
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/DDFB4716AB0D11F0A533CC38C4F9AE02.roa
File: DDFB4716AB0D11F0A533CC38C4F9AE02.roa (raw, json)
Hash identifier: uUzfS+4eZCMDJudiqJ/1sYw3wJ0ku6hpxrBeNB6zCZ4=
Subject key identifier: 5B:E5:0C:15:5D:EB:38:95:B2:9B:6D:89:EA:C3:45:09:12:87:DA:3E
Certificate issuer: /CN=A917E726/serialNumber=D74AC1B8A3335243FCB2F9905BC51DBDCB0E236D
Certificate serial: 0B88
Authority key identifier: D7:4A:C1:B8:A3:33:52:43:FC:B2:F9:90:5B:C5:1D:BD:CB:0E:23:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/DDFB4716AB0D11F0A533CC38C4F9AE02.roa
Signing time: Tue 28 Apr 2026 20:25:00 +0000
ROA not before: Tue 28 Apr 2026 20:25:00 +0000
ROA not after: Fri 28 Aug 2026 00:00:00 +0000
asID: 140213
IP address blocks: 2001:df2:df80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.crl
rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:13:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2952 (0xb88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E726, serialNumber=D74AC1B8A3335243FCB2F9905BC51DBDCB0E236D
Validity
Not Before: Apr 28 20:25:00 2026 GMT
Not After : Aug 28 00:00:00 2026 GMT
Subject: CN=69f1179c-db6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:e4:48:42:72:01:65:49:da:9f:7c:0d:fd:
e7:59:bd:06:f9:10:10:28:f2:f2:e0:14:f3:8d:8c:
d2:48:76:30:06:b1:42:ac:97:d1:b2:65:50:c6:fc:
e9:f7:07:4a:20:e3:7a:4f:bf:64:e6:f1:eb:5a:19:
67:ec:63:ec:71:9c:51:4b:23:f8:6d:63:50:64:19:
1c:37:01:69:cc:17:21:a0:dd:ef:12:22:c8:05:b9:
5d:49:b5:8c:ff:4d:7c:88:bd:2c:a2:9e:53:07:07:
ed:b5:3a:02:3f:4d:ed:97:c6:63:64:f0:a0:e5:2c:
41:ef:3e:6d:09:3e:df:8c:fb:bc:9c:a1:72:a9:d9:
fb:3a:3e:03:91:b1:92:bd:18:86:28:25:ca:da:08:
82:d8:20:32:16:06:35:e1:90:49:55:74:72:be:16:
b4:d8:23:7e:10:89:00:29:f7:7c:e4:25:5c:14:ae:
74:e4:5b:1f:cc:6d:ad:36:d3:ff:5a:2d:88:38:59:
6c:b2:d4:17:8c:65:fa:2b:f7:15:da:c3:df:04:06:
5c:6c:91:57:9b:a9:0f:c7:73:07:4f:2c:3c:71:a3:
1f:2b:35:7a:6d:45:e8:12:aa:6a:a8:a7:57:ff:5d:
98:59:0b:18:76:55:9a:02:c8:26:30:56:f6:4d:67:
79:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E5:0C:15:5D:EB:38:95:B2:9B:6D:89:EA:C3:45:09:12:87:DA:3E
X509v3 Authority Key Identifier:
keyid:D7:4A:C1:B8:A3:33:52:43:FC:B2:F9:90:5B:C5:1D:BD:CB:0E:23:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/DDFB4716AB0D11F0A533CC38C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df2:df80::/48
Signature Algorithm: sha256WithRSAEncryption
01:ae:13:10:78:89:af:43:78:4a:47:c4:c9:0a:86:37:ce:30:
ca:d2:70:a4:b7:53:ae:b1:c2:64:58:49:78:ac:d5:82:36:90:
1c:09:c0:b9:48:e1:8e:0d:ce:2d:e2:eb:21:c4:d3:91:55:d8:
23:49:a8:e9:7b:f4:bd:5a:08:ed:38:c7:e4:59:b6:2e:2b:55:
80:51:08:b4:13:e9:07:a2:87:16:47:9c:8f:03:31:7c:2f:c1:
76:5c:ca:38:cc:de:97:d7:7c:e3:13:8c:37:ad:be:5a:1f:b9:
d0:5a:6d:d4:ea:3f:20:87:ac:e4:72:f0:25:9e:d8:6f:6e:aa:
19:ef:d3:79:e9:7b:0a:4f:d6:d5:95:fd:79:56:ea:a4:b6:6d:
83:8a:e5:42:21:df:c9:31:b3:97:7a:50:4f:bc:d2:d1:9c:15:
9d:43:11:f7:ac:84:80:f1:eb:43:5e:f3:22:a6:6d:02:a5:dc:
dc:4e:c0:f0:3a:9f:f3:79:56:0c:7b:e1:64:8e:16:1c:32:34:
18:b0:ab:88:f2:8b:88:ad:68:7a:b4:d3:03:00:f5:5b:ed:06:
bb:cf:65:6f:e9:17:3d:b6:dc:be:27:8c:d5:cd:dd:52:57:6a:
8a:10:69:15:93:7d:19:12:2c:6b:0c:4b:3d:33:ca:c0:1f:38:
21:d9:a8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:09:46 2026 by rpki-client