
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/311DA6AA78F611EFAFD81B5BC4F9AE02.roa
File: 311DA6AA78F611EFAFD81B5BC4F9AE02.roa (raw, json)
Hash identifier: 4vuTCUAhfJT3HGv5tLVBeeb3AAx6C5qUisVfSfItWZ0=
Subject key identifier: 8E:08:4B:CD:04:8A:6B:F2:1C:AA:CF:2E:F6:75:E3:EA:D4:13:BA:7C
Certificate issuer: /CN=A918FCE2/serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B
Certificate serial: 08F9
Authority key identifier: DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/311DA6AA78F611EFAFD81B5BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:05:18 +0000
ROA not before: Fri 22 Aug 2025 21:01:11 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 140949
IP address blocks: 2001:df4:5280::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl
rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2297 (0x8f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FCE2, serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B
Validity
Not Before: Aug 22 21:01:11 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4479e-5a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f3:d1:4a:29:32:29:a5:0f:aa:5c:aa:50:37:
a0:90:34:f3:2d:d8:c6:15:8c:93:e2:f1:e9:7f:2d:
b3:90:0b:5e:a7:0c:fb:28:cb:43:4b:45:eb:7c:13:
22:ec:5b:02:49:68:46:45:30:01:39:81:2d:a2:94:
ce:1b:ec:eb:ca:b1:9d:75:7e:e9:d6:86:52:04:24:
93:bc:0d:83:c2:f7:54:f5:31:9b:ef:b5:db:19:7f:
ec:81:a4:e2:e5:4a:6c:83:c8:02:ce:d3:ef:89:f0:
8f:0b:3e:44:35:1d:e6:44:53:0b:33:10:c7:1a:b0:
62:d2:91:85:b2:3c:3b:ea:60:0b:79:32:92:28:08:
ff:3b:cd:f8:e0:27:b9:b7:3d:58:1d:b2:fe:55:52:
be:41:39:4f:10:e3:cb:81:aa:54:c1:e8:15:c4:58:
b2:f9:09:64:07:a9:2b:a5:c7:7c:fb:1b:1a:47:37:
71:22:56:60:f3:76:89:a4:7c:66:9d:d6:e0:55:d6:
f9:c0:ba:ee:99:fa:4b:e8:87:6e:6d:6b:95:f3:26:
4a:16:ee:71:7e:7c:ed:15:be:d5:53:ce:bf:4e:76:
59:45:e1:41:10:59:c0:14:4e:67:52:cf:a5:0a:2b:
a0:9b:d6:2f:8a:de:b1:28:72:00:6a:6c:21:fd:4e:
f0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:08:4B:CD:04:8A:6B:F2:1C:AA:CF:2E:F6:75:E3:EA:D4:13:BA:7C
X509v3 Authority Key Identifier:
keyid:DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/311DA6AA78F611EFAFD81B5BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:5280::/48
Signature Algorithm: sha256WithRSAEncryption
aa:7f:2f:4f:9e:8f:92:06:aa:4b:14:e6:89:7d:ba:99:ea:bd:
69:5a:f6:ae:5f:cd:8a:8c:6e:b3:7c:b5:e4:4f:9e:7e:46:e4:
02:3c:f8:f1:64:e1:78:cc:11:3a:ce:8f:68:e5:12:95:99:d1:
9f:5c:98:6a:8f:c5:39:53:4a:40:9c:bc:4c:46:52:39:92:63:
77:6c:5b:b3:80:18:a5:f9:43:60:74:bb:29:24:d1:41:65:0a:
bf:13:c3:e5:9e:a5:93:83:f3:da:1b:23:9f:c7:b3:e9:d9:e0:
ba:96:66:15:98:aa:f3:53:4b:d2:04:c2:0e:a2:d7:04:aa:31:
b7:a5:61:82:72:4f:26:e1:43:34:73:4e:3a:db:78:e7:b4:cc:
7b:58:aa:79:72:c4:5d:e2:23:6e:05:e7:07:f2:49:c3:ef:78:
35:cd:96:e9:95:bd:89:90:76:5e:ac:3b:11:e9:ae:19:83:21:
ba:48:64:f1:f2:87:c8:df:ea:43:3a:47:a5:f6:35:b0:ec:09:
4d:40:3e:fa:a6:42:a5:1e:92:1f:2d:01:9f:f0:40:5e:ca:c3:
39:a8:5c:1e:6b:f8:8f:88:b2:fc:57:2e:46:68:c5:11:37:82:
c1:6a:dc:41:d8:44:98:72:e4:4e:b5:91:26:b8:38:e0:d3:a1:
72:3a:66:76
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICCPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZDRTIxMTAvBgNVBAUTKERBRkRFMEJDNkUwQUQzQTg5NUJDNzU2RDZDMzFBMUU2
MUI2RDM4M0IwHhcNMjUwODIyMjEwMTExWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDc5ZS01YTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4vPRSikyKaUPqlyqUDegkDTzLdjGFYyT4vHpfy2zkAtepwz7KMtDS0XrfBMi
7FsCSWhGRTABOYEtopTOG+zryrGddX7p1oZSBCSTvA2DwvdU9TGb77XbGX/sgaTi
5Upsg8gCztPvifCPCz5ENR3mRFMLMxDHGrBi0pGFsjw76mALeTKSKAj/O8344Ce5
tz1YHbL+VVK+QTlPEOPLgapUwegVxFiy+QlkB6krpcd8+xsaRzdxIlZg83aJpHxm
ndbgVdb5wLrumfpL6IdubWuV8yZKFu5xfnztFb7VU86/TnZZReFBEFnAFE5nUs+l
Ciugm9Yvit6xKHIAamwh/U7wUQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFI4IS80E
imvyHKrPLvZ14+rUE7p8MB8GA1UdIwQYMBaAFNr94LxuCtOolbx1bWwxoeYbbTg7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkNFMi82MTgwQzBBMkNE
NkYxMUVBOTc1NDgwNDNDNEY5QUUwMi8ydjNndkc0SzA2aVZ2SFZ0YkRHaDVodHRP
RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ2M2d2RzRLMDZpVnZIVnRiREdoNWh0dE9Ecy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEZDRTIvNjE4MEMwQTJDRDZGMTFFQTk3NTQ4MDQzQzRGOUFFMDIvMzExREE2QUE3
OEY2MTFFRkFGRDgxQjVCQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN9FKAMA0GCSqGSIb3DQEBCwUAA4IBAQCqfy9Pno+SBqpLFOaJ
fbqZ6r1pWvauX82KjG6zfLXkT55+RuQCPPjxZOF4zBE6zo9o5RKVmdGfXJhqj8U5
U0pAnLxMRlI5kmN3bFuzgBil+UNgdLspJNFBZQq/E8PlnqWTg/PaGyOfx7Pp2eC6
lmYVmKrzU0vSBMIOotcEqjG3pWGCck8m4UM0c04623jntMx7WKp5csRd4iNuBecH
8knD73g1zZbplb2JkHZerDsR6a4ZgyG6SGTx8ofI3+pDOkel9jWw7AlNQD76pkKl
HpIfLQGf8EBeysM5qFwea/iPiLL8Vy5GaMURN4LBatxB2ESYcuROtZEmuDjg06Fy
OmZ2
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:58:46 2026 by rpki-client