
$ rpki-client -vvf rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/F0FFCBCCF9C911EDAF704E7FC4F9AE02.roa
File: F0FFCBCCF9C911EDAF704E7FC4F9AE02.roa (raw, json)
Hash identifier: y3IxwzZcVIyvXDTK0dR4pibIdUtU+ExL4IB+J5qtwjE=
Subject key identifier: 18:3D:BF:4D:7F:EC:53:32:D4:F1:A7:2C:71:9F:56:0C:DE:FB:6E:2F
Certificate issuer: /CN=A912542C/serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE
Certificate serial: 070B
Authority key identifier: DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/F0FFCBCCF9C911EDAF704E7FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:35:40 +0000
ROA not before: Wed 31 Dec 2025 22:18:26 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 18054
IP address blocks: 2001:df2:33c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl
rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:48:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1803 (0x70b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912542C, serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE
Validity
Not Before: Dec 31 22:18:26 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a46adc-10fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cd:39:32:ac:0d:0c:f3:3a:61:de:53:69:40:
15:18:b1:b9:90:3f:67:e4:62:06:5d:0d:42:e5:a9:
f3:4c:a8:56:cf:c9:61:68:58:53:2c:82:af:d9:b7:
c2:f4:8d:22:50:f1:a9:5b:59:3f:5b:84:f6:89:d6:
0a:e2:38:3f:f7:f2:ba:e2:5b:25:0c:98:3d:0b:f5:
9d:3b:5c:0c:82:5b:c6:18:8e:51:d7:20:3b:23:1e:
62:bf:a1:49:30:c5:b3:87:fc:7d:c5:79:bb:27:d0:
cb:54:78:e9:51:44:de:3d:b2:dd:70:d4:27:ff:a7:
b1:01:e3:00:68:0b:1f:df:4e:78:53:0c:b0:c3:e4:
8b:42:a5:ad:1c:20:d1:fe:0f:76:25:39:d9:61:d0:
3b:06:6a:32:37:0d:fd:9f:8d:26:83:e9:30:a0:9b:
da:55:84:26:32:d5:5d:5c:14:24:a6:2a:ee:64:fb:
a0:d8:38:3a:8a:02:73:39:6c:b2:2d:c7:f1:1c:16:
68:3d:2f:fc:d3:ad:8e:eb:8a:b0:9c:b4:89:f5:4a:
cf:a4:41:c9:2c:b3:79:0a:d1:27:c1:39:67:9b:80:
07:3d:93:4e:1f:fa:e7:28:79:06:9f:7e:82:14:93:
96:5d:3f:31:6a:db:10:b8:a3:8d:93:47:00:5e:36:
0a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3D:BF:4D:7F:EC:53:32:D4:F1:A7:2C:71:9F:56:0C:DE:FB:6E:2F
X509v3 Authority Key Identifier:
keyid:DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/F0FFCBCCF9C911EDAF704E7FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df2:33c0::/48
Signature Algorithm: sha256WithRSAEncryption
78:40:c9:7d:85:77:59:64:cd:67:b0:5e:b2:15:dd:e5:3c:6c:
bb:60:f7:58:5a:69:d5:fb:a9:d3:88:9b:9b:a2:03:0d:3c:01:
70:5f:c1:77:81:96:e0:34:e5:7d:97:79:5e:e3:f0:3b:7d:72:
28:cd:26:af:69:06:ca:18:27:3e:8d:f5:9f:6b:3e:d1:b8:21:
4c:ab:70:e8:07:c9:4f:b3:35:dc:30:00:45:3c:8e:04:d0:e5:
ae:df:f5:de:1b:46:66:f5:7c:31:5b:db:07:88:f8:36:a1:27:
24:5e:1b:58:e7:c9:08:f7:7f:a4:4b:7f:60:05:79:e5:7e:21:
9e:9c:a2:4d:1d:73:75:e2:64:03:cd:54:5d:0f:6c:98:39:79:
8b:90:6b:22:47:20:b0:7d:80:74:51:03:8a:1f:d0:0c:7b:62:
b2:c7:12:42:8c:ee:ed:9b:de:ea:83:33:62:ff:92:0f:90:b7:
1b:82:48:47:f7:bb:bc:73:b5:82:91:cc:a2:fd:3d:6b:45:22:
85:54:af:de:b6:2a:64:6c:32:82:16:23:00:87:20:79:b9:ef:
05:14:94:c5:1e:e0:d1:4e:7b:53:d7:3f:c5:b1:39:6e:8a:89:
89:c4:7c:05:65:52:67:f8:e7:9c:90:fc:12:d9:e4:33:79:4b:
d6:25:c8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:15:16 2026 by rpki-client