
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916845C/472171F8D7EE11F18E6C7EB21A66CEF9/71C6AD52D8D311F1A5B4B3452266CEF9.roa
File: 71C6AD52D8D311F1A5B4B3452266CEF9.roa (raw, json)
Hash identifier: g+WdkXlcP6j+Hmpa7/qi/VUZN5L6qvZX65NXlFKBAJ4=
Subject key identifier: 35:13:8F:77:ED:8D:2A:8D:2E:D0:33:64:2B:EC:7A:1D:31:FA:E4:8C
Certificate issuer: /CN=A916845C/serialNumber=19235BFE3E0BCD94146B1239263914014CCFE4E5
Certificate serial: 03
Authority key identifier: 19:23:5B:FE:3E:0B:CD:94:14:6B:12:39:26:39:14:01:4C:CF:E4:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSNb_j4LzZQUaxI5JjkUAUzP5OU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916845C/472171F8D7EE11F18E6C7EB21A66CEF9/71C6AD52D8D311F1A5B4B3452266CEF9.roa
Signing time: Thu 05 Nov 2026 04:43:28 +0000
ROA not before: Thu 05 Nov 2026 04:43:28 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 141035
IP address blocks: 2402:1a60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916845C/472171F8D7EE11F18E6C7EB21A66CEF9/GSNb_j4LzZQUaxI5JjkUAUzP5OU.crl
rsync://rpki.apnic.net/member_repository/A916845C/472171F8D7EE11F18E6C7EB21A66CEF9/GSNb_j4LzZQUaxI5JjkUAUzP5OU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSNb_j4LzZQUaxI5JjkUAUzP5OU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 09:22:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916845C, serialNumber=19235BFE3E0BCD94146B1239263914014CCFE4E5
Validity
Not Before: Nov 5 04:43:28 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6aec0970-e73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0d:31:37:c2:0c:55:83:91:0f:d0:67:eb:c6:
5c:5a:91:ab:3d:49:1b:4c:ec:e6:1c:b6:83:4b:c7:
05:c9:02:f5:3e:d3:4a:89:d9:c0:8b:d5:5d:83:56:
0a:11:78:4b:c6:20:2b:fb:94:6f:55:32:73:89:3d:
be:14:07:ca:b9:ce:d0:05:0b:ce:cc:5a:e5:2c:ad:
26:9a:9d:a3:84:09:a0:40:7f:6b:cf:34:87:4a:21:
fe:b4:e7:6e:de:d2:52:90:fe:fc:37:59:5f:b3:7e:
a0:48:7c:0a:98:e3:b9:9b:81:23:c0:29:76:e3:6f:
e5:ba:de:03:ca:51:d8:da:a9:9b:e3:44:e5:75:45:
67:93:16:84:a5:1f:89:67:ea:31:94:44:61:d4:be:
2d:f2:84:52:4c:fc:05:7c:8f:da:ed:7b:4d:c1:6e:
a0:fa:0b:c7:25:d6:cb:0d:4b:c0:d5:56:5f:9f:0e:
23:69:6c:b7:84:0d:29:91:20:f5:14:92:20:63:66:
c1:15:86:82:d6:7e:48:f5:3c:1c:da:8e:df:50:8b:
0c:01:53:82:38:f5:2c:eb:86:32:62:bc:09:dd:ea:
e3:06:77:2b:ad:73:3d:bf:cb:79:67:69:f4:44:49:
22:99:69:d7:76:00:5f:4e:01:e8:6d:b5:24:5b:78:
70:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:13:8F:77:ED:8D:2A:8D:2E:D0:33:64:2B:EC:7A:1D:31:FA:E4:8C
X509v3 Authority Key Identifier:
keyid:19:23:5B:FE:3E:0B:CD:94:14:6B:12:39:26:39:14:01:4C:CF:E4:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916845C/472171F8D7EE11F18E6C7EB21A66CEF9/GSNb_j4LzZQUaxI5JjkUAUzP5OU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSNb_j4LzZQUaxI5JjkUAUzP5OU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916845C/472171F8D7EE11F18E6C7EB21A66CEF9/71C6AD52D8D311F1A5B4B3452266CEF9.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:1a60::/32
Signature Algorithm: sha256WithRSAEncryption
2a:4d:df:f9:0b:19:a0:6d:08:2d:86:0f:27:f7:04:b7:88:7f:
32:00:d5:09:f9:75:de:ab:a5:a5:5b:b8:0a:8c:a8:10:e5:0d:
e7:37:f7:ce:3b:f9:2e:b2:86:1b:7f:52:9e:23:2a:e7:d7:49:
2c:50:14:a5:40:eb:3a:66:52:c3:79:5d:db:fa:32:ab:ed:f0:
88:4b:0d:b0:8a:6d:44:ee:7a:06:e2:0e:7a:10:ba:ce:86:59:
1a:57:d2:53:3a:58:c1:d7:18:8e:b7:27:5c:61:b3:0b:0e:3f:
28:d3:ce:ff:1b:3a:8e:a0:46:fe:26:e9:87:39:ed:33:d6:ef:
ed:83:09:a9:ad:7e:52:8c:23:3e:64:b5:c1:e8:df:81:95:97:
f2:6c:3d:b2:82:80:05:41:cf:db:ff:c1:73:1e:81:c2:f5:8d:
8e:76:2b:72:03:09:e7:d7:bc:53:ac:7a:34:ab:c4:f8:aa:b1:
b3:ac:2a:f0:b7:bd:97:5e:b3:32:28:ce:ee:9e:69:07:a5:f8:
95:4e:6e:5a:ca:f5:38:6f:93:ca:ae:22:89:f9:2a:65:b1:90:
fb:78:d4:c8:8a:97:1b:13:ad:80:1c:ff:11:e8:b8:85:02:09:
97:7e:1c:a2:0f:d8:3b:52:56:2e:bf:43:76:a3:03:43:5f:a6:
69:58:ff:fb
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
ODQ1QzExMC8GA1UEBRMoMTkyMzVCRkUzRTBCQ0Q5NDE0NkIxMjM5MjYzOTE0MDE0
Q0NGRTRFNTAeFw0yNjExMDUwNDQzMjhaFw0yNzEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhZWMwOTcwLWU3M2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCjDTE3wgxVg5EP0Gfrxlxakas9SRtM7OYctoNLxwXJAvU+00qJ2cCL1V2DVgoR
eEvGICv7lG9VMnOJPb4UB8q5ztAFC87MWuUsrSaanaOECaBAf2vPNIdKIf60527e
0lKQ/vw3WV+zfqBIfAqY47mbgSPAKXbjb+W63gPKUdjaqZvjROV1RWeTFoSlH4ln
6jGURGHUvi3yhFJM/AV8j9rte03BbqD6C8cl1ssNS8DVVl+fDiNpbLeEDSmRIPUU
kiBjZsEVhoLWfkj1PBzajt9QiwwBU4I49SzrhjJivAnd6uMGdyutcz2/y3lnafRE
SSKZadd2AF9OAehttSRbeHDHAgMBAAGjggJhMIICXTAdBgNVHQ4EFgQUNROPd+2N
Ko0u0DNkK+x6HTH65IwwHwYDVR0jBBgwFoAUGSNb/j4LzZQUaxI5JjkUAUzP5OUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4NDVDLzQ3MjE3MUY4RDdF
RTExRjE4RTZDN0VCMjFBNjZDRUY5L0dTTmJfajRMelpRVWF4STVKamtVQVV6UDVP
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvR1NOYl9qNEx6WlFVYXhJNUpqa1VBVXpQNU9VLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODQ1Qy80NzIxNzFGOEQ3RUUxMUYxOEU2QzdFQjIxQTY2Q0VGOS83MUM2QUQ1MkQ4
RDMxMUYxQTVCNEIzNDUyMjY2Q0VGOS5yb2EwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkAhpgMA0GCSqGSIb3DQEBCwUAA4IBAQAqTd/5CxmgbQgthg8n9wS3
iH8yANUJ+XXeq6WlW7gKjKgQ5Q3nN/fOO/kusoYbf1KeIyrn10ksUBSlQOs6ZlLD
eV3b+jKr7fCISw2wim1E7noG4g56ELrOhlkaV9JTOljB1xiOtydcYbMLDj8o087/
GzqOoEb+JumHOe0z1u/tgwmprX5SjCM+ZLXB6N+BlZfybD2ygoAFQc/b/8FzHoHC
9Y2OdityAwnn17xTrHo0q8T4qrGzrCrwt72XXrMyKM7unmkHpfiVTm5ayvU4b5PK
riKJ+SplsZD7eNTIipcbE62AHP8R6LiFAgmXfhyiD9g7UlYuv0N2owNDX6ZpWP/7
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:31:11 2026 by rpki-client