
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/501FA9EC5B9011EE82A2243AC4F9AE02.roa
File: 501FA9EC5B9011EE82A2243AC4F9AE02.roa (raw, json)
Hash identifier: HscWMuz55dQ6IwynEL6hfju5uMF68InxWiLLBmdPRnk=
Subject key identifier: B7:85:7F:A0:9C:72:37:E3:2F:49:2B:DE:BB:AF:B7:6D:2A:A1:9A:42
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 2BD0
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/501FA9EC5B9011EE82A2243AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:23:19 +0000
ROA not before: Fri 02 Jan 2026 16:13:27 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 151808
IP address blocks: 2405:9800:ca00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11216 (0x2bd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Validity
Not Before: Jan 2 16:13:27 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a49226-2b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:da:8b:29:21:a0:90:64:99:98:50:a7:0c:86:
5b:1a:73:cf:c6:e5:d1:f8:8b:c9:8b:6f:96:7e:8e:
a9:c2:9c:e4:1f:2a:2f:ae:43:2d:2c:ac:46:56:13:
41:ad:ce:34:f8:a9:9b:1a:11:39:29:38:dd:de:f7:
e0:9c:bd:65:52:f6:e6:dd:b5:71:e0:3a:f8:0b:ea:
e0:e1:d5:2a:a2:b1:cc:29:7e:5e:9d:56:12:23:11:
c0:00:e8:68:e8:20:8b:21:e4:76:24:ea:83:cd:28:
e1:cd:ea:d4:23:96:58:b8:bf:e1:22:fe:d9:53:d0:
63:00:6f:f8:54:40:48:d3:9c:07:19:a6:ac:09:9e:
d6:c6:df:53:f8:3e:15:3d:f7:f3:b2:dd:35:2e:15:
09:65:26:ae:b2:2a:94:90:f0:96:6c:c0:c3:d2:00:
69:97:d8:3c:d2:ab:74:a5:a5:11:2b:ae:8d:ff:38:
ca:94:d8:f0:ab:36:fe:24:6a:95:87:3a:3a:cd:9b:
b8:1c:29:e7:1b:46:14:fc:e9:d4:2c:b9:c6:45:92:
fa:8c:71:c5:72:b3:97:85:02:5e:a5:52:4a:a5:d9:
ae:82:e1:09:e1:88:35:3c:b8:42:fe:a8:0f:39:c0:
c7:86:a2:a7:89:03:95:a9:9c:67:aa:33:f6:de:67:
88:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:85:7F:A0:9C:72:37:E3:2F:49:2B:DE:BB:AF:B7:6D:2A:A1:9A:42
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/501FA9EC5B9011EE82A2243AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:9800:ca00::/48
Signature Algorithm: sha256WithRSAEncryption
9d:f6:69:a2:1e:06:61:bb:8d:88:59:8b:e4:ea:39:0a:25:39:
48:8f:e9:de:c2:63:91:88:2c:46:e9:20:6d:87:14:04:45:0d:
cd:fb:61:e1:98:f7:80:a2:c8:af:60:3d:87:71:de:38:0e:8b:
21:58:e4:b0:e9:c4:91:e5:b6:0b:04:d7:d8:1f:d3:44:1a:a5:
25:27:95:5c:d1:e3:db:c5:f0:f8:4f:ff:56:d3:16:09:4b:83:
f9:11:aa:ff:dd:fd:56:4c:49:a0:32:ba:e7:f3:33:43:ed:8f:
e0:19:9c:cd:54:c1:ba:e4:6b:0f:36:e4:31:3a:7b:2c:59:93:
44:3f:dc:2b:f5:11:bc:f0:60:0c:fd:b8:f5:8d:9c:0b:00:f1:
47:0c:d5:82:2c:ee:13:87:77:f2:21:df:ee:d3:19:35:32:8f:
44:9d:0c:c4:d7:8a:c2:fb:05:33:b4:02:bd:c3:74:21:73:60:
7c:f6:8d:4f:66:54:2a:80:4d:b8:62:64:76:b5:50:36:55:4a:
b4:ed:4f:b6:09:a3:b4:0d:97:09:e0:5a:53:e5:e7:cb:30:ae:
0b:78:a4:55:e6:78:a1:61:c8:93:5f:2d:4b:cd:f9:1e:06:77:
09:47:42:15:46:f8:cb:1e:a9:91:b2:6f:de:ba:da:2b:ff:5b:
80:7b:cc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:08 2026 by rpki-client