
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/71A92448186E11F083760527C4F9AE02.roa
File: 71A92448186E11F083760527C4F9AE02.roa (raw, json)
Hash identifier: b7QaG+Nx/PTzoPZCl0t+vIuGgyWjiuhcViAVTwKgxf4=
Subject key identifier: 6E:62:4F:51:50:98:E5:8D:41:D3:AA:25:62:87:9C:27:99:81:A4:24
Certificate issuer: /CN=A915BC98/serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
Certificate serial: 012A
Authority key identifier: FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/71A92448186E11F083760527C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:53:59 +0000
ROA not before: Sun 13 Apr 2025 14:24:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139888
IP address blocks: 2401:f860:6000::/40 maxlen: 40
2401:f860:6000::/44 maxlen: 44
2401:f860:6010::/44 maxlen: 44
2401:f860:6020::/44 maxlen: 44
2401:f860:6030::/44 maxlen: 44
2401:f860:6040::/44 maxlen: 44
2401:f860:6050::/44 maxlen: 44
2401:f860:6060::/44 maxlen: 44
2401:f860:6070::/44 maxlen: 44
2401:f860:6080::/44 maxlen: 44
2401:f860:6090::/44 maxlen: 44
2401:f860:60a0::/44 maxlen: 44
2401:f860:60b0::/44 maxlen: 44
2401:f860:60c0::/44 maxlen: 44
2401:f860:60d0::/44 maxlen: 44
2401:f860:60e0::/44 maxlen: 44
2401:f860:60f0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl
rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:10:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298 (0x12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BC98, serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
Validity
Not Before: Apr 13 14:24:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a59677-0c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:b3:96:18:15:9c:22:a8:80:c1:0f:81:41:
f9:5b:41:b3:b2:6a:2d:d1:4e:ff:1a:e6:ea:d6:d6:
66:7f:a0:96:7f:a0:71:fb:c3:60:bf:9a:ee:a8:34:
95:b6:b9:da:d7:7e:ae:b6:ba:2a:e4:a8:50:a9:30:
a5:4e:85:f1:88:38:0f:fb:65:8d:0e:0f:6f:e4:48:
26:3b:e3:11:43:3c:d6:9f:85:2b:fe:ac:2a:25:00:
35:57:4c:23:c5:f2:d7:25:f4:e4:16:88:5b:2f:fb:
73:72:8c:73:9f:cf:75:a4:92:a1:55:63:42:70:62:
0b:ab:b2:be:fb:3b:3d:15:ad:f6:ed:bb:81:a9:98:
88:19:fd:ee:6a:61:e7:d9:ec:4a:34:38:e0:3e:8a:
81:2b:73:c3:99:66:28:b0:bc:5e:77:4e:e2:20:47:
76:0a:7c:5b:dd:ca:9f:a5:67:a6:57:94:32:03:96:
9c:2f:2b:05:51:c6:96:f4:17:85:00:61:ae:47:4f:
78:08:df:d0:b3:49:d1:f3:24:40:3b:3e:52:4a:ee:
e7:18:44:92:2d:9c:48:e5:02:4e:3e:b0:f9:d2:df:
d7:5a:4d:09:67:0f:12:d0:fa:a5:58:12:80:c3:71:
4d:00:28:f8:f9:d6:d5:b9:83:48:6e:58:3e:95:bb:
32:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:62:4F:51:50:98:E5:8D:41:D3:AA:25:62:87:9C:27:99:81:A4:24
X509v3 Authority Key Identifier:
keyid:FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/71A92448186E11F083760527C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:f860:6000::/40
Signature Algorithm: sha256WithRSAEncryption
01:14:d7:74:f6:fd:5d:66:3d:65:35:c0:04:20:8e:2e:f4:7a:
ba:0d:c3:3d:77:0d:8d:aa:0f:45:21:44:aa:c0:16:91:1f:d7:
1c:79:ff:7c:fc:ac:0b:35:be:fb:38:e8:ff:ea:bf:da:be:14:
6f:69:52:2c:e5:01:bf:f7:33:ca:ef:a0:28:38:ac:cc:36:16:
dc:ed:90:a2:dd:cc:81:cb:00:41:27:1a:6a:b9:dd:b7:a3:c3:
47:51:a2:34:9d:20:f7:0e:73:6c:43:2a:97:66:1e:03:59:8a:
51:b7:cc:7a:34:91:04:44:ed:54:4a:61:39:0f:21:e3:11:82:
88:54:d3:74:85:fe:5d:96:dd:cd:e7:e1:b1:c4:cf:07:68:ce:
eb:97:a6:f6:d9:d1:51:a4:4b:f3:32:17:c9:5a:b8:8a:5f:63:
1f:dd:30:dc:c0:73:3e:2d:b6:90:12:31:ef:36:6d:41:19:71:
8f:a4:a1:6b:6e:14:06:ad:14:bd:22:d6:23:7b:3a:1d:0f:5a:
bd:29:87:7a:cb:a1:78:56:39:6e:10:d5:c2:c2:f2:79:d3:1e:
dd:e2:01:43:9f:35:9f:a9:ac:6c:e3:5e:dc:18:ac:27:a5:41:
22:01:51:78:71:a4:07:85:49:09:59:fe:71:ec:0a:13:64:4f:
8c:a1:0a:0c
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUJDOTgxMTAvBgNVBAUTKEZGOENDQkU2MTg3NTVBMUY1MTk5QkQwQzgyNzYwRThF
REI4Rjg1QkEwHhcNMjUwNDEzMTQyNDU3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OTY3Ny0wYzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu1uzlhgVnCKogMEPgUH5W0Gzsmot0U7/Gubq1tZmf6CWf6Bx+8Ngv5ruqDSV
trna136utroq5KhQqTClToXxiDgP+2WNDg9v5EgmO+MRQzzWn4Ur/qwqJQA1V0wj
xfLXJfTkFohbL/tzcoxzn891pJKhVWNCcGILq7K++zs9Fa327buBqZiIGf3uamHn
2exKNDjgPoqBK3PDmWYosLxed07iIEd2Cnxb3cqfpWemV5QyA5acLysFUcaW9BeF
AGGuR094CN/Qs0nR8yRAOz5SSu7nGESSLZxI5QJOPrD50t/XWk0JZw8S0PqlWBKA
w3FNACj4+dbVuYNIblg+lbsyzQIDAQABo4ICYjCCAl4wHQYDVR0OBBYEFG5iT1FQ
mOWNQdOqJWKHnCeZgaQkMB8GA1UdIwQYMBaAFP+My+YYdVofUZm9DIJ2Do7bj4W6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkM5OC9BQkFGRjVFQTA2
MTIxMUYwOEU5QUU1MjlDNEY5QUUwMi9fNHpMNWhoMVdoOVJtYjBNZ25ZT2p0dVBo
Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL180ekw1aGgxV2g5Um1iME1nbllPanR1UGhiby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUJDOTgvQUJBRkY1RUEwNjEyMTFGMDhFOUFFNTI5QzRGOUFFMDIvNzFBOTI0NDgx
ODZFMTFGMDgzNzYwNTI3QzRGOUFFMDIucm9hMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAH4YGAwDQYJKoZIhvcNAQELBQADggEBAAEU13T2/V1mPWU1wAQg
ji70eroNwz13DY2qD0UhRKrAFpEf1xx5/3z8rAs1vvs46P/qv9q+FG9pUizlAb/3
M8rvoCg4rMw2FtztkKLdzIHLAEEnGmq53bejw0dRojSdIPcOc2xDKpdmHgNZilG3
zHo0kQRE7VRKYTkPIeMRgohU03SF/l2W3c3n4bHEzwdozuuXpvbZ0VGkS/MyF8la
uIpfYx/dMNzAcz4ttpASMe82bUEZcY+koWtuFAatFL0i1iN7Oh0PWr0ph3rLoXhW
OW4Q1cLC8nnTHt3iAUOfNZ+prGzjXtwYrCelQSIBUXhxpAeFSQlZ/nHsChNkT4yh
Cgw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:05:45 2026 by rpki-client