
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/DD0545F6324A11EFA615F80FC4F9AE02.roa
File: DD0545F6324A11EFA615F80FC4F9AE02.roa (raw, json)
Hash identifier: Uj11T+QW0pwuoYmi/Tug3FzEFRy1nbJISrOyCvJDnIQ=
Subject key identifier: 92:A4:CB:DC:00:64:0A:D1:96:D2:D2:4E:25:5A:F4:59:7F:07:2E:54
Certificate issuer: /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Certificate serial: 01BF
Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/DD0545F6324A11EFA615F80FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:14:34 +0000
ROA not before: Wed 03 Sep 2025 05:54:43 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 215084
IP address blocks: 2403:ad80:101a::/48 maxlen: 48
2403:ad80:101b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:57:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447 (0x1bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A777, serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Validity
Not Before: Sep 3 05:54:43 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4820a-191e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9b:04:49:37:4a:ab:75:20:20:8f:46:60:f2:
aa:1b:af:84:8e:5d:02:a0:09:05:6c:91:c4:40:37:
77:d9:49:a7:cf:e9:d5:3c:78:ce:97:d8:6b:6e:5c:
c6:c9:75:55:a5:a5:7a:cf:39:ec:30:4d:c2:24:fd:
ed:86:af:ba:db:ee:e9:0b:43:8d:11:9f:9a:8b:33:
66:ca:60:86:a0:6c:8b:0d:44:b0:e5:6b:e5:1d:c8:
b1:63:d4:bc:19:cc:0b:c9:f5:30:a4:43:e7:36:65:
02:8d:4d:a3:73:46:3e:ff:2e:9c:21:8f:f3:78:05:
16:ee:66:c8:31:d0:59:b4:28:c9:17:93:58:68:a2:
e1:0e:d4:21:5f:f9:c6:0d:54:43:c0:75:f8:42:0d:
7a:4c:90:4f:a2:97:e3:6c:68:c6:d0:71:fe:0c:16:
82:34:ae:a2:b1:56:9c:d4:46:fa:87:94:18:d5:71:
34:b2:66:e3:7f:24:e4:13:94:0a:c9:a7:45:34:3e:
9d:9c:56:da:af:4e:19:18:db:4c:26:0a:e9:e3:8f:
42:fd:e9:11:ec:46:02:8f:d5:76:07:bf:23:d5:ea:
ad:5b:76:67:e0:07:75:7e:e5:20:9c:36:12:c9:01:
12:7c:61:37:5b:26:5c:18:35:1e:e7:b3:8a:7e:9d:
72:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A4:CB:DC:00:64:0A:D1:96:D2:D2:4E:25:5A:F4:59:7F:07:2E:54
X509v3 Authority Key Identifier:
keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/DD0545F6324A11EFA615F80FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2403:ad80:101a::/47
Signature Algorithm: sha256WithRSAEncryption
0e:c0:c2:f8:43:a9:0b:26:81:59:f5:20:d9:24:45:06:2a:e1:
05:37:12:b3:4b:8c:43:db:62:a1:a6:5e:c4:5b:d6:03:9c:6c:
1a:6b:06:9a:b2:e4:fc:18:a3:48:b9:4f:34:da:65:ae:d6:fd:
4b:54:3e:41:6e:60:ac:0f:39:09:48:75:b2:7c:2c:ee:51:8c:
6c:6f:d9:01:2f:18:80:58:27:16:20:ac:f9:3c:f7:cf:35:6e:
92:76:2b:94:19:76:db:ab:a6:ee:00:ae:d6:14:08:c7:88:08:
be:50:a0:ca:cf:5f:7a:6a:29:63:be:78:f0:90:2d:d7:fe:5c:
78:ed:12:4b:dc:5d:4c:ce:70:49:7f:b0:ab:a7:15:5c:d3:c7:
2d:ba:96:ce:f0:b4:36:4a:fb:e5:22:0f:b2:c0:6e:46:b3:10:
22:4c:1a:02:18:60:50:00:94:ab:6e:a2:6c:df:84:2e:a3:12:
1c:28:cd:66:5e:fd:c1:dc:d3:91:f5:f9:44:fb:09:da:4c:d8:
1c:aa:bf:13:f3:36:e8:cd:f4:3a:91:4f:ed:84:a5:67:dc:c4:
26:2f:da:e7:9e:57:8f:6d:97:ff:ae:37:2d:8c:50:d7:f6:b4:
1f:fb:52:b3:fb:05:d3:ea:9c:51:75:83:ad:cc:21:45:01:da:
40:e2:65:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:15:14 2026 by rpki-client