
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/6A5F29CED8A511F0B3F453F094D3641D.roa
File: 6A5F29CED8A511F0B3F453F094D3641D.roa (raw, json)
Hash identifier: x8Gadu5mzZc6qu26lRbm5uUV5MWN8eTQq1KShULlErA=
Subject key identifier: D5:AF:68:F6:33:55:51:EB:E3:C7:F8:21:E8:DE:59:04:B2:8F:88:37
Certificate issuer: /CN=A911BDA9/serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA
Certificate serial: 0138
Authority key identifier: B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/6A5F29CED8A511F0B3F453F094D3641D.roa
Signing time: Sun 01 Mar 2026 11:07:32 +0000
ROA not before: Sun 14 Dec 2025 04:29:01 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 152698
IP address blocks: 2001:df4:13c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl
rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:18:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312 (0x138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BDA9, serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA
Validity
Not Before: Dec 14 04:29:01 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a41df4-2140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1b:db:60:e0:98:7e:bb:97:95:da:ef:aa:bc:
31:77:f7:c3:90:96:92:fd:6f:98:15:d4:b2:c7:4f:
01:93:7d:8c:b6:d1:8f:c2:2e:cf:80:47:64:68:fa:
ad:59:fd:f9:49:c7:35:a4:20:5a:f8:77:ca:d6:2f:
39:7c:da:59:cd:ca:d9:fd:3e:fe:6d:89:4d:10:bf:
6f:05:f4:b6:10:78:5b:1a:1b:40:7e:28:b2:b6:e2:
98:d2:8d:ae:91:77:21:d2:6f:9b:bd:e3:ca:c3:0e:
ee:3c:4b:49:23:ee:54:fc:69:70:e8:7b:5d:14:94:
d1:99:e7:6d:11:30:68:1e:10:1b:30:9b:1e:cd:64:
02:f1:a9:d9:81:2b:9e:de:8e:40:35:b5:fc:0f:14:
46:de:26:8c:c1:c6:9d:27:e4:5c:1e:0e:00:b6:95:
25:da:c4:d3:52:ec:5b:1f:2b:7e:75:b7:f2:a3:47:
4a:7a:91:ca:a8:4d:a7:e6:35:bc:5d:ab:1a:86:9f:
b4:9a:fe:bd:48:25:1f:f9:d9:73:e6:37:1c:e4:53:
4d:35:d1:b7:5f:51:f1:f4:5f:f4:80:63:93:be:75:
57:30:b1:6c:56:21:ca:54:02:f0:5d:72:46:9f:45:
f1:99:5f:09:ec:f1:31:99:dc:1b:b3:c8:19:14:f4:
d0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AF:68:F6:33:55:51:EB:E3:C7:F8:21:E8:DE:59:04:B2:8F:88:37
X509v3 Authority Key Identifier:
keyid:B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/6A5F29CED8A511F0B3F453F094D3641D.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:13c1::/48
Signature Algorithm: sha256WithRSAEncryption
5b:40:20:59:0f:77:60:64:39:ec:1a:db:b6:33:32:5c:43:69:
84:c2:ae:55:0e:2c:ea:26:c6:61:f8:2b:91:41:1a:b8:4d:a8:
d8:89:cd:b6:5e:fc:7e:16:52:1e:18:05:ee:8c:87:4e:94:de:
67:81:29:9e:8d:da:57:19:46:8a:7c:8d:7c:2b:06:8b:52:c0:
f6:6b:ef:b0:03:5b:88:74:3c:38:b2:c6:bb:44:f3:57:35:c4:
a5:83:56:7d:fc:fa:73:f9:e9:c6:1e:c8:4d:68:28:ca:4f:41:
98:6e:95:6e:06:02:e6:b2:51:24:44:99:b7:4c:59:57:5d:44:
bb:c2:27:6e:8a:3d:28:d7:33:14:41:d3:d8:7d:1a:9f:45:1e:
e1:5b:80:50:68:fa:22:5d:21:5f:69:a3:5f:3a:4b:27:7d:47:
b6:27:73:0a:50:9f:89:d6:69:fa:86:1e:cd:2e:c0:e1:01:b0:
cb:3a:72:eb:4c:21:b5:0a:ad:3f:d1:c3:d1:08:30:64:87:dc:
2f:13:9a:97:10:3d:b1:01:de:72:27:fa:25:2c:61:85:10:f6:
e1:3a:1c:6d:9f:08:5c:d2:d5:8d:16:f4:60:d9:3c:a5:2b:57:
05:70:fc:2b:37:dd:40:29:72:9b:0e:f2:c6:fb:3c:9a:33:95:
09:e0:6e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:03 2026 by rpki-client