
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/5B66C6FEB4DB11F0B3DC6D7BC4F9AE02.roa
File: 5B66C6FEB4DB11F0B3DC6D7BC4F9AE02.roa (raw, json)
Hash identifier: ByWsIE/4rVUD5qRgH7zOnv47Eu0MEqBdDSj3mKfG9BU=
Subject key identifier: 06:78:F9:DC:A5:A3:D1:CD:5E:99:54:9A:E3:3B:DF:06:19:D6:72:EB
Certificate issuer: /CN=A9110D07/serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289
Certificate serial: 0207
Authority key identifier: 4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/5B66C6FEB4DB11F0B3DC6D7BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:32:12 +0000
ROA not before: Sat 13 Dec 2025 03:02:54 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 152300
IP address blocks: 2001:df3:51c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl
rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:22:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 519 (0x207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110D07, serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289
Validity
Not Before: Dec 13 03:02:54 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a4781c-d260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:64:21:a4:6a:a3:a5:58:77:e0:5a:0e:20:71:
38:78:14:92:66:7f:b1:44:99:3c:2a:aa:96:97:8e:
12:76:e7:fb:b1:ad:72:df:93:7e:41:de:de:cb:a4:
4a:b7:fa:6d:62:37:1a:6a:03:c4:6d:58:1a:b5:1b:
a9:dc:86:92:42:fa:fb:fd:36:56:40:b1:8d:39:f6:
f1:26:95:f1:20:80:da:86:54:d6:a8:37:e5:22:80:
02:eb:40:29:15:bb:df:0c:4e:21:ed:a3:7d:63:ea:
b2:63:40:01:52:9e:bf:8f:7f:07:34:16:fd:bd:b5:
66:d9:03:e2:15:09:a0:f5:27:c8:c2:f5:58:93:05:
e8:31:22:36:e2:51:83:31:a8:25:c9:ff:74:e1:a7:
10:40:0f:0d:a8:8d:0e:cf:3d:72:ec:78:be:1a:37:
f9:57:a7:40:10:69:ea:83:5c:2a:a3:56:2d:fc:5d:
e6:13:27:e7:34:b6:df:ba:fe:94:34:ce:4d:02:b9:
ac:76:95:e7:5c:7f:63:bb:a4:9f:65:99:6c:9e:72:
dd:3d:74:43:af:ab:43:ef:c5:2b:74:e7:e8:59:fd:
6f:c4:b5:1a:fe:dc:e4:12:9a:7a:2c:de:ae:5b:93:
25:98:50:17:5e:35:21:59:c3:bf:15:76:b7:ec:25:
f2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:78:F9:DC:A5:A3:D1:CD:5E:99:54:9A:E3:3B:DF:06:19:D6:72:EB
X509v3 Authority Key Identifier:
keyid:4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/5B66C6FEB4DB11F0B3DC6D7BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:51c0::/48
Signature Algorithm: sha256WithRSAEncryption
9d:a4:4f:07:02:42:6a:28:ca:f0:53:48:c3:42:f3:f7:db:d4:
10:80:ba:17:13:47:ed:8c:c0:8f:e9:31:d9:00:fb:7b:4d:ac:
af:4e:d4:6d:9c:ef:29:74:d0:00:ee:76:01:cd:27:a8:d4:b4:
4b:e1:26:02:db:3b:cf:8b:bb:0e:44:29:7a:28:6a:4e:7e:32:
6e:b0:b7:da:b1:57:cb:dc:7c:9f:6e:01:78:b7:b9:93:e7:bd:
2e:4f:37:18:fa:ec:18:79:f0:9b:90:13:a8:ae:4a:a9:73:42:
1a:fb:d8:0e:22:49:a2:e6:2c:70:e5:28:e6:0c:b3:b0:4f:8e:
04:3f:8c:0e:50:b5:2e:42:b5:25:76:e6:ee:98:60:d5:92:39:
30:c9:7b:0a:20:b0:e2:89:72:6d:5d:4f:01:af:40:8d:4e:6a:
c2:12:13:d1:a1:48:81:27:fd:c2:c7:aa:63:74:c0:04:6c:7f:
25:83:e9:63:9f:2c:2b:00:b1:aa:4d:86:f7:29:d1:96:e8:0e:
28:c1:3c:83:84:81:0a:80:68:4b:42:75:f7:36:10:7f:0e:71:
9f:37:90:43:4b:33:4c:b8:b7:1b:19:94:2f:22:cf:fa:e2:de:
26:a0:22:c3:8b:9a:50:e1:c4:75:49:54:ab:cb:35:eb:14:01:
bb:eb:94:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:13:39 2026 by rpki-client