
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/F2DF64BAD28511F0A20E5C80C4F9AE02.roa
File: F2DF64BAD28511F0A20E5C80C4F9AE02.roa (raw, json)
Hash identifier: XjB5jPSTt3eJTKS4dRa9T7cx4SalbQsD8ABjmrgjNZA=
Subject key identifier: F1:14:A8:E9:C1:A5:0E:3C:18:54:4F:A1:36:DC:64:31:D9:75:17:19
Certificate issuer: /CN=A912E87E/serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D
Certificate serial: 0106
Authority key identifier: CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/F2DF64BAD28511F0A20E5C80C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:11:33 +0000
ROA not before: Sat 06 Dec 2025 09:28:39 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 152698
IP address blocks: 2001:df4:8441::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl
rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:20:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262 (0x106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E87E, serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D
Validity
Not Before: Dec 6 09:28:39 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a59a95-5942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c3:b4:40:a9:42:bb:d6:76:27:38:d7:e7:73:
b7:2a:51:76:58:b6:c0:92:96:db:c2:97:76:fd:c9:
ae:55:3e:39:5a:81:00:34:5f:c8:1a:55:5b:aa:6b:
57:f2:ce:0d:24:9b:36:aa:e2:59:3d:d3:c3:42:ef:
e5:3b:81:0f:dc:24:fd:71:2b:8b:63:d9:ce:de:b6:
6a:58:9b:27:82:f2:81:0a:69:e5:e3:6c:60:d4:35:
c7:6b:a2:29:37:22:9d:ad:00:be:42:00:19:02:ae:
51:34:d2:8b:2c:55:0d:82:a5:4f:1c:3b:8e:2b:c6:
26:26:bc:09:7c:2c:93:e2:14:ef:87:ac:7e:4a:40:
81:73:b9:e3:f4:7d:47:94:12:1e:00:5b:3f:0a:15:
96:8a:8c:86:60:79:d9:e4:c2:03:0b:51:67:0d:f2:
fa:5d:28:9c:ec:45:a5:1a:85:8d:f1:9b:52:5d:45:
8f:6c:79:09:c1:b5:29:8b:cd:f0:0e:ae:6f:3b:09:
fb:0a:3a:5a:a2:73:aa:17:13:fa:9f:fb:fc:47:94:
d5:c6:8c:15:a2:9e:43:78:fe:03:7c:21:5c:2e:39:
0c:32:cd:98:6f:a7:8b:a7:cf:89:18:fd:5c:90:8f:
61:a6:6a:31:b2:8d:e2:af:19:fe:96:58:17:8d:46:
19:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:14:A8:E9:C1:A5:0E:3C:18:54:4F:A1:36:DC:64:31:D9:75:17:19
X509v3 Authority Key Identifier:
keyid:CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/F2DF64BAD28511F0A20E5C80C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:8441::/48
Signature Algorithm: sha256WithRSAEncryption
a0:bf:ef:f2:23:92:a0:12:d1:81:a3:7d:b5:48:c7:40:73:7b:
0d:eb:05:55:2d:60:a4:45:cd:52:7e:cb:e4:03:49:65:60:74:
d4:7c:5a:e7:c7:17:c9:fc:a8:5f:e9:25:77:17:bd:a1:83:29:
d0:37:e2:8d:d6:a9:73:ae:53:35:8e:a6:8c:b2:80:80:84:46:
09:4c:88:21:54:a6:87:c4:5c:9e:3f:87:53:48:8c:3d:60:91:
77:06:d6:00:14:3f:57:8f:ee:97:2d:25:59:48:74:cd:3f:ef:
1e:57:c2:c7:c9:bd:cc:01:5c:8a:fb:26:5e:ae:a0:41:50:7a:
93:63:32:4b:02:6a:fc:6d:c7:e8:48:b4:1e:73:a4:4c:8d:a2:
f9:ea:30:82:2f:fa:db:bc:93:13:10:e4:19:6e:bf:d9:f9:af:
fe:59:f8:34:a6:67:a7:a4:4b:94:e4:89:e2:40:c2:3e:37:6a:
da:ae:dd:8a:84:e5:09:8a:74:2a:06:c3:85:fd:15:e5:66:21:
82:61:f7:ba:e4:ba:75:e2:44:2b:15:c3:56:8c:ca:e7:0e:35:
e0:c2:bb:71:16:8e:cb:3c:c2:81:ef:b1:e0:13:d9:1c:04:a9:
88:a3:80:3b:a8:a1:b5:fc:bc:63:c9:0b:12:ed:26:18:5a:48:
c7:e1:4a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:07:44 2026 by rpki-client