
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/68979DAE337B11EA9A024941C4F9AE02.roa
File: 68979DAE337B11EA9A024941C4F9AE02.roa (raw, json)
Hash identifier: hx/XClGOxlPW04zDBJmjurX9BHlhYbmPzElIhNfYLOw=
Subject key identifier: 54:B5:1F:F9:24:69:E6:B2:62:53:5B:62:EC:BF:17:10:6B:0E:C6:35
Certificate issuer: /CN=A912A3E1/serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91
Certificate serial: 0D1E
Authority key identifier: F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/68979DAE337B11EA9A024941C4F9AE02.roa
Signing time: Mon 04 May 2026 18:22:31 +0000
ROA not before: Mon 04 May 2026 18:22:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24305
IP address blocks: 2405:b640::/32 maxlen: 32
2405:b640::/48 maxlen: 48
2405:b640:1::/48 maxlen: 48
2405:b640:2::/48 maxlen: 48
2405:b640:3::/48 maxlen: 48
2405:b640:4::/48 maxlen: 48
2405:b640:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl
rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:17:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3358 (0xd1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A3E1, serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91
Validity
Not Before: May 4 18:22:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f8e3e7-e0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b1:0b:9d:ce:83:14:a6:bc:89:e2:21:0f:8f:
c6:49:ba:12:06:04:80:18:2d:28:aa:bf:c3:eb:e9:
6a:55:4b:d0:c9:05:36:43:ac:40:7e:81:85:5f:fb:
09:e2:e3:0d:24:45:ff:87:60:44:b8:05:5b:3f:4b:
2a:00:2b:74:64:e3:40:80:5e:30:4f:8d:5a:90:f6:
c0:4f:18:9c:17:ad:d5:78:ed:45:d4:fe:49:4d:1e:
3e:eb:f8:90:c7:99:37:9a:54:f5:cc:00:b5:92:67:
c1:db:a5:79:62:91:de:c9:cd:3e:b0:97:4d:6a:08:
17:e6:32:18:cf:ff:64:3b:09:05:77:a2:85:74:9f:
22:89:bc:2d:61:b7:e9:4c:7b:fa:6d:b8:41:a3:dc:
ec:fc:72:56:09:66:ba:92:5e:02:4d:13:cc:2a:b7:
11:a5:27:05:32:b3:39:6a:99:f1:db:38:6b:07:99:
b3:97:73:3f:5f:81:be:09:8f:b3:70:7a:45:00:d7:
ba:91:7c:e5:2f:58:01:2b:ad:e8:f9:77:47:8c:f1:
84:50:e9:b9:95:f6:ce:72:dc:ed:d5:c6:8e:b5:d2:
56:b1:23:c5:25:5c:2e:29:70:8b:8c:8f:32:a8:ef:
86:55:a1:ba:28:0b:23:08:34:2a:ba:dc:5b:8e:2b:
f8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B5:1F:F9:24:69:E6:B2:62:53:5B:62:EC:BF:17:10:6B:0E:C6:35
X509v3 Authority Key Identifier:
keyid:F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/68979DAE337B11EA9A024941C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:b640::/32
Signature Algorithm: sha256WithRSAEncryption
50:d7:a0:5d:7c:2f:c8:50:96:55:98:a6:3c:b6:5e:ae:bc:1c:
3a:68:68:99:78:7c:69:c2:d6:f3:0d:ff:85:37:60:32:ac:45:
6c:ba:e8:69:d6:c0:c4:e5:ad:27:b3:11:57:98:e8:07:0b:d9:
25:f0:36:cb:b7:a8:4c:aa:e6:05:8a:9a:5b:1b:fd:50:ca:86:
2a:1b:69:73:94:89:76:c8:ed:0e:98:b4:af:f8:d6:a9:9d:d9:
8e:05:25:d4:d3:bf:d1:dd:a6:4e:01:9a:87:b0:28:55:e1:64:
ef:13:c6:1f:26:71:1d:62:aa:30:d2:ed:41:d4:35:4a:1a:c0:
1b:55:76:0f:2f:c2:1c:20:76:96:d4:09:71:75:54:62:38:ef:
fb:3f:77:0c:f7:5f:db:cb:37:e0:74:48:fd:78:3f:65:f0:57:
2a:d6:6b:ba:a7:86:9d:d1:f8:b3:b0:7a:c1:87:0e:a9:61:a5:
f9:ad:0a:e6:fe:36:2f:83:9f:df:c6:e8:01:19:58:ca:36:99:
45:72:fc:23:4c:b5:f9:6a:33:51:6e:9a:cd:9d:23:e1:53:98:
46:3c:6e:23:d5:4d:5f:67:27:a7:67:2d:4d:be:a8:91:e3:b2:
b1:21:f9:6f:a9:6b:0f:0b:51:e7:88:34:19:19:8d:cc:68:53:
d1:82:de:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:53:09 2026 by rpki-client