
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/4F39607ED24311EF919B6D12C4F9AE02.roa
File: 4F39607ED24311EF919B6D12C4F9AE02.roa (raw, json)
Hash identifier: 9hD/dx6imL5ezzVNuHPKFA9H7c+V2kUBFF6Mm8rBJqY=
Subject key identifier: 17:9C:EE:31:40:61:11:E7:EB:CE:87:DB:94:C6:0A:05:AA:16:5B:96
Certificate issuer: /CN=A911E660/serialNumber=4CB0B95B4BDC23314F283EF739A96A7C658C0A6C
Certificate serial: DA
Authority key identifier: 4C:B0:B9:5B:4B:DC:23:31:4F:28:3E:F7:39:A9:6A:7C:65:8C:0A:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/4F39607ED24311EF919B6D12C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:15:49 +0000
ROA not before: Sat 31 Jan 2026 06:25:05 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 137248
IP address blocks: 2001:df4:e5c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.crl
rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218 (0xda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E660, serialNumber=4CB0B95B4BDC23314F283EF739A96A7C658C0A6C
Validity
Not Before: Jan 31 06:25:05 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a43c05-9d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c5:1c:26:d5:b2:ab:14:7f:1b:63:6a:7e:64:
24:37:d8:d4:16:e8:e5:23:c1:f6:6a:71:44:55:05:
ef:c9:21:5f:08:85:67:86:fd:56:ad:09:00:13:23:
b0:68:20:64:46:6d:40:3a:2f:d4:19:43:68:72:e1:
69:50:ef:6e:59:5c:bb:93:ba:6c:e4:3e:9e:21:87:
02:b1:31:f3:db:11:e2:b6:a0:e6:61:62:72:dc:c9:
aa:8a:1e:47:4c:fc:c1:e1:11:1e:ee:e9:18:9b:9c:
de:7e:69:03:94:7a:41:e0:0b:86:4e:4c:21:14:d4:
82:1b:dd:e4:a3:49:a5:17:bf:e1:fa:63:8a:a5:e5:
ff:f5:7b:50:c1:08:f3:c8:02:9f:6c:33:61:a4:15:
0e:60:5c:5c:e6:41:89:d6:8b:a2:0a:f5:ba:82:37:
4d:f7:48:40:1b:b3:6c:16:e1:20:ea:b7:b1:d3:90:
9b:02:fb:19:f0:af:be:b6:e8:4e:14:65:e3:a2:1a:
7d:af:cb:50:2e:00:20:8e:3f:e6:23:e8:cb:c9:bd:
7b:d3:2d:94:24:a3:76:be:fe:a4:91:66:f7:22:60:
68:93:de:3e:09:52:64:75:35:68:85:7e:36:ea:63:
53:0a:39:01:5d:25:3c:3c:1f:92:a9:ea:3e:4b:51:
dc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9C:EE:31:40:61:11:E7:EB:CE:87:DB:94:C6:0A:05:AA:16:5B:96
X509v3 Authority Key Identifier:
keyid:4C:B0:B9:5B:4B:DC:23:31:4F:28:3E:F7:39:A9:6A:7C:65:8C:0A:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/4F39607ED24311EF919B6D12C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:e5c0::/48
Signature Algorithm: sha256WithRSAEncryption
5b:b6:e0:46:ff:35:ac:fe:b8:31:77:21:65:f1:6c:e5:19:3b:
87:90:a1:6f:e4:46:b7:6b:f0:0f:a8:c4:a2:dc:23:15:5b:b4:
1f:55:e7:ee:be:9c:9f:13:5e:1c:bd:19:13:b0:84:bb:00:c7:
c4:6f:07:bd:d8:a1:aa:16:a0:ab:f4:e5:22:7c:ff:ad:c9:ee:
46:9a:9a:c5:f5:a1:22:59:b8:62:c4:f1:2f:14:5f:1e:9d:8c:
87:ab:39:1e:27:5b:a9:8f:5c:28:10:78:ed:c4:f1:2a:0a:33:
86:08:7f:e4:3b:31:01:dc:3f:97:13:86:73:36:9d:04:31:97:
3f:24:b0:2e:aa:b2:20:d2:79:37:28:94:6c:d2:3e:ef:58:01:
55:26:56:61:27:49:f9:02:e9:84:9e:12:91:30:15:1c:24:2d:
e5:c0:e0:3c:84:90:3b:b0:10:d3:a1:13:c8:5d:13:4d:e0:ed:
54:18:34:8f:80:77:9f:e3:4f:4b:ff:cf:cf:1f:72:62:b3:32:
be:2c:19:69:2d:a1:40:2c:8f:6e:d7:ab:31:8e:84:9e:a1:e4:
d8:12:8d:d0:06:7a:5d:c9:d8:e6:d0:99:08:2b:90:5d:f2:be:
34:b1:78:0e:dc:95:bc:ec:b5:7f:07:75:20:0e:74:fc:ac:a4:
69:84:9a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:01:29 2026 by rpki-client