
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/A1F2E73A19D511EF85D48428C4F9AE02.roa
File: A1F2E73A19D511EF85D48428C4F9AE02.roa (raw, json)
Hash identifier: Tp9AbDgfK/vxHv0T8EocR+zLaLvDS9XrhEaYG7pj/74=
Subject key identifier: 4C:6A:D8:7D:F2:FB:76:B4:CE:7E:8C:48:11:8C:E4:68:95:E6:B8:A7
Certificate issuer: /CN=A9149F48/serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79
Certificate serial: 0748
Authority key identifier: 00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/A1F2E73A19D511EF85D48428C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:12:11 +0000
ROA not before: Thu 26 Feb 2026 22:18:43 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 141726
IP address blocks: 2407:1d40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl
rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 21:38:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1864 (0x748)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F48, serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79
Validity
Not Before: Feb 26 22:18:43 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69a4655b-85a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:81:10:8e:c2:07:e2:8b:e1:b9:77:64:55:c0:
d5:cd:0e:85:a4:76:a9:39:ab:fa:50:f1:95:f3:2d:
59:bd:eb:1e:e7:a6:b3:15:89:2b:b2:b1:dd:45:88:
b6:c1:9c:4e:3b:d6:a9:a9:e5:33:65:c3:10:81:ed:
12:c0:27:2f:59:e8:4e:ee:93:36:e7:2f:bb:b0:14:
ea:b5:59:1b:67:25:41:ba:b0:84:f3:69:33:82:f4:
0d:88:0d:63:42:41:b1:72:f6:7c:69:47:3f:04:a4:
14:5a:a5:da:6f:86:73:cb:ec:af:f0:c6:01:a9:47:
c3:87:51:e0:a0:11:a2:af:ab:e2:d2:eb:42:b8:86:
1a:32:22:36:7b:3d:2c:1d:56:41:4a:3f:42:70:78:
fe:83:ed:31:a6:53:48:d3:40:03:de:e3:04:9c:1b:
fd:65:a6:49:b2:60:41:51:41:c9:48:3a:26:27:dd:
2b:49:22:8d:e8:ad:6b:aa:b1:60:01:79:d2:b2:65:
42:40:40:da:1a:e6:21:f9:6d:2d:4b:16:0d:85:a0:
de:02:37:45:47:c2:e0:b9:33:cb:52:8a:2d:eb:6c:
5e:91:1b:de:c8:9d:bf:94:f5:ab:c8:aa:1b:85:24:
3c:c7:b8:38:cd:06:17:45:ca:e4:7e:0d:cb:bb:62:
95:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6A:D8:7D:F2:FB:76:B4:CE:7E:8C:48:11:8C:E4:68:95:E6:B8:A7
X509v3 Authority Key Identifier:
keyid:00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/A1F2E73A19D511EF85D48428C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2407:1d40::/48
Signature Algorithm: sha256WithRSAEncryption
a0:36:15:1e:47:e1:a4:03:cd:8c:5a:2a:73:b2:f7:a1:39:94:
cf:7b:f3:22:9b:71:1a:c0:66:4f:76:38:d5:ab:6f:ce:ca:8c:
aa:6a:32:51:9a:12:ff:2f:e0:b4:28:29:e1:d6:a9:ba:a8:42:
c5:12:2a:23:c5:31:cb:6c:65:8d:a2:75:0b:04:9f:42:0d:49:
48:3c:53:62:fd:b9:25:dc:de:aa:57:cd:22:cb:a0:4b:8d:91:
0e:c1:d3:f4:2d:ae:02:03:00:b8:ce:ad:d3:d2:fe:0a:a8:3e:
59:de:72:68:e8:f6:09:36:68:27:00:10:0d:d9:a5:ef:4b:00:
d6:dd:6f:5a:63:01:6a:92:99:96:05:59:e5:5f:fa:bc:49:dd:
23:2b:4f:bb:4e:cc:a6:74:f4:00:99:d2:1a:00:a2:b0:df:ff:
7c:a9:7d:e6:1a:40:51:70:38:e6:bd:39:88:8f:64:a0:88:f8:
7a:df:49:7d:27:25:b7:f1:bc:42:fa:6f:bc:65:3c:ac:bb:00:
e3:8c:a1:cd:ce:ca:0e:1c:1c:ee:d9:9e:24:d0:68:47:d9:da:
db:b1:43:cb:5c:33:86:b4:65:28:f9:93:9f:e6:c7:82:08:e2:
e0:24:47:28:ad:1b:88:a1:30:f7:0b:f6:4a:1d:9a:45:4b:56:
cf:42:6c:49
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICB0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGNDgxMTAvBgNVBAUTKDAwMEIzQjRGODg5NTdDREQ2RDM3REZGNjEzMTM4RDZG
NTRBODVCNzkwHhcNMjYwMjI2MjIxODQzWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjU1Yi04NWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt4EQjsIH4ovhuXdkVcDVzQ6FpHapOav6UPGV8y1Zvese56azFYkrsrHdRYi2
wZxOO9apqeUzZcMQge0SwCcvWehO7pM25y+7sBTqtVkbZyVBurCE82kzgvQNiA1j
QkGxcvZ8aUc/BKQUWqXab4Zzy+yv8MYBqUfDh1HgoBGir6vi0utCuIYaMiI2ez0s
HVZBSj9CcHj+g+0xplNI00AD3uMEnBv9ZaZJsmBBUUHJSDomJ90rSSKN6K1rqrFg
AXnSsmVCQEDaGuYh+W0tSxYNhaDeAjdFR8LguTPLUoot62xekRveyJ2/lPWryKob
hSQ8x7g4zQYXRcrkfg3Lu2KVLQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFExq2H3y
+3a0zn6MSBGM5GiV5rinMB8GA1UdIwQYMBaAFAALO0+IlXzdbTff9hMTjW9UqFt5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUY0OC9EOUVGOTlDMDZE
NjMxMUVCOURGODE5NDlDNEY5QUUwMi9BQXM3VDRpVmZOMXROOV8yRXhPTmIxU29X
M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FBczdUNGlWZk4xdE45XzJFeE9OYjFTb1czay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDlGNDgvRDlFRjk5QzA2RDYzMTFFQjlERjgxOTQ5QzRGOUFFMDIvQTFGMkU3M0Ex
OUQ1MTFFRjg1RDQ4NDI4QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAcdQAAAMA0GCSqGSIb3DQEBCwUAA4IBAQCgNhUeR+GkA82MWipz
svehOZTPe/Mim3EawGZPdjjVq2/OyoyqajJRmhL/L+C0KCnh1qm6qELFEiojxTHL
bGWNonULBJ9CDUlIPFNi/bkl3N6qV80iy6BLjZEOwdP0La4CAwC4zq3T0v4KqD5Z
3nJo6PYJNmgnABAN2aXvSwDW3W9aYwFqkpmWBVnlX/q8Sd0jK0+7TsymdPQAmdIa
AKKw3/98qX3mGkBRcDjmvTmIj2SgiPh630l9JyW38bxC+m+8ZTysuwDjjKHNzsoO
HBzu2Z4k0GhH2drbsUPLXDOGtGUo+ZOf5seCCOLgJEcorRuIoTD3C/ZKHZpFS1bP
QmxJ
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:08:50 2026 by rpki-client