
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/D1C1AFB2135511F0976BA50CC4F9AE02.roa
File: D1C1AFB2135511F0976BA50CC4F9AE02.roa (raw, json)
Hash identifier: cXnna13A37da56cbsTCo0fbmD5n4hI69trG/+73mamk=
Subject key identifier: 6C:D0:EC:37:8C:FA:17:E6:FC:40:D0:81:B5:AD:9E:1E:D3:06:A0:EC
Certificate issuer: /CN=A9179672/serialNumber=0C6970CAB9DF8E9BD10E1C3E91891A09A7E88C20
Certificate serial: E4
Authority key identifier: 0C:69:70:CA:B9:DF:8E:9B:D1:0E:1C:3E:91:89:1A:09:A7:E8:8C:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/D1C1AFB2135511F0976BA50CC4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:47:57 +0000
ROA not before: Thu 09 Oct 2025 06:34:35 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 152657
IP address blocks: 2001:df4:df40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.crl
rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179672, serialNumber=0C6970CAB9DF8E9BD10E1C3E91891A09A7E88C20
Validity
Not Before: Oct 9 06:34:35 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a5a31c-a038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5a:4f:40:39:a9:d1:70:fc:a0:10:93:6e:d0:
55:6f:84:f7:c2:e7:a3:15:92:b8:fa:9d:5c:5e:1f:
ed:1a:8e:36:22:16:29:26:09:11:84:67:96:f6:05:
d4:46:17:6d:49:27:21:71:6d:8b:10:f1:9c:1a:66:
03:79:49:0d:7c:00:1b:42:15:d7:97:dc:6a:2b:07:
c4:78:95:bf:08:7b:b2:8f:49:cd:e7:da:68:de:f4:
97:c4:56:5f:83:d4:b1:01:52:8b:c4:95:39:28:2a:
96:6a:72:cd:90:43:9f:f7:e5:d6:d2:14:0a:e3:e0:
af:ec:04:4d:e4:aa:1d:b8:c4:21:84:29:c4:1d:d5:
65:2a:a9:a8:c4:ed:37:e9:f1:d2:06:79:38:3d:96:
f4:96:45:eb:cf:bc:cb:c6:67:e5:aa:7b:62:7e:62:
37:91:60:a4:b7:de:7d:57:26:52:aa:ff:80:38:5f:
4d:4e:ba:75:11:29:f8:87:a9:03:4d:88:5e:05:7a:
c6:71:e3:d5:07:27:e9:aa:6f:c5:6f:9c:1b:ce:0a:
bb:d1:f9:21:bc:0f:2b:eb:ef:6f:c3:a2:92:2c:48:
0b:39:d3:36:2e:a8:b5:8b:28:60:32:54:f3:e8:cb:
1d:c0:ac:6a:fa:b6:8e:9b:50:07:b2:a7:cc:73:44:
7c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D0:EC:37:8C:FA:17:E6:FC:40:D0:81:B5:AD:9E:1E:D3:06:A0:EC
X509v3 Authority Key Identifier:
keyid:0C:69:70:CA:B9:DF:8E:9B:D1:0E:1C:3E:91:89:1A:09:A7:E8:8C:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/D1C1AFB2135511F0976BA50CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:df40::/48
Signature Algorithm: sha256WithRSAEncryption
06:15:e3:32:9e:00:c6:15:8a:96:66:4c:c2:0b:c1:14:85:34:
c6:89:5b:fc:a4:ed:13:8b:81:fb:ef:de:04:af:f6:1a:c1:b7:
56:ad:8b:fc:1a:2c:90:47:6c:b3:c4:92:d9:3b:4c:d5:c9:46:
ad:46:e4:75:af:51:32:85:51:14:a2:75:b5:4f:8f:3c:67:41:
c2:78:ba:77:15:2f:18:31:f3:00:e2:b3:31:c0:b0:0e:fe:58:
61:61:74:7a:55:0f:fa:3f:66:ca:ce:aa:dd:59:33:36:2f:b8:
f0:0c:0a:c2:fa:64:79:f0:9b:23:eb:0c:38:18:bd:4d:56:e1:
48:fa:70:8f:a5:f4:90:b1:1f:94:8f:98:9b:35:49:f2:88:b7:
65:4d:86:be:14:2a:dd:db:69:56:30:ae:2f:41:f9:3c:1f:e9:
dd:8d:45:be:f0:d3:09:af:37:8d:ce:35:5e:79:ae:34:9e:f8:
bd:1b:e0:73:44:e4:d2:04:da:3d:fc:a3:f3:12:1a:98:c2:aa:
80:97:a5:dd:d2:e6:57:1e:8d:56:46:9c:fe:7a:a5:81:94:fb:
1a:49:21:7b:6e:2c:04:92:05:ff:ca:ef:26:3d:d4:35:d9:c5:
8c:d2:63:ff:53:e4:31:65:86:eb:a0:58:54:29:39:f6:d3:7b:
e3:d3:5a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:18:41 2026 by rpki-client