
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/DE1B9460EDF511EF86CB7315C4F9AE02.roa
File: DE1B9460EDF511EF86CB7315C4F9AE02.roa (raw, json)
Hash identifier: E7TlvkUoTphr1MZbzvUv/cwDmCu/Xr2dNOXdFLK7X2o=
Subject key identifier: C4:DA:78:30:30:7C:60:8C:46:B6:B5:1C:8A:E9:9E:97:89:E3:3A:1C
Certificate issuer: /CN=A915C48D/serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13
Certificate serial: F9
Authority key identifier: 86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/DE1B9460EDF511EF86CB7315C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:13:56 +0000
ROA not before: Fri 07 Nov 2025 01:41:47 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 35039
IP address blocks: 2405:4b00:1000::/36 maxlen: 36
2405:4b00:2000::/36 maxlen: 36
2405:4b00:3000::/36 maxlen: 36
2405:4b00:4000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl
rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249 (0xf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C48D, serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13
Validity
Not Before: Nov 7 01:41:47 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a457b4-5392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ce:61:a1:a6:f2:95:b9:9f:ca:30:4f:e2:47:
d3:80:e1:fc:2b:c1:a8:e2:1f:18:ac:a1:45:26:05:
58:a5:68:47:ed:22:08:8f:0c:75:72:ff:ab:1d:7d:
fd:3d:0c:30:b9:4c:3a:04:16:10:8e:39:6b:22:cd:
a6:1e:f1:01:15:4a:c7:47:71:af:d8:78:6e:93:29:
27:af:28:63:51:45:6a:76:90:09:dc:08:cc:75:36:
0d:55:fb:d4:d0:a9:5c:cf:86:f7:1d:0b:fa:41:e0:
d0:0c:fa:6b:be:a7:4b:5e:de:d4:65:ab:77:ae:98:
0c:e4:74:e4:77:de:e7:d9:0f:09:82:c4:f8:33:a2:
0d:26:15:b1:53:8a:9f:ee:be:ec:06:c4:2f:2e:b1:
15:a3:6a:1a:b3:64:43:53:c8:39:ae:ab:d8:cd:50:
29:41:70:c4:86:2b:d1:e6:ca:7e:d8:4b:ca:de:c4:
8e:5f:b4:99:1c:a0:94:d8:6e:40:18:18:0e:60:a4:
a0:12:31:82:06:82:80:47:97:c8:0d:3e:16:a7:e1:
d9:97:8f:20:72:61:01:29:80:c8:4f:e3:3a:d5:86:
8d:44:53:a2:89:cc:d2:29:9c:1c:b8:d7:2f:08:dc:
54:05:65:ce:de:d5:ea:5d:97:82:1d:22:b0:1c:f7:
90:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DA:78:30:30:7C:60:8C:46:B6:B5:1C:8A:E9:9E:97:89:E3:3A:1C
X509v3 Authority Key Identifier:
keyid:86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/DE1B9460EDF511EF86CB7315C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:4b00:1000::-2405:4b00:4fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
62:a9:fe:83:44:57:7d:3f:fe:24:11:11:ae:5b:e8:67:5c:4f:
59:96:6d:74:1f:fc:a6:66:ce:37:7c:6c:d3:9a:42:bb:a4:5f:
94:31:50:c0:b4:6a:f7:76:c0:11:a6:0a:03:e3:ac:0f:cc:6d:
37:85:b8:ad:06:5c:fe:a8:4a:8d:9f:1f:c4:d9:90:d1:06:99:
88:6d:aa:a6:b8:28:74:a9:52:f9:14:e4:0d:d3:a6:86:5a:a7:
9e:69:f7:f0:ae:13:f1:6c:7c:bc:33:97:1b:4f:8f:8d:74:21:
81:9c:ad:40:a7:35:60:71:99:8f:d6:76:cd:37:da:63:76:90:
ca:1b:34:15:d1:a8:4b:e2:47:41:73:29:ea:20:8f:76:88:c8:
0b:00:ed:c8:cc:ad:55:51:9c:34:d7:28:6b:a9:dd:a8:b2:c7:
04:ff:f6:f4:7a:b7:13:75:3d:c8:d4:b1:28:d1:1c:1e:79:48:
01:d5:4b:2e:0e:76:82:e6:9a:99:f6:63:bc:43:f2:96:04:b4:
aa:e4:39:c7:b4:51:4d:a3:4f:9e:fa:ab:ac:16:3e:b4:05:58:
97:b4:17:8f:c7:57:90:f9:e4:4b:64:88:3e:5a:91:34:2f:28:
ab:68:0b:f3:3e:2c:ea:aa:ce:8e:24:49:7b:48:15:12:c2:b3:
c0:46:56:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:36:14 2026 by rpki-client