6:84:
51:ad:a5:03:f2:01:c7:ba:c7:0a:77:db:16:1f:19:b7:97:da:
d5:8c:d7:3a:5c:fa:41:e1:30:60:1a:9d:df:cb:1a:17:b0:62:
08:28:4f:a7:be:9c:bf:11:cd:b2:2f:39:65:f3:b8:70:b6:1b:
30:c5:34:a2:c8:0e:90:be:09:5a:45:6b:a6:67:08:37:aa:52:
e7:6d:7b:12:92:db:85:44:28:69:ba:0d:9d:b1:c9:5b:e8:27:
16:89:70:9a:6f:b5:bd:7a:ac:c4:96:0e:01:98:13:b0:85:65:
0c:0a:37:0e:af:73:8d:03:42:ca:36:8b:32:68:65:3c:b4:4e:
35:d3:22:71:95:48:7d:b9:b6:69:7e:72:36:61:a3:7f:e8:b3:
3c:f5:1b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:31:57 2026 by rpki-client