
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/48B227F4E8D111F089B2D8B5616F56BC.roa
File: 48B227F4E8D111F089B2D8B5616F56BC.roa (raw, json)
Hash identifier: WkyL76qiMF9RZhUkNMb3RMO30+J1U+zYYA70lfRZGcY=
Subject key identifier: EC:08:97:15:26:04:62:11:14:C8:A5:26:E5:54:E5:3E:E9:21:41:A0
Certificate issuer: /CN=A911D9B2/serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63
Certificate serial: 01E0
Authority key identifier: 91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/48B227F4E8D111F089B2D8B5616F56BC.roa
Signing time: Sun 01 Mar 2026 16:12:36 +0000
ROA not before: Sat 03 Jan 2026 18:23:21 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 139601
IP address blocks: 2401:3a60:5400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl
rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 480 (0x1e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D9B2, serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63
Validity
Not Before: Jan 3 18:23:21 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a46573-3f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:39:18:cf:84:ab:49:f3:66:58:7d:5e:60:8b:
45:02:32:da:f4:6a:58:87:2d:b0:6a:5c:3e:3c:77:
22:a3:8b:6d:24:e0:6f:1d:54:55:95:83:d7:a7:46:
b0:44:5b:a9:a6:e6:81:b4:f7:7d:37:fa:cf:d1:7b:
f0:bd:23:e3:d5:96:d6:76:50:cd:37:69:5c:78:53:
31:a7:b9:fb:e6:56:14:b8:1e:c7:f8:4e:4a:93:52:
ed:27:99:e2:42:92:6a:e4:b2:0a:05:86:d2:06:ad:
69:2f:2e:24:e3:f9:be:ea:e4:bc:c9:e5:d5:74:18:
5e:e2:9d:54:77:d6:88:75:29:d2:83:57:a1:41:92:
43:53:04:01:94:df:7f:d4:a4:9b:d2:b1:fe:e4:3c:
22:25:54:a6:24:8f:d8:b7:65:a9:b9:86:c2:40:7d:
75:10:3c:30:d2:11:2c:6f:77:a1:ee:7c:62:77:29:
bb:e4:f6:35:6e:15:95:4a:32:95:9b:05:6b:6d:e3:
f3:b6:ab:37:67:c3:d2:38:5c:05:fd:69:b5:d4:60:
57:67:17:f5:fc:fe:eb:a9:b6:6d:53:f0:5c:38:07:
37:06:a4:53:7b:f8:91:94:6e:15:df:28:80:66:2b:
4b:fb:15:93:75:2a:cd:9e:f2:b0:25:96:bf:83:e4:
20:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:08:97:15:26:04:62:11:14:C8:A5:26:E5:54:E5:3E:E9:21:41:A0
X509v3 Authority Key Identifier:
keyid:91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/48B227F4E8D111F089B2D8B5616F56BC.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:3a60:5400::/40
Signature Algorithm: sha256WithRSAEncryption
4b:37:93:d1:1b:3a:7b:86:e9:a1:a0:4b:b2:de:f5:ca:a7:5e:
5d:17:c1:f4:39:2f:74:9d:e0:20:d6:c3:df:b3:a0:83:f5:a3:
95:47:97:9f:ce:01:ad:7c:29:85:21:23:95:59:c5:73:54:0f:
fc:e5:e1:53:49:85:af:3f:6c:75:30:7b:c8:58:f1:f9:82:53:
f7:44:3a:82:37:b7:49:0d:60:2e:6e:31:33:20:56:55:b4:04:
60:9f:68:98:f0:81:8a:2b:79:97:3a:b6:de:d0:df:3d:37:fe:
c9:9c:41:e3:e6:90:da:1e:89:0c:3b:11:eb:a4:c2:6f:7a:20:
a9:c6:91:a5:d0:ae:8b:87:ed:11:dc:66:66:80:b0:d8:1c:a4:
14:a9:83:35:8a:84:df:9f:53:75:84:ff:d9:0e:04:31:62:76:
bb:23:44:76:36:3d:58:a8:bb:87:49:e7:09:42:89:8d:4c:94:
bc:0d:cf:48:ce:cc:77:ac:64:fe:d5:c3:a9:3f:42:ec:86:6d:
95:e4:26:57:e8:aa:2c:2b:3c:9a:77:09:ef:eb:1b:d4:34:05:
9e:50:b3:2e:28:79:3f:3a:66:e7:6c:3a:44:7f:26:3e:ff:84:
d3:d0:b8:99:35:0e:c2:7a:a8:45:5d:20:5b:02:f4:96:6e:b4:
e2:6f:04:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:00:39 2026 by rpki-client