
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/D24B5EDE93C911F09C542E6EC4F9AE02.roa
File: D24B5EDE93C911F09C542E6EC4F9AE02.roa (raw, json)
Hash identifier: UlL9M0vKgUBxqKfzpHEpubEGnB55JjrHd/jz/xAx3sE=
Subject key identifier: 02:98:24:27:47:11:EC:D6:C7:F0:EB:A2:59:84:BD:8F:F0:F9:18:DE
Certificate issuer: /CN=A911DF56/serialNumber=6493B19F7CBFDF1904BC752AA8E4A34306265405
Certificate serial: 7C
Authority key identifier: 64:93:B1:9F:7C:BF:DF:19:04:BC:75:2A:A8:E4:A3:43:06:26:54:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/D24B5EDE93C911F09C542E6EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:11:42 +0000
ROA not before: Wed 17 Sep 2025 13:25:47 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 154010
IP address blocks: 2402:1460::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl
rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:03:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124 (0x7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DF56, serialNumber=6493B19F7CBFDF1904BC752AA8E4A34306265405
Validity
Not Before: Sep 17 13:25:47 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a3f4be-9a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:26:27:50:2e:db:b7:c6:96:8e:5d:8f:74:f2:
16:8d:f3:65:61:84:5e:49:0e:5e:23:af:0a:98:19:
48:b7:ac:ab:86:10:10:25:4c:8c:ce:24:c7:75:7c:
b4:a0:59:5c:f0:f7:db:f9:09:96:b9:d2:00:4e:77:
7e:5f:3c:fe:cf:93:82:5d:86:5c:93:dc:cf:d7:5d:
33:13:7d:d5:b1:0c:46:d3:c5:7f:86:08:02:23:ac:
61:70:73:66:67:1c:2c:b5:9c:4e:45:c8:ae:6e:7f:
b1:2c:9f:cf:7e:52:14:50:fa:4c:78:e9:e1:8f:87:
74:4a:43:8b:5e:35:16:e7:e2:60:93:c6:2d:dd:15:
fe:cf:f6:7b:41:ed:02:6f:8e:93:96:a1:70:c7:c0:
ae:d7:39:7e:88:4d:6c:6e:2a:86:a4:41:35:4d:d6:
f3:aa:88:4f:05:04:ea:07:d1:bc:99:60:5d:37:80:
4b:11:bb:fc:6e:20:6a:bb:16:9d:02:3a:ae:58:f8:
27:5b:e4:9a:cf:7f:bc:5b:89:93:be:9c:fe:6b:c8:
9d:c2:92:0d:bf:6b:b1:f5:fa:17:c2:9a:33:fc:84:
0e:83:77:8f:62:b9:ba:96:f6:6f:e7:71:2d:26:52:
b7:12:28:fa:a9:4a:f8:23:c3:ed:f9:eb:7a:12:22:
df:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:98:24:27:47:11:EC:D6:C7:F0:EB:A2:59:84:BD:8F:F0:F9:18:DE
X509v3 Authority Key Identifier:
keyid:64:93:B1:9F:7C:BF:DF:19:04:BC:75:2A:A8:E4:A3:43:06:26:54:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/D24B5EDE93C911F09C542E6EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:1460::/32
Signature Algorithm: sha256WithRSAEncryption
94:dd:df:b0:ed:50:e4:b9:b5:85:91:d7:de:47:33:bf:df:24:
6e:1f:03:4d:52:01:3b:97:02:8a:6f:ec:ac:f5:cf:7e:4d:d8:
aa:67:e8:96:67:ee:e9:25:84:c1:18:5d:d3:71:39:97:3e:27:
75:5f:df:9d:ea:ea:03:dc:2a:79:80:d2:b7:8f:da:a5:e2:f4:
0f:56:c3:79:76:a9:3d:40:fa:7a:d1:60:23:ae:a6:70:6d:6b:
0e:ed:1f:6a:01:f3:fe:12:fe:79:9f:cd:32:b9:fc:72:f0:6a:
0a:39:93:09:b0:d6:1a:a8:4b:82:57:ad:38:c4:40:c3:d0:6b:
73:fc:8a:95:f0:9e:6f:5f:54:11:56:7d:b6:ff:b0:f5:ae:8a:
03:d3:3c:41:af:a4:34:40:c1:ab:76:80:a2:b4:2b:88:94:96:
ec:d9:0d:af:35:c8:f0:b4:20:04:97:bd:4d:4c:f8:66:1a:4a:
6a:1e:21:82:f4:07:44:65:82:d5:02:ad:23:96:66:6e:81:92:
c9:ff:82:7e:94:21:2c:1a:7a:ef:6c:f7:12:6f:2f:81:41:23:
05:7b:7b:6f:25:a6:f1:7b:75:9b:e3:5d:66:68:a7:9a:d1:24:
ec:cf:2f:67:0c:dd:38:8d:2a:2e:92:24:60:58:55:ca:45:a1:
8d:51:75:5f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
REY1NjExMC8GA1UEBRMoNjQ5M0IxOUY3Q0JGREYxOTA0QkM3NTJBQThFNEEzNDMw
NjI2NTQwNTAeFw0yNTA5MTcxMzI1NDdaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNmNGJlLTlhMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCsJidQLtu3xpaOXY908haN82VhhF5JDl4jrwqYGUi3rKuGEBAlTIzOJMd1fLSg
WVzw99v5CZa50gBOd35fPP7Pk4JdhlyT3M/XXTMTfdWxDEbTxX+GCAIjrGFwc2Zn
HCy1nE5FyK5uf7Esn89+UhRQ+kx46eGPh3RKQ4teNRbn4mCTxi3dFf7P9ntB7QJv
jpOWoXDHwK7XOX6ITWxuKoakQTVN1vOqiE8FBOoH0byZYF03gEsRu/xuIGq7Fp0C
Oq5Y+Cdb5JrPf7xbiZO+nP5ryJ3Ckg2/a7H1+hfCmjP8hA6Dd49iubqW9m/ncS0m
UrcSKPqpSvgjw+3563oSIt85AgMBAAGjggJhMIICXTAdBgNVHQ4EFgQUApgkJ0cR
7NbH8OuiWYS9j/D5GN4wHwYDVR0jBBgwFoAUZJOxn3y/3xkEvHUqqOSjQwYmVAUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFERjU2Lzc2RjgyMDUwNUJE
MjExRjBCNzM3RDQ1QUM0RjlBRTAyL1pKT3huM3lfM3hrRXZIVXFxT1NqUXdZbVZB
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWkpPeG4zeV8zeGtFdkhVcXFPU2pRd1ltVkFVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
REY1Ni83NkY4MjA1MDVCRDIxMUYwQjczN0Q0NUFDNEY5QUUwMi9EMjRCNUVERTkz
QzkxMUYwOUM1NDJFNkVDNEY5QUUwMi5yb2EwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkAhRgMA0GCSqGSIb3DQEBCwUAA4IBAQCU3d+w7VDkubWFkdfeRzO/
3yRuHwNNUgE7lwKKb+ys9c9+TdiqZ+iWZ+7pJYTBGF3TcTmXPid1X9+d6uoD3Cp5
gNK3j9ql4vQPVsN5dqk9QPp60WAjrqZwbWsO7R9qAfP+Ev55n80yufxy8GoKOZMJ
sNYaqEuCV604xEDD0Gtz/IqV8J5vX1QRVn22/7D1rooD0zxBr6Q0QMGrdoCitCuI
lJbs2Q2vNcjwtCAEl71NTPhmGkpqHiGC9AdEZYLVAq0jlmZugZLJ/4J+lCEsGnrv
bPcSby+BQSMFe3tvJabxe3Wb411maKea0STszy9nDN04jSoukiRgWFXKRaGNUXVf
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:05 2026 by rpki-client