
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/D4AECB7A701611EF824F7281C4F9AE02.roa
File: D4AECB7A701611EF824F7281C4F9AE02.roa (raw, json)
Hash identifier: gSKNogEshZnmN/3zaUCV8zHvFUQUbigi4NIpUM9EKFQ=
Subject key identifier: B1:CB:A9:A6:94:6A:E8:92:52:FD:60:83:F1:FE:53:1D:EC:DB:99:22
Certificate issuer: /CN=A913A7A6/serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C
Certificate serial: 0AA7
Authority key identifier: 90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/D4AECB7A701611EF824F7281C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:00:49 +0000
ROA not before: Thu 30 Oct 2025 20:09:10 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 58877
IP address blocks: 2405:2d00::/32 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl
rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:51:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2727 (0xaa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A7A6, serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C
Validity
Not Before: Oct 30 20:09:10 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a44691-4d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d4:9f:57:af:1b:67:5b:48:91:0d:4d:49:9b:
19:d8:48:70:a7:a3:29:2b:cd:9b:35:78:6c:c5:6e:
d1:2b:17:54:f8:80:44:0d:12:7b:66:dc:0d:ef:60:
aa:6f:50:b0:0a:58:2d:64:93:07:7f:db:63:00:fc:
31:76:7c:c6:ba:ab:45:55:dd:d2:29:47:1f:1d:e1:
d5:7f:dc:90:22:8c:51:b4:f5:a6:a6:d1:d4:38:6a:
f1:2e:2b:24:42:12:48:df:27:b6:01:39:61:63:4d:
15:cc:43:12:95:02:84:ee:d4:86:12:95:8e:8d:85:
55:28:2d:6f:21:ae:28:a8:f5:0a:31:df:6c:6f:c2:
81:af:3b:a3:cd:0e:72:17:f1:b5:7a:f0:a1:03:ed:
7b:43:b5:fa:01:d7:77:b7:08:98:fb:3f:fa:98:d3:
8b:7b:22:57:88:1e:a2:7b:e9:0d:4e:29:a0:2a:ac:
d1:aa:7c:ab:6e:77:57:c0:14:72:f6:59:86:90:ce:
41:da:45:d1:47:c5:10:d5:6f:35:aa:36:34:7a:34:
d1:e7:78:3a:39:37:08:3e:c4:43:56:79:3d:3a:ac:
71:d0:cb:36:57:2d:d8:56:b0:50:85:3a:60:0c:e4:
df:ef:fa:7d:1c:90:ee:77:4a:fc:53:92:fc:7f:a2:
c9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CB:A9:A6:94:6A:E8:92:52:FD:60:83:F1:FE:53:1D:EC:DB:99:22
X509v3 Authority Key Identifier:
keyid:90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/D4AECB7A701611EF824F7281C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:2d00::/32
Signature Algorithm: sha256WithRSAEncryption
60:0c:fd:ca:77:4f:f6:99:5c:14:19:47:85:f9:80:f7:98:f4:
c1:73:d3:26:5e:91:56:a7:cc:64:b5:35:c4:07:bf:e3:72:b9:
6f:08:11:8b:a6:1a:c6:ec:c1:1e:4f:1c:a6:f5:91:82:6b:65:
10:88:80:87:29:0b:05:a6:76:01:63:37:2a:b7:27:a8:b1:a0:
b9:8d:f6:a5:f1:d8:f0:fb:61:d8:0a:b3:73:e5:3c:b3:0d:23:
03:a4:39:f7:22:0b:53:32:85:38:7e:16:b7:8e:7b:41:79:52:
ff:21:7e:70:fa:3b:ab:02:14:aa:b7:01:e4:db:0b:1d:0e:8b:
e5:2e:b1:a2:55:34:91:b7:79:de:8a:c8:35:87:03:a2:8f:39:
74:ae:8b:4e:af:e1:a7:91:4e:f5:a1:98:41:6d:62:0e:bb:04:
c0:f6:81:a1:60:38:f7:62:2a:55:52:e6:03:81:81:55:95:1d:
6e:16:81:8d:a6:50:1c:ec:97:eb:29:43:ed:93:ff:46:34:ab:
15:cb:be:74:76:2b:29:39:b5:ce:51:c1:38:31:89:cb:7a:a5:
95:01:a6:fb:e4:ba:17:a0:fc:d6:33:a4:b6:83:ec:0a:07:27:
32:54:9e:9d:f4:2a:4a:95:f7:3c:a6:d9:db:d0:fa:8a:e3:f7:
07:28:5b:98
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgICCqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0E3QTYxMTAvBgNVBAUTKDkwN0IwMzhBREVDN0MzRkE5QzY0OTMwRTY0MTlCMkZC
QkFCOUM4MUMwHhcNMjUxMDMwMjAwOTEwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDY5MS00ZDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApdSfV68bZ1tIkQ1NSZsZ2Ehwp6MpK82bNXhsxW7RKxdU+IBEDRJ7ZtwN72Cq
b1CwClgtZJMHf9tjAPwxdnzGuqtFVd3SKUcfHeHVf9yQIoxRtPWmptHUOGrxLisk
QhJI3ye2ATlhY00VzEMSlQKE7tSGEpWOjYVVKC1vIa4oqPUKMd9sb8KBrzujzQ5y
F/G1evChA+17Q7X6Add3twiY+z/6mNOLeyJXiB6ie+kNTimgKqzRqnyrbndXwBRy
9lmGkM5B2kXRR8UQ1W81qjY0ejTR53g6OTcIPsRDVnk9Oqxx0Ms2Vy3YVrBQhTpg
DOTf7/p9HJDud0r8U5L8f6LJkwIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFLHLqaaU
auiSUv1gg/H+Ux3s25kiMB8GA1UdIwQYMBaAFJB7A4rex8P6nGSTDmQZsvu6ucgc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTdBNi80REI5NDQzQTcz
QjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9rSHNEaXQ3SHdfcWNaSk1PWkJteS03cTV5
QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tIc0RpdDdId19xY1pKTU9aQm15LTdxNXlCdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0E3QTYvNERCOTQ0M0E3M0I2MTFFQTlCOEMxRjVDQzRGOUFFMDIvRDRBRUNCN0E3
MDE2MTFFRjgyNEY3MjgxQzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJAUtADANBgkqhkiG9w0BAQsFAAOCAQEAYAz9yndP9plcFBlHhfmA
95j0wXPTJl6RVqfMZLU1xAe/43K5bwgRi6YaxuzBHk8cpvWRgmtlEIiAhykLBaZ2
AWM3KrcnqLGguY32pfHY8Pth2Aqzc+U8sw0jA6Q59yILUzKFOH4Wt457QXlS/yF+
cPo7qwIUqrcB5NsLHQ6L5S6xolU0kbd53orINYcDoo85dK6LTq/hp5FO9aGYQW1i
DrsEwPaBoWA492IqVVLmA4GBVZUdbhaBjaZQHOyX6ylD7ZP/RjSrFcu+dHYrKTm1
zlHBODGJy3qllQGm++S6F6D81jOktoPsCgcnMlSenfQqSpX3PKbZ29D6iuP3Byhb
mA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:10 2026 by rpki-client