
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/723720464ABE11EFA87EE85BC4F9AE02.roa
File: 723720464ABE11EFA87EE85BC4F9AE02.roa (raw, json)
Hash identifier: /neZtyP8CB+i0xa/1UQQQx4y8u+LD3tIdTWWjj7eFPE=
Subject key identifier: 03:2E:D7:C8:E3:03:3A:10:53:8A:DD:87:63:B9:CA:76:76:10:CE:69
Certificate issuer: /CN=A911BDA9/serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA
Certificate serial: 0137
Authority key identifier: B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/723720464ABE11EFA87EE85BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:07:31 +0000
ROA not before: Tue 05 Aug 2025 06:44:17 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 153169
IP address blocks: 2001:df4:13c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl
rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:18:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311 (0x137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BDA9, serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA
Validity
Not Before: Aug 5 06:44:17 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a41df3-1bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:ab:29:1e:29:00:b4:40:c5:7d:57:33:44:
46:48:56:81:c0:5b:a1:86:85:2c:61:65:00:6c:5c:
e5:e9:fa:f2:3d:4b:0b:90:00:77:c6:40:24:44:c3:
29:8f:ad:0c:20:ee:ea:5f:04:d8:c2:2c:7f:8d:91:
95:f9:7f:fc:e9:57:94:13:56:1c:3e:23:bf:bd:ee:
2b:79:93:98:fa:1a:07:8a:df:ba:30:20:20:bb:06:
43:87:63:df:b8:98:ca:87:17:99:6e:6b:b6:29:e7:
43:96:62:10:a4:65:84:71:0a:61:35:e8:a0:85:ed:
c5:0f:5d:a0:dd:b8:be:a9:2c:c6:7f:21:16:c9:98:
35:a2:30:33:5a:f5:bc:85:9e:27:a8:eb:31:ba:57:
93:03:86:a6:3a:bc:77:d8:06:62:01:15:3c:77:03:
de:85:27:1d:6b:78:41:b5:2a:d9:de:0c:d3:da:c6:
54:08:ff:ab:63:dc:e5:bb:0a:22:da:af:39:0a:72:
e1:e2:0b:e8:26:54:73:da:cc:47:fc:cb:e7:ea:8c:
3c:28:39:15:61:20:04:60:70:ae:15:a4:82:37:61:
47:a3:95:9d:e7:72:5f:50:00:c9:70:bf:bd:38:dd:
1c:12:b4:cb:e8:2a:81:b0:bb:40:82:b9:3e:13:ba:
ab:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2E:D7:C8:E3:03:3A:10:53:8A:DD:87:63:B9:CA:76:76:10:CE:69
X509v3 Authority Key Identifier:
keyid:B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/723720464ABE11EFA87EE85BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:13c0::/48
Signature Algorithm: sha256WithRSAEncryption
6e:8f:42:20:4e:71:c9:6b:d2:71:c9:58:6f:c8:7b:ef:64:dc:
b6:55:8b:c1:e6:67:a0:cb:4a:46:38:89:e8:e8:7f:1e:6d:2f:
d6:59:de:1f:1e:2f:57:84:d3:07:5f:79:c3:cb:89:bf:f7:ac:
32:6a:f1:4b:09:28:8f:70:7c:26:74:1c:3d:a7:c1:00:97:2e:
15:3e:b3:42:0b:13:f8:e9:62:04:da:46:7d:e9:d5:df:57:b2:
f9:1a:05:17:cc:30:58:f5:c6:6b:cc:d7:30:22:49:31:46:81:
6d:73:5b:c2:cc:18:c1:ca:97:9e:64:57:d6:59:33:26:4d:cb:
f0:9d:54:e4:13:d0:62:f5:69:3e:ee:3d:11:65:8a:3a:74:4a:
61:a3:52:4b:01:34:34:25:e6:20:05:30:2a:e4:01:ba:d8:8b:
64:92:62:84:87:3c:82:5f:6f:0b:65:f2:ed:e8:bc:7d:7b:1b:
05:fb:58:cd:7b:87:ba:8f:65:90:0c:6b:b5:8a:98:6d:7e:2b:
88:db:af:9d:14:01:34:d1:66:25:28:4f:62:78:51:42:fd:25:
3f:87:b3:cf:a4:85:ed:1d:5f:ca:80:6e:dd:69:1e:47:45:13:
7d:05:48:9f:d3:29:05:7b:e2:8e:f0:a0:bd:d5:a7:94:e0:2a:
c0:2b:e9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:32:32 2026 by rpki-client