
$ rpki-client -vvf rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/07FF86DACF3F11F0AF94352AC4F9AE02.roa
File: 07FF86DACF3F11F0AF94352AC4F9AE02.roa (raw, json)
Hash identifier: axL4DxRLdN4w1oidCM91AwY0+Ml6Zzq4wlYIpZ72Alw=
Subject key identifier: 66:BC:71:66:A8:C6:A1:9F:77:14:E7:29:52:B2:71:74:5E:56:AC:C7
Certificate issuer: /CN=A911862D/serialNumber=D8C673095E82A9B7E7DFCD46580F7831A8D18ACA
Certificate serial: 17D9
Authority key identifier: D8:C6:73:09:5E:82:A9:B7:E7:DF:CD:46:58:0F:78:31:A8:D1:8A:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/07FF86DACF3F11F0AF94352AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:54:51 +0000
ROA not before: Wed 14 Jan 2026 17:14:07 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 134146
IP address blocks: 2001:df4:3fc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.crl
rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:34:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6105 (0x17d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911862D, serialNumber=D8C673095E82A9B7E7DFCD46580F7831A8D18ACA
Validity
Not Before: Jan 14 17:14:07 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a47d6a-035a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:62:dd:1a:8f:a5:4c:df:9d:cf:5e:14:35:a1:
e7:8c:1f:5a:30:93:ab:b3:15:11:0c:15:09:2e:f5:
7a:a7:1b:cb:90:1e:0a:0f:0d:98:3d:d7:03:4e:e6:
d5:b6:d0:93:f9:96:2b:9b:6a:97:ac:64:85:be:d9:
47:d7:c3:40:a9:02:38:c5:0a:c2:18:a4:8c:52:b8:
3e:63:04:25:76:a9:cd:ee:c1:82:f9:0f:05:4d:5f:
c8:b9:c4:d9:f8:c6:47:90:bc:68:d9:71:f2:a4:51:
54:0e:c9:e8:f7:e3:a4:0c:e0:ec:b0:42:98:ec:b1:
81:d2:63:2b:3e:1e:89:d8:7f:bb:1d:15:29:38:12:
ca:a4:cc:15:ff:b9:9f:87:9c:cd:16:41:23:06:58:
f0:00:1d:b9:a2:0a:4b:f8:71:35:11:1b:8f:0e:c1:
91:b4:93:43:eb:35:ff:f6:31:60:b8:ba:42:5a:71:
00:a4:80:9e:20:0e:5f:fc:6b:3e:3b:6c:5b:83:30:
1f:2e:e5:0d:52:88:62:9c:ce:0b:fa:1b:ed:ff:9e:
68:ef:be:3d:3d:83:3f:77:bf:3a:be:29:7f:34:65:
c0:de:b8:71:fd:13:9e:6e:81:95:af:45:b6:42:95:
c7:7e:c4:e5:16:d4:9e:ec:75:63:2a:7a:a9:81:8f:
02:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BC:71:66:A8:C6:A1:9F:77:14:E7:29:52:B2:71:74:5E:56:AC:C7
X509v3 Authority Key Identifier:
keyid:D8:C6:73:09:5E:82:A9:B7:E7:DF:CD:46:58:0F:78:31:A8:D1:8A:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/07FF86DACF3F11F0AF94352AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:3fc0::/48
Signature Algorithm: sha256WithRSAEncryption
1b:69:d0:72:76:96:bc:64:08:3f:46:2c:8f:74:b2:14:9a:68:
6e:0f:0c:24:78:2d:18:ed:d7:ba:1c:28:24:87:e8:e2:69:ea:
62:70:04:0c:57:da:7b:89:cd:b5:11:47:6c:85:7b:05:66:cf:
b5:6d:bd:a1:79:2d:88:0a:5d:c0:fb:62:4c:c5:c1:16:db:60:
b3:69:4b:5c:6a:2a:3a:a5:e9:a1:c8:1d:d1:70:f8:54:90:8f:
51:80:4b:84:26:8b:88:ef:86:15:77:d7:37:c7:ce:6c:e3:d2:
da:d1:d5:7b:90:30:2f:25:01:32:7f:87:61:c7:3c:84:31:4a:
b0:8a:6a:2e:91:c8:a1:b3:58:28:fa:b6:2e:a0:d5:92:bb:ae:
e8:23:33:ff:23:85:d9:a4:73:98:cc:ad:70:06:b9:23:cf:b1:
49:0e:7a:45:a5:59:25:5e:15:b9:f4:35:a9:c1:57:f1:cb:5b:
db:a3:a4:12:a1:f5:2c:02:e9:59:ab:b9:c4:8c:30:a2:01:18:
cb:25:b1:36:74:79:c9:48:3f:fa:72:4b:06:46:5e:67:d8:0c:
12:1b:d3:e4:4a:a0:bd:4b:db:6d:1b:06:4d:36:77:1e:7d:1f:
21:dc:30:10:5d:fe:a5:31:d9:51:57:fb:c3:e1:e4:0b:ca:a4:
6f:ae:bc:4b
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICF9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTg2MkQxMTAvBgNVBAUTKEQ4QzY3MzA5NUU4MkE5QjdFN0RGQ0Q0NjU4MEY3ODMx
QThEMThBQ0EwHhcNMjYwMTE0MTcxNDA3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0N2Q2YS0wMzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA22LdGo+lTN+dz14UNaHnjB9aMJOrsxURDBUJLvV6pxvLkB4KDw2YPdcDTubV
ttCT+ZYrm2qXrGSFvtlH18NAqQI4xQrCGKSMUrg+YwQldqnN7sGC+Q8FTV/IucTZ
+MZHkLxo2XHypFFUDsno9+OkDODssEKY7LGB0mMrPh6J2H+7HRUpOBLKpMwV/7mf
h5zNFkEjBljwAB25ogpL+HE1ERuPDsGRtJND6zX/9jFguLpCWnEApICeIA5f/Gs+
O2xbgzAfLuUNUohinM4L+hvt/55o7749PYM/d786vil/NGXA3rhx/ROeboGVr0W2
QpXHfsTlFtSe7HVjKnqpgY8CtQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFGa8cWao
xqGfdxTnKVKycXReVqzHMB8GA1UdIwQYMBaAFNjGcwlegqm359/NRlgPeDGo0YrK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODYyRC8zMjg3OUQzQUU4
QkExMUU3OEE2QTcwNDJDNEY5QUUwMi8yTVp6Q1Y2Q3FiZm4zODFHV0E5NE1halJp
c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJNWnpDVjZDcWJmbjM4MUdXQTk0TWFqUmlzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTg2MkQvMzI4NzlEM0FFOEJBMTFFNzhBNkE3MDQyQzRGOUFFMDIvMDdGRjg2REFD
RjNGMTFGMEFGOTQzNTJBQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN9D/AMA0GCSqGSIb3DQEBCwUAA4IBAQAbadBydpa8ZAg/RiyP
dLIUmmhuDwwkeC0Y7de6HCgkh+jiaepicAQMV9p7ic21EUdshXsFZs+1bb2heS2I
Cl3A+2JMxcEW22CzaUtcaio6pemhyB3RcPhUkI9RgEuEJouI74YVd9c3x85s49La
0dV7kDAvJQEyf4dhxzyEMUqwimoukcihs1go+rYuoNWSu67oIzP/I4XZpHOYzK1w
Brkjz7FJDnpFpVklXhW59DWpwVfxy1vbo6QSofUsAulZq7nEjDCiARjLJbE2dHnJ
SD/6cksGRl5n2AwSG9PkSqC9S9ttGwZNNncefR8h3DAQXf6lMdlRV/vD4eQLyqRv
rrxL
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:13:59 2026 by rpki-client