
$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/0448C04E5CC211E8AC07E63AC4F9AE02.roa
File: 0448C04E5CC211E8AC07E63AC4F9AE02.roa (raw, json)
Hash identifier: x7YXjzD8EFzf7N4rbQoqJB4eYFt5aSsAHJp7OOa/HsA=
Subject key identifier: 6C:E8:B1:31:7F:7F:58:8F:7D:C7:D6:8C:01:14:97:7B:0C:20:B5:53
Certificate issuer: /CN=A916FA49/serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A
Certificate serial: 155E
Authority key identifier: 19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/0448C04E5CC211E8AC07E63AC4F9AE02.roa
Signing time: Tue 24 Mar 2026 17:20:57 +0000
ROA not before: Tue 24 Mar 2026 17:20:57 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 9411
IP address blocks: 2406:3100::/32 maxlen: 32
2406:3100::/36 maxlen: 36
2406:3100:1000::/36 maxlen: 36
2406:3100:2000::/36 maxlen: 36
2406:3100:3000::/36 maxlen: 36
2406:3100:4000::/36 maxlen: 36
2406:3100:5000::/36 maxlen: 36
2406:3100:6000::/36 maxlen: 36
2406:3100:7000::/36 maxlen: 36
2406:3100:8000::/36 maxlen: 36
2406:3100:9000::/36 maxlen: 36
2406:3100:a000::/36 maxlen: 36
2406:3100:b000::/36 maxlen: 36
2406:3100:c000::/36 maxlen: 36
2406:3100:d000::/36 maxlen: 36
2406:3100:e000::/36 maxlen: 36
2406:3100:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl
rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 16:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5470 (0x155e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FA49, serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A
Validity
Not Before: Mar 24 17:20:57 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69c2c7f9-b94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:03:8d:56:a8:b0:c1:ac:c7:c8:39:c9:d6:c9:
2d:3d:c2:ca:a5:8c:ea:1b:5a:c2:0e:fa:74:8f:31:
ce:0d:35:b4:54:b0:5d:16:a3:fe:1e:a4:5a:1e:ed:
f5:69:0c:12:da:79:c3:76:5a:54:cd:09:c5:61:e3:
c6:95:fd:d0:6d:c5:7f:ef:3d:39:75:19:bd:0b:0e:
59:fa:fd:c6:ab:3f:fe:1c:b5:a1:a4:ad:16:66:95:
a7:13:2e:8e:80:0a:17:ae:d1:ab:b5:c1:87:c5:aa:
2d:39:37:92:eb:d8:f7:11:2f:b9:95:fa:3c:cf:d4:
d2:ca:ec:89:32:93:8a:f6:5a:f8:82:e2:71:84:ad:
dd:77:13:9f:39:89:94:0b:b8:df:ae:69:e7:c2:50:
33:d7:a4:cd:fe:12:08:38:81:43:d8:7f:27:f0:8e:
20:bd:e3:69:d1:67:84:26:53:91:b3:7d:41:33:38:
fd:ee:35:54:83:8a:37:d4:47:3d:fa:73:45:6e:27:
99:0e:3d:bb:a6:a7:10:00:f5:7f:f9:d4:11:b3:ae:
a2:81:f1:c9:be:ca:25:9c:4e:01:1c:5f:b2:bb:1d:
a0:19:97:11:ee:11:77:fe:75:64:0f:24:e2:b1:32:
2d:f7:ad:b5:ca:28:90:ca:24:67:00:93:ee:8a:1b:
84:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E8:B1:31:7F:7F:58:8F:7D:C7:D6:8C:01:14:97:7B:0C:20:B5:53
X509v3 Authority Key Identifier:
keyid:19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/0448C04E5CC211E8AC07E63AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:3100::/32
Signature Algorithm: sha256WithRSAEncryption
88:c7:57:72:6b:00:8c:16:99:77:c1:ef:b4:b8:59:08:c8:c5:
46:8c:54:80:85:35:15:31:1f:02:ae:e4:26:55:c0:ab:b9:79:
14:07:c9:10:e6:9a:37:1c:d8:21:3f:6b:b9:33:51:a7:c8:4b:
5b:bb:71:35:41:fa:5c:1d:a5:f2:2d:21:06:48:84:c1:46:55:
9d:13:f2:a7:30:5b:a6:bc:df:b5:ce:aa:63:67:01:66:a6:8b:
fd:f1:05:6f:e7:e9:66:ab:5c:33:95:b8:3a:b8:7e:95:d0:73:
52:f9:56:cd:b7:d4:00:89:17:e9:e1:88:07:87:c7:66:39:71:
75:79:9f:1d:da:13:f2:18:3d:99:ba:73:e8:7c:be:ea:c2:0c:
ea:ad:55:0b:e2:8b:e2:05:0e:6b:fa:0b:2e:12:58:ca:a6:52:
4f:ed:3c:02:03:33:1e:9a:6f:f3:f1:fa:0b:0d:cd:f9:77:57:
c0:be:cf:39:7a:54:6a:00:c0:35:d7:2f:70:ca:59:68:46:3c:
ad:35:2d:df:c0:65:5a:c8:3c:b0:8f:16:75:7d:da:e9:7a:84:
d6:85:65:cf:ad:a3:52:ed:79:5b:f1:c9:e4:88:4e:0d:20:06:
04:ab:34:b8:8d:f8:04:b3:b3:c6:55:7e:c0:ce:47:d7:cf:64:
8b:36:1a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:09:18 2026 by rpki-client