
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/0DFFB0D2989111EEB7938523C4F9AE02.roa
File: 0DFFB0D2989111EEB7938523C4F9AE02.roa (raw, json)
Hash identifier: ARuPA5StUqswZMj5Q2BXw5Z0iKJJC2awoPAkKPCdInM=
Subject key identifier: CF:03:43:72:17:9B:B3:DB:2B:F7:D1:13:07:DC:1F:51:34:92:6B:1F
Certificate issuer: /CN=A9144261/serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B
Certificate serial: 01B6
Authority key identifier: CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/0DFFB0D2989111EEB7938523C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:05:57 +0000
ROA not before: Tue 27 Jan 2026 03:22:43 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 9664
IP address blocks: 2001:df3:3fc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl
rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:17:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438 (0x1b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144261, serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B
Validity
Not Before: Jan 27 03:22:43 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a439b5-54c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b8:15:b2:38:75:92:1c:ce:9f:12:f0:35:f9:
90:ae:86:e4:d4:4e:a2:32:71:a4:53:f1:ec:de:2a:
c5:33:5d:f4:43:a1:79:ab:85:b1:cc:2a:f6:f7:3e:
14:10:1c:19:cc:a9:2f:6f:93:71:15:69:f1:9f:14:
a2:dd:66:f3:3a:b7:79:91:40:ef:f2:92:3a:74:38:
8c:6c:01:71:b8:ca:38:ff:9b:1b:b0:6b:e9:c6:8a:
44:8d:37:a0:c9:0d:b5:1b:75:09:b0:00:72:bd:68:
b8:ab:84:ae:c3:da:f8:9c:cc:eb:2d:dd:06:d6:bb:
6d:45:80:9e:68:f2:24:41:27:f7:75:b0:02:5e:e1:
0c:de:52:4c:65:e7:b8:8f:bf:10:5a:fc:12:34:b0:
43:60:7b:17:c0:da:af:e2:21:cd:9b:16:c4:a2:a0:
87:85:78:1f:c9:aa:a5:bc:c1:f7:e8:2c:f1:27:69:
ad:78:bd:28:23:dc:6c:ad:e6:f3:a9:fd:a8:83:81:
9d:fa:43:1e:31:8d:3d:3a:6d:5a:a0:37:8b:28:cb:
a3:71:eb:d3:81:c7:cc:9a:25:2a:7e:44:96:ac:ea:
f8:c7:1d:3e:92:92:11:d5:b4:02:6f:a8:dc:50:c2:
82:f7:ab:16:a0:cb:84:b9:e7:c9:3e:e1:4c:c5:91:
33:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:03:43:72:17:9B:B3:DB:2B:F7:D1:13:07:DC:1F:51:34:92:6B:1F
X509v3 Authority Key Identifier:
keyid:CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/0DFFB0D2989111EEB7938523C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:3fc0::/48
Signature Algorithm: sha256WithRSAEncryption
ba:15:c1:76:88:a3:12:84:5c:f7:f2:f8:cf:c0:44:28:b8:62:
cf:6b:7c:d8:ae:10:16:90:e3:f1:10:0e:b7:4b:21:0e:8b:1a:
e2:bd:8b:33:35:74:43:d8:dd:0d:73:5f:2e:8e:13:4d:9a:12:
85:fc:02:9f:b6:e3:60:89:05:16:9f:9e:f4:3d:f4:54:4a:37:
85:07:3e:fd:ba:cc:69:8a:fd:5a:18:27:5d:b8:99:bd:72:54:
70:e5:43:8d:b4:5a:8d:c7:7f:db:47:0a:ff:2b:e0:37:d1:c0:
11:d1:b3:a2:3f:ab:0c:cd:9f:50:9b:22:05:20:37:a9:98:bd:
5a:74:db:dc:a7:77:f2:0c:5d:5e:6b:02:e8:90:b4:e4:7d:29:
7a:c7:d2:76:e3:2a:3a:ec:e7:b4:8f:42:76:35:63:e7:55:25:
fa:68:cf:f6:0e:30:45:a7:25:c1:d5:57:ab:22:b2:85:8f:b6:
3b:01:53:ed:f4:d7:1d:80:a3:0e:a1:15:12:a8:8c:9e:b1:80:
6b:dd:dd:fd:4a:97:c1:db:3f:a2:c8:5b:9b:ec:2e:ee:c5:2b:
06:82:71:aa:bb:73:21:ce:2a:65:ad:27:97:a4:48:63:bc:ac:
79:6e:65:53:e2:60:b5:ee:6b:a0:53:fe:c9:d7:31:39:ee:2f:
f4:c6:2b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:48:17 2026 by rpki-client