
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/D1AFFC66BBD011F1A3EF2FC2A9EE528E.roa
File: D1AFFC66BBD011F1A3EF2FC2A9EE528E.roa (raw, json)
Hash identifier: L1BQlodbLjWzbDTDZTd+cJJ3MiEG96Az6Cag05j+tjQ=
Subject key identifier: A8:DF:AD:79:86:30:C0:19:D4:8F:BF:91:2B:26:A7:2C:30:D0:A2:8B
Certificate issuer: /CN=A915FD1D/serialNumber=3F731363FE4740461A59C88FA767BD8A36EC0DF6
Certificate serial: 0831
Authority key identifier: 3F:73:13:63:FE:47:40:46:1A:59:C8:8F:A7:67:BD:8A:36:EC:0D:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/D1AFFC66BBD011F1A3EF2FC2A9EE528E.roa
Signing time: Tue 29 Sep 2026 06:41:37 +0000
ROA not before: Tue 29 Sep 2026 06:41:37 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 134455
IP address blocks: 2406:e7c0::/32 maxlen: 32
2406:e7c0:1000::/36 maxlen: 36
2406:e7c0:c000::/36 maxlen: 36
2406:e7c0:d000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.crl
rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 21:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2097 (0x831)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FD1D, serialNumber=3F731363FE4740461A59C88FA767BD8A36EC0DF6
Validity
Not Before: Sep 29 06:41:37 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6abb5da1-b218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d2:e8:1f:18:2d:a9:e2:ff:dd:48:8c:f1:91:
5e:64:25:a6:ed:a7:11:a7:b7:d0:2c:c1:56:f0:3c:
ec:ca:5d:99:c7:5b:a1:12:68:05:06:25:e4:84:8f:
44:2a:c5:9a:03:e1:78:d4:0d:c4:b0:c3:d2:3a:2c:
32:77:d4:23:b0:09:91:eb:74:d5:46:5c:99:b5:87:
b6:c4:d2:c3:c7:fb:a7:f9:60:3c:70:f9:55:19:0b:
cb:11:5d:1f:df:1d:65:b6:f5:73:4f:d6:83:75:72:
1e:86:30:63:55:47:02:c1:71:6b:7f:20:aa:8f:75:
ef:5a:56:cc:37:f5:ec:5b:41:a4:0a:a1:50:4d:91:
f1:81:76:c4:6b:61:06:77:8e:17:e4:bd:e9:f9:96:
ed:42:c6:a4:c8:46:a1:a2:e9:8b:4b:bf:1f:fa:f7:
66:89:8f:3c:97:c9:5e:04:f3:1e:17:e4:6d:0f:e6:
ab:f9:e3:71:c2:a5:35:1d:b5:3a:a2:6e:e8:ce:ef:
30:1b:c9:44:64:92:f9:19:47:eb:51:ee:20:5e:4e:
7c:ef:5e:de:76:61:23:94:e7:01:a1:be:a0:00:12:
07:f9:c0:ab:d7:6d:77:62:33:5e:1c:88:df:1d:56:
fe:b6:81:f7:55:08:5b:d3:66:cb:95:00:34:bd:7c:
94:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DF:AD:79:86:30:C0:19:D4:8F:BF:91:2B:26:A7:2C:30:D0:A2:8B
X509v3 Authority Key Identifier:
keyid:3F:73:13:63:FE:47:40:46:1A:59:C8:8F:A7:67:BD:8A:36:EC:0D:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/D1AFFC66BBD011F1A3EF2FC2A9EE528E.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:e7c0::/32
Signature Algorithm: sha256WithRSAEncryption
a8:3a:5d:ee:fc:52:0f:58:ce:54:b6:8b:bc:9d:16:87:32:12:
68:c3:7f:01:df:cb:1c:5d:7d:eb:77:0d:a6:4b:ac:b0:07:85:
1e:76:c8:8f:b4:18:6e:fa:25:4d:de:fe:64:69:c4:8c:12:6a:
50:cc:43:7a:f5:1d:f0:b0:12:9d:14:75:3b:43:c6:91:5f:74:
d2:74:62:ba:3c:77:ac:f2:8f:9a:ce:03:d2:1d:c1:e0:b9:07:
02:ec:75:33:fc:40:30:28:e4:fb:ce:5d:c5:e2:1b:fc:27:af:
8e:a9:2b:d1:91:38:1b:9d:fd:87:96:46:54:e2:a5:3a:85:b0:
f8:dd:b5:57:bf:0e:67:ef:cd:58:1f:b0:58:39:1d:3a:65:51:
4b:1f:ac:d0:5c:f3:3c:27:da:a8:c0:6c:20:f5:78:22:df:51:
95:39:a4:e7:a6:e0:ca:d7:96:68:d1:20:c7:c9:88:88:61:ca:
c4:ba:75:a5:42:7e:dc:5f:cb:be:c2:8e:c5:1a:a6:4c:3b:7a:
cd:2f:ac:27:9e:af:37:48:83:d3:aa:af:ad:4f:8f:ce:6d:af:
42:3c:71:20:92:16:c5:be:8b:4c:48:e1:56:78:ab:5d:89:64:
d0:32:9a:b0:8e:78:36:8c:1b:c1:15:dc:b6:fb:c9:3c:cf:60:
c8:ae:81:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:28:00 2026 by rpki-client