
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/095AF45ECE8911EFBEC5D618C4F9AE02.roa
File: 095AF45ECE8911EFBEC5D618C4F9AE02.roa (raw, json)
Hash identifier: D7h1gktg5+5yyaBrNhzNSFMs7boyS9O5+bm+qSSzUdI=
Subject key identifier: C8:BE:50:EB:56:A1:85:DB:47:6E:21:3A:50:4E:71:FA:C4:79:88:DB
Certificate issuer: /CN=A912BD8E/serialNumber=CA573F0900BF642CB1E03A3B6C45C6969E7723D8
Certificate serial: DC
Authority key identifier: CA:57:3F:09:00:BF:64:2C:B1:E0:3A:3B:6C:45:C6:96:9E:77:23:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/095AF45ECE8911EFBEC5D618C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:15:39 +0000
ROA not before: Thu 29 Jan 2026 05:29:31 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 153495
IP address blocks: 2401:e7e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl
rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BD8E, serialNumber=CA573F0900BF642CB1E03A3B6C45C6969E7723D8
Validity
Not Before: Jan 29 05:29:31 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a43bfb-8e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:45:6b:5c:84:e7:62:b9:34:31:39:19:80:07:
2a:f7:c8:95:0c:56:17:7d:24:3e:94:77:63:30:9d:
48:e7:17:47:42:e0:d1:e4:c2:f7:db:21:4f:c4:61:
8d:04:34:8e:68:a8:b3:26:e3:e0:08:ba:c9:73:f6:
38:d9:30:91:21:e4:44:bc:92:94:5c:8c:68:bd:f3:
39:ab:e0:9b:78:f9:0b:9a:ad:17:0b:3b:be:e7:a3:
26:3c:ed:92:7b:c0:5f:04:d7:e6:b1:02:ab:45:f2:
9c:09:1f:7d:0e:47:65:36:e6:63:79:02:03:1f:0d:
12:f1:69:41:20:67:5e:77:ff:62:8f:c1:dd:5b:ab:
86:3d:dd:f4:49:df:0f:cb:a0:9a:d8:33:24:7f:25:
8a:93:36:b3:c5:2f:b3:9f:1d:33:74:35:e4:39:5f:
3a:ee:8c:6e:e8:23:94:c6:d5:a4:b8:ca:af:6f:24:
a2:e7:44:78:e5:ac:7f:91:84:10:3c:fb:38:d6:b8:
70:2c:31:d7:cc:88:2e:e9:b3:08:b3:2d:b3:70:32:
47:a7:83:f1:83:8a:3f:64:44:89:70:2d:1b:13:05:
d4:17:b3:9a:20:0c:e9:c6:9b:3a:45:5a:9e:25:4e:
7a:3b:ea:c8:76:d4:32:3c:98:98:12:80:36:9a:c6:
e5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BE:50:EB:56:A1:85:DB:47:6E:21:3A:50:4E:71:FA:C4:79:88:DB
X509v3 Authority Key Identifier:
keyid:CA:57:3F:09:00:BF:64:2C:B1:E0:3A:3B:6C:45:C6:96:9E:77:23:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/095AF45ECE8911EFBEC5D618C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:e7e0::/32
Signature Algorithm: sha256WithRSAEncryption
8d:9e:65:b4:8f:2b:b9:ed:a3:4e:ed:04:2b:30:c7:84:31:88:
44:06:05:80:79:d9:54:66:a3:7c:44:0b:d2:09:48:40:9a:ad:
de:93:b3:b6:cb:5a:57:c3:49:cc:4a:f5:f9:35:73:71:d7:ef:
08:48:e3:55:15:fd:73:d9:35:83:ef:cd:4f:1d:57:9b:67:f4:
2c:ba:1e:f1:0f:be:43:65:08:47:2b:d3:0e:f9:a5:0e:a7:c4:
7e:c9:c1:f4:66:fc:27:2b:4b:de:7c:85:c3:df:af:fb:5f:d4:
03:48:07:1e:20:e8:f3:3a:6e:cb:e9:7c:df:c2:65:96:10:64:
08:de:c7:14:a6:e6:4b:47:66:05:76:7a:6c:e2:76:3e:7d:73:
34:bd:68:a1:0b:8c:9a:60:59:82:22:37:dd:ce:92:85:93:67:
65:bb:ad:ff:0c:b2:aa:e8:82:37:ba:0a:4f:f2:64:48:4c:00:
b3:8e:14:e6:2d:22:77:73:e8:e9:f8:5f:6a:b6:7f:2b:48:4d:
4b:08:03:f5:ce:8c:c5:86:a1:92:b2:fd:34:60:65:60:fd:db:
fa:09:6c:9c:df:3e:b9:50:23:f2:15:15:59:67:86:e2:20:8a:
54:27:fa:7a:36:77:f2:8a:d1:66:97:29:b8:ce:a8:52:21:af:
8a:9d:b5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:32:31 2026 by rpki-client