
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/936A4548AC3A11F0A9C43F44C4F9AE02.roa
File: 936A4548AC3A11F0A9C43F44C4F9AE02.roa (raw, json)
Hash identifier: sVGpNa8k/xVKsIanvda8jGJL2nHzx0rMDFKMvF7hssA=
Subject key identifier: 17:37:46:2E:21:2F:B8:57:74:F3:3B:E9:F2:4B:3C:58:40:DC:6A:59
Certificate issuer: /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Certificate serial: 01E5
Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/936A4548AC3A11F0A9C43F44C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:22:04 +0000
ROA not before: Sat 18 Oct 2025 15:53:23 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 206675
IP address blocks: 2403:27c0:c02::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 485 (0x1e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Validity
Not Before: Oct 18 15:53:23 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a59d0c-3e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:30:2e:d5:a6:e2:bd:da:7c:e8:3c:24:b5:fb:
04:eb:db:4a:07:4b:6d:8b:b8:71:c3:b4:af:e7:d6:
d7:04:b5:23:c7:a8:51:67:d3:92:77:f0:01:75:12:
9f:cc:14:88:ea:3f:0b:35:a2:85:94:20:72:f8:4b:
3a:03:9c:36:4a:a2:3a:4c:e5:7d:85:0d:d3:27:33:
ed:71:f8:52:1f:14:c9:7c:23:57:e6:c9:b4:f7:8e:
e5:73:c1:81:2a:55:c5:38:e3:8d:e1:d4:14:13:ed:
30:11:97:eb:ca:af:73:5d:0c:b6:02:19:e4:44:0a:
08:d2:b0:e8:fd:4f:fb:50:50:c2:39:6f:1f:4b:03:
09:95:16:8c:d3:92:c6:b1:13:17:2a:92:2f:48:8b:
26:dd:75:0b:93:16:38:6d:ce:83:85:cb:de:85:74:
d4:44:97:ab:16:5b:9e:fb:ee:05:ac:86:c8:4c:6b:
ee:d8:b3:b1:5c:a9:89:5e:54:86:6f:e7:20:13:6f:
e4:ff:03:e0:e8:e6:18:de:78:9e:29:42:a0:ef:78:
6a:b9:a0:da:ed:d8:ad:43:8e:ad:f9:5c:b8:22:ae:
21:d9:f2:ba:a0:6d:01:ea:17:b6:a7:32:32:c3:7e:
74:c5:fc:a9:07:5e:a3:6f:b8:66:30:75:d4:6b:0e:
67:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:37:46:2E:21:2F:B8:57:74:F3:3B:E9:F2:4B:3C:58:40:DC:6A:59
X509v3 Authority Key Identifier:
keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/936A4548AC3A11F0A9C43F44C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2403:27c0:c02::/47
Signature Algorithm: sha256WithRSAEncryption
80:8f:1f:e4:0b:f8:d0:38:51:25:38:76:92:05:e5:ef:b0:ff:
a5:be:ba:ea:ba:a3:9a:cb:4e:1b:fd:93:6a:c9:b4:e4:db:57:
74:ac:01:de:1b:c2:55:25:c0:36:ac:0e:7f:5c:57:e0:e9:53:
8c:4c:c3:bb:fb:45:6b:37:85:05:78:9d:1c:10:1b:7e:5a:eb:
84:33:da:ed:ac:c5:66:46:ff:7a:a7:03:13:7e:80:17:38:0a:
f3:80:8a:33:23:a1:15:f7:ab:21:89:7b:05:22:c0:07:e1:86:
29:91:e9:cb:b9:01:7c:6e:1a:6d:35:d9:d2:1b:a5:73:a9:7b:
9d:2f:cf:28:d1:9b:bd:1e:57:5b:96:b4:bb:f6:51:5f:cf:6d:
d4:14:64:2d:ee:e2:64:68:d2:f0:d4:7f:57:59:e2:48:1e:d0:
d9:f6:ad:5f:0f:36:58:2d:e3:a0:ad:7f:ac:79:b9:e1:7f:34:
99:45:b1:e1:c4:35:e5:d0:d7:6f:f1:a9:66:1b:6e:b5:47:04:
da:bf:46:b9:50:4c:6d:44:1b:c7:bd:52:50:a4:9c:30:25:43:
61:8b:f8:bf:86:a7:1d:24:79:9b:0c:8d:d9:be:7c:1b:f4:8e:
b1:81:f7:27:7b:2c:e0:95:f8:b7:36:81:8f:48:2c:bf:c0:b2:
36:ba:93:29
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0E2NkYxMTAvBgNVBAUTKEIyMkMzRDBBQkNEMzkxOTQ4NkEzRTYxRThENzg4OTIz
OTIyQkY2QTUwHhcNMjUxMDE4MTU1MzIzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OWQwYy0zZTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArDAu1abivdp86DwktfsE69tKB0tti7hxw7Sv59bXBLUjx6hRZ9OSd/ABdRKf
zBSI6j8LNaKFlCBy+Es6A5w2SqI6TOV9hQ3TJzPtcfhSHxTJfCNX5sm0947lc8GB
KlXFOOON4dQUE+0wEZfryq9zXQy2AhnkRAoI0rDo/U/7UFDCOW8fSwMJlRaM05LG
sRMXKpIvSIsm3XULkxY4bc6DhcvehXTURJerFlue++4FrIbITGvu2LOxXKmJXlSG
b+cgE2/k/wPg6OYY3nieKUKg73hquaDa7ditQ46t+Vy4Iq4h2fK6oG0B6he2pzIy
w350xfypB16jb7hmMHXUaw5naQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFBc3Ri4h
L7hXdPM76fJLPFhA3GpZMB8GA1UdIwQYMBaAFLIsPQq805GUhqPmHo14iSOSK/al
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTY2Ri84RkNDOUQyOEM2
RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGtaU0dvLVllalhpSkk1SXI5
cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NpdzlDcnpUa1pTR28tWWVqWGlKSTVJcjlxVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0E2NkYvOEZDQzlEMjhDNkY5MTFFRTk3RTZGQjFEQzRGOUFFMDIvOTM2QTQ1NDhB
QzNBMTFGMEE5QzQzRjQ0QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcBJAMnwAwCMA0GCSqGSIb3DQEBCwUAA4IBAQCAjx/kC/jQOFElOHaS
BeXvsP+lvrrquqOay04b/ZNqybTk21d0rAHeG8JVJcA2rA5/XFfg6VOMTMO7+0Vr
N4UFeJ0cEBt+WuuEM9rtrMVmRv96pwMTfoAXOArzgIozI6EV96shiXsFIsAH4YYp
kenLuQF8bhptNdnSG6VzqXudL88o0Zu9HldblrS79lFfz23UFGQt7uJkaNLw1H9X
WeJIHtDZ9q1fDzZYLeOgrX+sebnhfzSZRbHhxDXl0Ndv8almG261RwTav0a5UExt
RBvHvVJQpJwwJUNhi/i/hqcdJHmbDI3Zvnwb9I6xgfcneyzglfi3NoGPSCy/wLI2
upMp
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:02:48 2026 by rpki-client