
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/68979DAE337B11EA9A024941C4F9AE02.roa
File: 68979DAE337B11EA9A024941C4F9AE02.roa (raw, json)
Hash identifier: 8bLZJXketyHNyOZYvif++95hPWy/xgg/vw5wwL+M8d4=
Subject key identifier: EE:1A:1B:45:D0:2E:48:EE:A5:97:4A:9C:BB:3E:91:EB:BD:9E:0A:ED
Certificate issuer: /CN=A912A3E1/serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91
Certificate serial: 0CF8
Authority key identifier: F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/68979DAE337B11EA9A024941C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:40:16 +0000
ROA not before: Wed 09 Jul 2025 04:23:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24305
IP address blocks: 2405:b640::/32 maxlen: 32
2405:b640::/48 maxlen: 48
2405:b640:1::/48 maxlen: 48
2405:b640:2::/48 maxlen: 48
2405:b640:3::/48 maxlen: 48
2405:b640:4::/48 maxlen: 48
2405:b640:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl
rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3320 (0xcf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A3E1, serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91
Validity
Not Before: Jul 9 04:23:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a425a0-226b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fd:74:71:04:75:ac:8a:8f:90:c6:e3:f7:b2:
ff:82:7e:bf:d9:9e:2c:0b:2f:eb:1e:be:83:e0:6f:
8c:ff:fe:30:76:f0:a2:ca:63:e7:aa:52:52:c6:89:
72:ed:a1:95:9f:31:a2:7c:9a:60:d5:85:18:f8:36:
39:cb:f4:04:11:67:88:95:f6:e1:95:c0:f2:2c:80:
48:7a:13:23:6a:ed:86:c2:29:9a:46:b1:ce:77:28:
14:08:14:a1:bd:05:0f:70:ae:76:9d:7f:2d:74:cc:
8f:e0:fc:ce:bd:37:7d:e5:a4:9e:ca:b4:cd:fc:86:
6d:48:75:41:ef:32:6e:d5:c3:95:bb:b4:0d:5d:1c:
55:af:ca:8b:16:00:f3:17:ca:ba:de:53:7c:39:67:
b1:18:36:6a:76:de:21:0f:0d:b8:bf:83:a6:ff:27:
e1:e8:b3:dc:09:82:45:fd:8f:9a:a6:af:18:6d:ec:
ac:76:e2:e2:16:67:12:f1:17:66:8d:f1:4d:90:83:
d4:52:da:58:ec:10:4b:86:6e:9f:0a:f6:98:e0:22:
0f:bd:4e:87:a5:69:78:fc:b2:ff:7d:0c:43:b2:d4:
55:39:ce:b2:3c:e1:06:88:fb:8a:f2:a6:89:a7:34:
01:90:2b:6c:ef:7b:bf:26:a2:16:fe:1c:7e:1c:67:
c1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1A:1B:45:D0:2E:48:EE:A5:97:4A:9C:BB:3E:91:EB:BD:9E:0A:ED
X509v3 Authority Key Identifier:
keyid:F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/68979DAE337B11EA9A024941C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:b640::/32
Signature Algorithm: sha256WithRSAEncryption
04:2a:3a:e5:6b:af:f0:e5:ba:37:d9:49:ac:6d:62:2c:fd:b1:
1f:cf:55:e6:09:05:94:dd:a1:2d:d7:31:f4:fd:eb:60:e3:7a:
34:91:3b:91:11:e1:79:5d:6d:88:00:e9:b9:8f:e2:0d:c7:d9:
ed:78:76:85:7f:13:01:e7:ee:20:58:6e:c8:fd:d5:12:a3:0a:
52:fe:43:43:d7:75:3e:89:62:23:fc:30:17:45:c5:72:4a:c3:
de:d3:68:b6:2e:5f:4f:2c:e4:b1:56:9e:8b:17:27:57:88:99:
b2:18:0c:41:30:4c:54:df:99:d0:6d:c7:bf:b9:d8:e7:2c:72:
0d:48:a5:08:fa:fc:97:62:a3:6e:e1:bc:85:04:4a:56:f1:dd:
f8:52:d6:73:cf:33:35:bb:5f:ec:be:4a:14:85:48:f1:f3:23:
94:6f:8b:4d:5c:d8:22:87:76:a4:2c:ff:e7:4b:69:bf:5f:a5:
38:be:a0:1d:a7:ee:4e:db:95:51:ad:07:0e:e3:89:c3:4d:7f:
42:43:b7:c8:0b:bd:2e:6e:88:4d:18:cc:48:20:f7:51:3f:51:
da:20:91:f6:96:b5:af:27:f9:a6:55:63:cd:91:17:de:9b:aa:
c9:99:cf:20:c9:00:7c:3e:89:c3:28:71:77:0a:67:10:65:bb:
8a:ad:08:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:26:35 2026 by rpki-client