
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/DDFB4716AB0D11F0A533CC38C4F9AE02.roa
File: DDFB4716AB0D11F0A533CC38C4F9AE02.roa (raw, json)
Hash identifier: KGvT+BXS36LSoZFMU3mIKXzE14xRPswPDroW0OYanv8=
Subject key identifier: 85:63:07:61:F1:C9:F9:F4:5F:2C:3D:D1:D6:7B:86:EC:48:56:13:AB
Certificate issuer: /CN=A917E726/serialNumber=D74AC1B8A3335243FCB2F9905BC51DBDCB0E236D
Certificate serial: 0B66
Authority key identifier: D7:4A:C1:B8:A3:33:52:43:FC:B2:F9:90:5B:C5:1D:BD:CB:0E:23:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/DDFB4716AB0D11F0A533CC38C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:38:04 +0000
ROA not before: Fri 17 Oct 2025 04:00:50 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 140213
IP address blocks: 2001:df2:df80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.crl
rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 19:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2918 (0xb66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E726, serialNumber=D74AC1B8A3335243FCB2F9905BC51DBDCB0E236D
Validity
Not Before: Oct 17 04:00:50 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a45d5c-4c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:14:3c:33:4f:34:f4:f5:10:3d:ea:86:b9:c3:
d6:25:b3:37:a2:6c:7f:98:1c:6f:4b:41:dd:c2:f3:
ed:1f:4a:35:85:7d:cf:5e:ea:31:b7:d6:09:d4:77:
83:5b:fc:16:90:8b:34:02:c4:04:ac:5a:3d:55:c0:
56:23:f5:d7:0d:2e:cd:d2:2b:42:26:4d:c4:85:eb:
ab:88:9b:bb:21:b9:67:5e:85:43:2d:6d:91:a3:19:
21:a4:c9:7f:48:c3:39:93:0c:a0:bd:68:47:f1:52:
1d:30:78:e0:98:93:de:13:a5:85:41:30:7e:91:9d:
99:69:8d:ce:9d:0e:a6:d2:21:db:66:59:22:0e:3b:
16:d8:e9:30:7c:69:a4:2e:10:16:a8:fb:fb:3b:3e:
06:6f:d6:8e:92:ef:c2:3b:00:5d:0b:5e:50:c3:d6:
0c:25:21:31:c2:af:9d:f5:f0:9d:2e:58:3a:85:ff:
d6:c8:0f:bd:7d:63:4f:8b:bf:8b:79:e5:67:d4:76:
b1:de:a3:54:d4:cd:27:24:75:6a:2a:cd:c0:fb:aa:
fe:ec:2d:ff:d9:a6:ed:07:03:59:cc:ad:3d:06:21:
bd:25:70:7b:56:0f:aa:fd:e0:5b:16:ce:45:30:8e:
fe:76:63:c5:f7:ae:12:54:5f:cf:0d:28:75:83:62:
19:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:63:07:61:F1:C9:F9:F4:5F:2C:3D:D1:D6:7B:86:EC:48:56:13:AB
X509v3 Authority Key Identifier:
keyid:D7:4A:C1:B8:A3:33:52:43:FC:B2:F9:90:5B:C5:1D:BD:CB:0E:23:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/DDFB4716AB0D11F0A533CC38C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df2:df80::/48
Signature Algorithm: sha256WithRSAEncryption
4d:0f:d5:65:ff:e7:a3:9c:0c:db:87:5d:8b:40:19:05:04:57:
25:1f:35:13:94:59:a2:33:11:f5:9b:4c:fb:8b:29:5c:be:bd:
f1:59:61:dc:83:41:82:f0:4a:5d:48:56:43:1d:55:9e:37:6d:
8d:4e:d1:bd:78:71:ca:f7:cc:dd:88:b1:40:d6:92:d3:6a:94:
31:46:ab:fb:e4:1c:84:7c:6a:2b:82:02:44:0f:3d:7e:bc:a0:
bb:b3:47:d5:f8:88:f6:9d:87:2d:d8:0d:96:f6:74:4e:aa:50:
5b:9f:df:42:84:2b:c0:b3:77:1c:55:9d:5c:f4:d5:9f:d2:66:
97:6c:0b:01:b5:33:3d:b5:b6:69:5b:50:85:e0:c8:53:95:21:
33:22:2e:51:fb:1d:59:6c:b2:83:f0:64:b2:04:d7:a8:89:64:
04:5e:f1:17:e8:75:40:ed:2c:4c:a7:be:f2:53:59:c9:99:f2:
6b:bd:e3:3b:75:c2:5c:a2:fa:36:3b:e3:62:01:96:32:08:61:
6a:30:26:92:c6:5b:82:e4:13:13:80:79:27:27:0e:35:15:28:
65:f7:38:31:bb:43:c4:38:b6:e7:df:03:78:ab:a8:7c:d7:a2:
b9:7e:25:df:19:b0:b4:df:0c:0a:d8:42:ec:83:54:dd:cc:d8:
be:a2:ec:48
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICC2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U3MjYxMTAvBgNVBAUTKEQ3NEFDMUI4QTMzMzUyNDNGQ0IyRjk5MDVCQzUxREJE
Q0IwRTIzNkQwHhcNMjUxMDE3MDQwMDUwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NWQ1Yy00YzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuBQ8M0809PUQPeqGucPWJbM3omx/mBxvS0HdwvPtH0o1hX3PXuoxt9YJ1HeD
W/wWkIs0AsQErFo9VcBWI/XXDS7N0itCJk3EheuriJu7IblnXoVDLW2RoxkhpMl/
SMM5kwygvWhH8VIdMHjgmJPeE6WFQTB+kZ2ZaY3OnQ6m0iHbZlkiDjsW2OkwfGmk
LhAWqPv7Oz4Gb9aOku/COwBdC15Qw9YMJSExwq+d9fCdLlg6hf/WyA+9fWNPi7+L
eeVn1Hax3qNU1M0nJHVqKs3A+6r+7C3/2abtBwNZzK09BiG9JXB7Vg+q/eBbFs5F
MI7+dmPF964SVF/PDSh1g2IZfwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFIVjB2Hx
yfn0Xyw90dZ7huxIVhOrMB8GA1UdIwQYMBaAFNdKwbijM1JD/LL5kFvFHb3LDiNt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTcyNi82REJGQTM4QTUy
RDkxMUVBODI3REQwODJDNEY5QUUwMi8xMHJCdUtNelVrUDhzdm1RVzhVZHZjc09J
MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzEwckJ1S016VWtQOHN2bVFXOFVkdmNzT0kyMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0U3MjYvNkRCRkEzOEE1MkQ5MTFFQTgyN0REMDgyQzRGOUFFMDIvRERGQjQ3MTZB
QjBEMTFGMEE1MzNDQzM4QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN8t+AMA0GCSqGSIb3DQEBCwUAA4IBAQBND9Vl/+ejnAzbh12L
QBkFBFclHzUTlFmiMxH1m0z7iylcvr3xWWHcg0GC8EpdSFZDHVWeN22NTtG9eHHK
98zdiLFA1pLTapQxRqv75ByEfGorggJEDz1+vKC7s0fV+Ij2nYct2A2W9nROqlBb
n99ChCvAs3ccVZ1c9NWf0maXbAsBtTM9tbZpW1CF4MhTlSEzIi5R+x1ZbLKD8GSy
BNeoiWQEXvEX6HVA7SxMp77yU1nJmfJrveM7dcJcovo2O+NiAZYyCGFqMCaSxluC
5BMTgHknJw41FShl9zgxu0PEOLbn3wN4q6h816K5fiXfGbC03wwK2ELsg1TdzNi+
ouxI
-----END CERTIFICATE-----
Generated at Sat Mar 28 13:40:53 2026 by rpki-client