
$ rpki-client -vvf rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/845CB214C4CB11EEBCFEE782C4F9AE02.roa
File: 845CB214C4CB11EEBCFEE782C4F9AE02.roa (raw, json)
Hash identifier: Qera6cb4hW7ZQ0YN5X9z0T9vL9IxqpRFf9/A33iIrFA=
Subject key identifier: C4:9D:BB:54:BA:0D:A6:E0:5A:72:53:F5:AA:6E:8C:7D:B9:BB:AC:4B
Certificate issuer: /CN=A912250C/serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8
Certificate serial: 01BA
Authority key identifier: 63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/845CB214C4CB11EEBCFEE782C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:04:41 +0000
ROA not before: Wed 03 Dec 2025 02:33:46 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 151630
IP address blocks: 2001:df3:7240::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl
rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442 (0x1ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912250C, serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8
Validity
Not Before: Dec 3 02:33:46 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a43969-bacb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:48:ed:27:ef:ba:3c:44:24:a0:0b:52:ab:e3:
89:6f:58:b6:d5:26:75:66:13:c7:ae:0a:3e:43:ad:
a1:04:d8:df:7b:c3:83:32:03:c0:19:16:73:9d:e6:
b9:28:1b:62:18:88:be:0a:39:f4:f5:f1:76:65:62:
3f:c8:53:d9:b8:44:94:e1:d6:15:f3:9a:2c:3b:0a:
38:71:0f:b1:a8:59:52:d2:d4:80:9d:1c:85:53:d2:
2b:2b:04:75:f4:73:f8:b2:dc:f3:ec:22:84:91:12:
75:b2:88:4f:68:75:c0:8e:4b:19:f0:7d:36:fa:e0:
48:0d:42:37:dc:b3:a9:97:d0:c3:36:65:a0:08:1a:
98:7a:ab:9e:90:0e:7b:67:a9:dd:1b:b7:91:89:c3:
fb:c1:7e:2b:b0:93:d4:30:d3:21:bb:1f:c3:6f:6c:
74:58:8c:ea:10:8a:74:76:97:25:d5:5c:5f:32:73:
e1:ad:c7:ef:64:7e:e9:7d:a5:ac:50:b0:80:75:8b:
91:25:ba:94:ea:2a:65:94:a3:46:38:24:5a:a0:1a:
b4:49:b2:f3:96:2c:8d:65:ab:c0:fa:f7:ac:47:8a:
c6:45:10:60:ea:d9:36:bf:65:e4:8d:6b:8e:32:01:
6e:38:ab:5a:4a:35:d3:64:48:4a:c6:ba:20:59:2c:
c8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9D:BB:54:BA:0D:A6:E0:5A:72:53:F5:AA:6E:8C:7D:B9:BB:AC:4B
X509v3 Authority Key Identifier:
keyid:63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/845CB214C4CB11EEBCFEE782C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:7240::/48
Signature Algorithm: sha256WithRSAEncryption
33:0d:c6:30:73:a7:18:d5:18:8b:87:30:69:a3:da:e1:2b:da:
63:fd:59:36:15:67:4b:29:3a:38:0a:36:0c:4d:5e:54:16:87:
be:32:b0:13:e7:f0:a5:ec:18:e2:42:a8:38:96:01:a9:3a:4e:
95:62:ee:6c:0a:40:1c:fa:dc:39:44:fb:bc:64:88:dc:92:89:
c6:2b:c5:df:ae:48:a8:65:8a:8d:91:2b:2c:4e:0b:e6:b4:98:
cb:c8:f7:fc:74:52:1e:4e:ee:a6:a0:23:bb:5f:13:d9:1a:96:
8d:fe:ee:64:11:1a:71:43:7a:50:e3:de:44:9e:b6:51:95:18:
2d:2e:85:20:0c:23:85:87:e2:a0:00:c7:9c:aa:fc:4f:8e:9c:
f6:cc:85:8d:e1:01:5a:1f:dd:8b:87:02:74:57:15:fd:b5:c0:
96:bb:3c:b0:9c:52:0a:6c:61:f5:57:cf:70:7d:e8:12:a9:2a:
25:b1:6c:8d:ca:9c:7b:54:95:51:14:91:68:d1:83:a0:8d:d2:
91:1b:9d:54:81:70:72:18:9c:90:6a:ca:97:d2:d4:84:96:59:
ba:45:86:22:53:7c:68:b9:b9:26:24:25:16:ca:57:99:b3:6e:
c8:3b:e3:d6:36:1f:87:08:55:a8:a3:06:3a:6c:c8:aa:dd:15:
bc:87:3a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:42 2026 by rpki-client