
$ rpki-client -vvf rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/63AFC09EC10C11F08F1AFF7FC4F9AE02.roa
File: 63AFC09EC10C11F08F1AFF7FC4F9AE02.roa (raw, json)
Hash identifier: qoQvhlZYfW1wf6kMzBPQtPbBr/Oim0Lh0bB1O4IEF6Q=
Subject key identifier: CA:06:CF:8E:57:83:3B:AA:87:3C:6D:01:D3:5C:55:8E:38:A1:62:81
Certificate issuer: /CN=A91352D1/serialNumber=D9454875966583681472DCC39DF224AAD4A89FAA
Certificate serial: 3D
Authority key identifier: D9:45:48:75:96:65:83:68:14:72:DC:C3:9D:F2:24:AA:D4:A8:9F:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UVIdZZlg2gUctzDnfIkqtSon6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/63AFC09EC10C11F08F1AFF7FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:05:50 +0000
ROA not before: Fri 14 Nov 2025 03:45:40 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 154364
IP address blocks: 2001:df6:50c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.crl
rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UVIdZZlg2gUctzDnfIkqtSon6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61 (0x3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91352D1, serialNumber=D9454875966583681472DCC39DF224AAD4A89FAA
Validity
Not Before: Nov 14 03:45:40 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a3d73e-c645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e6:3e:9d:da:53:65:4c:72:84:27:c3:2f:e6:
90:70:76:f6:5d:90:3b:b5:d3:f3:55:4e:fc:4e:2c:
55:55:6e:04:6f:b7:3e:67:fe:96:23:28:59:58:a8:
4b:40:e7:12:d2:1f:9c:e9:7b:0c:59:3a:90:af:c5:
87:78:62:1d:0b:ff:96:5d:bf:17:16:ab:08:cf:35:
75:5a:33:ea:43:d1:47:e2:28:66:47:fe:b5:ab:d3:
c3:8f:ce:bb:9c:0f:29:4c:c7:15:6d:68:d4:5e:33:
27:08:a7:31:bf:2d:a2:6f:bf:e8:5d:fc:c1:5b:a6:
c6:7a:d5:4b:c7:17:52:f9:bc:4a:bc:68:7a:c5:db:
78:c5:37:f6:d3:8c:a7:a7:fd:ea:09:fe:92:80:fd:
71:4c:58:ba:34:7d:78:f3:97:10:1f:79:5b:9f:90:
15:2c:ea:5f:cc:a9:71:a1:52:1e:6f:8d:22:3a:27:
13:79:33:38:ca:40:91:51:54:d3:8e:37:14:0c:1e:
bd:1e:6a:d0:29:2c:43:7a:15:21:9d:27:bf:08:e6:
14:13:2a:ea:f1:bd:98:39:bd:bc:61:c1:82:50:0d:
47:c0:e1:2d:67:a6:55:99:55:df:f1:ae:cc:05:6f:
ac:67:a7:8f:02:91:ad:35:20:27:d7:a6:0a:e7:8f:
5e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:06:CF:8E:57:83:3B:AA:87:3C:6D:01:D3:5C:55:8E:38:A1:62:81
X509v3 Authority Key Identifier:
keyid:D9:45:48:75:96:65:83:68:14:72:DC:C3:9D:F2:24:AA:D4:A8:9F:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UVIdZZlg2gUctzDnfIkqtSon6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/63AFC09EC10C11F08F1AFF7FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:50c0::/48
Signature Algorithm: sha256WithRSAEncryption
a1:d1:1b:90:c8:5e:5a:16:08:4a:79:b4:b7:5e:48:a0:29:50:
73:41:c9:11:46:53:d7:fd:86:33:68:8b:c8:5c:ec:8e:23:5f:
ed:89:c8:87:4a:17:cc:2b:d5:4c:dd:9b:8b:f3:04:01:e1:d8:
fd:3b:b0:9c:e0:b0:ba:72:0e:77:14:b5:54:d7:30:69:66:9a:
cb:54:d7:3d:fb:69:78:e7:2c:84:f2:cb:c5:bb:71:fc:f0:c4:
df:c3:cb:1c:4a:97:25:ac:01:f8:ff:df:bb:4e:8e:49:ac:cf:
5b:bd:4a:79:78:3e:d9:08:bd:c2:21:88:f5:01:6a:5a:fd:fe:
79:36:77:28:54:0c:47:a2:73:3a:ff:43:f2:b2:15:fb:ad:69:
b0:45:70:52:25:7a:36:31:40:a2:5f:05:01:e4:ec:63:f7:2a:
b6:a0:e7:aa:75:df:64:cc:2b:55:05:e2:d9:63:33:8a:82:ab:
d9:e6:8e:65:47:3e:fa:45:84:2d:01:e8:6b:63:60:1b:d8:2e:
e1:c0:4b:d1:8a:78:fd:fa:c0:99:95:de:ff:48:b1:77:47:b3:
b3:8b:a1:6b:dd:b7:e8:4b:19:e3:fb:29:23:9f:6f:33:95:3b:
a0:a8:02:0d:88:cd:0c:d4:82:a9:03:4b:bd:ba:36:a0:ab:ab:
c9:f4:e5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:15:51 2026 by rpki-client