
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/66D426F0E55D11F0B49EA6E0396F56BC.roa
File: 66D426F0E55D11F0B49EA6E0396F56BC.roa (raw, json)
Hash identifier: vd4a1cc9Xp0q9vrR1OOEM0LC4eCbdB/9o/CPElQoT8U=
Subject key identifier: 99:1C:51:49:8E:0B:92:B6:C5:C1:6E:01:9D:76:A1:29:5F:0C:DD:51
Certificate issuer: /CN=A9147493/serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27
Certificate serial: 0846
Authority key identifier: 8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/66D426F0E55D11F0B49EA6E0396F56BC.roa
Signing time: Sun 01 Mar 2026 17:24:01 +0000
ROA not before: Tue 30 Dec 2025 08:56:17 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 139655
IP address blocks: 2001:df1:6f80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl
rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:42:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2118 (0x846)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147493, serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27
Validity
Not Before: Dec 30 08:56:17 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a47631-16fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fc:9c:5d:05:a0:7a:7f:99:30:06:29:eb:42:
56:ef:ba:97:a9:82:72:a1:78:52:0a:d0:95:13:54:
cb:76:f6:0e:5c:e7:b7:79:8a:5c:b6:19:f6:d3:0b:
ec:8f:23:b3:02:bf:c1:82:d2:60:be:87:45:35:4e:
c8:71:9a:80:35:58:4f:0d:9e:2e:97:4f:b7:5b:15:
0e:66:bc:74:e4:ef:d1:49:25:48:bb:a5:f3:05:c3:
cc:97:2e:9a:60:d6:ab:47:e4:b5:6b:e8:99:7b:a3:
fe:fd:0a:30:eb:b7:32:05:ba:ba:af:ca:b7:87:3c:
10:6f:c2:af:87:68:f2:a4:19:79:9e:93:d7:02:00:
67:5f:33:0d:75:27:6c:30:23:c9:23:56:55:34:dc:
28:64:a5:68:c8:1d:e4:8a:66:4e:2d:f8:01:6f:e0:
f1:3d:b9:e7:df:64:95:9a:76:28:2d:4e:e9:b9:52:
9e:18:83:70:dc:74:ac:b6:ec:a5:bd:16:32:90:cc:
c6:79:79:53:0e:3a:92:90:07:05:c6:fa:72:f1:d5:
0e:e7:f7:66:6b:dc:3a:1e:54:ca:75:00:13:ce:a0:
6c:cc:e7:67:e2:4b:09:4b:f3:c6:86:ed:14:dc:f8:
99:d5:3c:5f:d9:d9:2d:73:39:e3:69:72:ef:27:43:
25:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1C:51:49:8E:0B:92:B6:C5:C1:6E:01:9D:76:A1:29:5F:0C:DD:51
X509v3 Authority Key Identifier:
keyid:8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/66D426F0E55D11F0B49EA6E0396F56BC.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df1:6f80::/48
Signature Algorithm: sha256WithRSAEncryption
66:2e:a6:be:54:b9:bf:ee:63:fe:0a:22:46:3c:2a:32:11:23:
a3:1f:ea:ca:9d:b6:6d:22:2b:43:16:b0:75:8e:81:75:48:37:
40:53:79:36:6a:05:56:52:14:a3:71:f6:45:8e:ab:1e:36:f0:
0f:40:34:0d:0c:ef:c7:94:84:36:98:85:b2:da:cc:01:c5:6f:
a7:15:6d:8f:92:90:0a:fd:17:ba:ea:3a:4d:f1:87:6e:f5:81:
c4:8a:ba:e7:ff:a6:6d:a0:d0:59:82:95:97:3c:7f:47:b5:cb:
6d:d9:ed:d7:2e:62:4f:65:5c:89:19:e5:5a:39:23:67:c4:08:
7e:d5:0a:46:9a:0e:f3:48:ae:84:40:8a:6d:33:78:9a:f9:85:
83:cf:87:e7:a5:99:7f:7b:34:d5:b1:11:02:1b:7a:2a:3b:13:
3c:4a:c8:68:bc:3a:ad:e3:a0:22:23:aa:96:07:c9:aa:eb:22:
e2:cc:30:ed:2a:f6:0a:f9:89:fa:c0:ba:b9:f5:f7:27:e5:b3:
ea:75:f3:23:3a:49:d4:80:75:66:ed:1e:69:1e:50:e2:77:56:
29:91:d7:21:0d:07:f8:26:2d:2d:00:51:f5:41:98:ca:a2:8c:
82:3d:15:a1:56:3a:1e:5d:c3:bc:91:f8:c9:4a:9e:2f:98:51:
ff:19:2b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:43:23 2026 by rpki-client