
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/D5D88D8CA78811F185D54B974311F970.roa
File: D5D88D8CA78811F185D54B974311F970.roa (raw, json)
Hash identifier: i04Fzf26OB6qpqfRvq02G3AlyUuzOaLJ4XIrh5XGTvA=
Subject key identifier: 17:40:EA:74:D5:7E:B0:57:2C:B0:94:A5:69:03:1A:D4:BD:96:A8:2F
Certificate issuer: /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
Certificate serial: 0E66
Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/D5D88D8CA78811F185D54B974311F970.roa
Signing time: Thu 03 Sep 2026 11:15:57 +0000
ROA not before: Thu 03 Sep 2026 11:15:57 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 149638
IP address blocks: 2401:1040:401::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl
rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 17:49:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3686 (0xe66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DC44, serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
Validity
Not Before: Sep 3 11:15:57 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a9956ed-3d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:33:f0:5b:0f:16:59:3f:95:01:10:0e:04:b0:
ab:e9:f1:1c:3a:31:b3:d4:02:be:9c:1c:51:4a:70:
31:2d:d2:c4:41:4e:19:53:8d:b5:45:ce:45:f1:97:
71:80:da:03:f3:b4:86:8a:ff:a6:bd:e2:ec:10:72:
b9:19:c7:c4:71:62:90:bb:c8:78:ca:70:9d:56:79:
bb:a5:8e:28:a5:16:9e:ce:c0:5b:2e:e5:90:ae:d6:
0a:fc:61:0b:8a:ec:50:da:2e:d6:51:6c:14:71:0d:
e5:62:f3:01:a4:8c:1c:05:a3:70:ae:58:23:78:70:
5d:63:c5:56:d5:fb:05:a3:7c:ec:d7:72:13:24:fd:
45:2d:8d:30:63:84:75:17:24:64:5f:30:d0:81:67:
36:23:b4:56:d0:cf:05:dc:18:0b:6f:bb:a8:bf:1f:
54:79:10:0f:bc:fd:4e:6e:df:93:c2:9d:39:81:80:
bb:73:c2:8c:54:1d:21:45:d3:e0:14:06:b8:3a:2d:
22:8e:26:44:8c:07:50:d7:33:79:4a:3f:fb:20:ff:
89:e4:39:cb:6b:21:89:30:6d:c8:0c:8c:07:99:3c:
49:b2:48:1e:98:b9:db:44:6e:99:ee:23:5d:a9:08:
fc:fa:58:b8:2a:1c:43:4a:a5:b0:bf:75:52:bf:ef:
20:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:40:EA:74:D5:7E:B0:57:2C:B0:94:A5:69:03:1A:D4:BD:96:A8:2F
X509v3 Authority Key Identifier:
keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/D5D88D8CA78811F185D54B974311F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:1040:401::/48
Signature Algorithm: sha256WithRSAEncryption
2d:25:c6:d6:80:f7:85:e6:73:3a:24:78:01:53:83:c8:25:3a:
77:de:97:96:bd:9c:ef:fd:5d:a9:0b:35:e7:b9:d7:40:fe:1d:
de:1e:7f:02:cb:1f:b1:a9:20:cf:07:6b:08:63:35:44:7d:8a:
88:f5:cc:0b:82:35:8b:03:80:27:d1:83:96:8e:7f:32:c9:b3:
09:89:58:d4:29:fe:3b:e5:9f:61:25:58:f5:d5:e5:0c:7c:ed:
3d:ae:da:87:2a:ba:96:fb:ae:a9:89:be:ce:7c:33:c8:05:59:
e4:7b:09:27:68:72:89:e2:e3:42:64:b9:55:ce:01:f2:04:d5:
70:e5:3b:0d:57:2d:4a:cb:94:fb:f5:dd:af:e1:d1:2e:7f:90:
e3:a0:f1:ad:ec:25:b1:73:6b:c6:0f:eb:a9:94:5b:28:94:ef:
7d:64:7f:fd:45:22:bd:d8:2c:05:e4:05:11:fb:d0:7c:6b:40:
10:d7:9d:70:fb:69:47:c2:86:92:7e:ef:e5:de:ea:a3:eb:1f:
46:0f:44:20:7d:47:a9:b7:92:d4:25:1d:43:9d:0e:15:f4:57:
58:1b:25:98:14:ab:53:16:45:fc:eb:0d:a2:a3:e0:e8:f1:7a:
41:5b:cb:25:0b:4e:03:8c:18:c4:5f:13:06:2d:33:5e:73:1f:
0e:93:91:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:49:30 2026 by rpki-client