
$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/DC7EC870132311ED84EFCD51C4F9AE02.roa
File: DC7EC870132311ED84EFCD51C4F9AE02.roa (raw, json)
Hash identifier: BmXU55Y7VNmEcfor+BN1YyMkewrVosyXq3zFUB1FAd4=
Subject key identifier: 12:9B:3F:3A:22:34:F5:46:35:B7:04:1C:F4:66:45:11:34:7D:2F:2C
Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial: 3763
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/DC7EC870132311ED84EFCD51C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:08:20 +0000
ROA not before: Wed 08 Oct 2025 14:40:45 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 18012
IP address blocks: 2404:150::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:59:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14179 (0x3763)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Validity
Not Before: Oct 8 14:40:45 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a48ea3-2a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:58:09:91:02:70:d1:22:19:6c:71:bf:6f:bb:
8a:ed:0b:40:d0:35:53:f0:bb:65:9c:47:de:22:97:
48:7f:df:c9:ad:66:db:53:1a:fb:6c:b5:f1:62:80:
af:4a:1e:bf:d9:8a:07:d2:3c:c7:a2:ee:ef:ce:bd:
f5:86:1e:66:9e:94:1d:b6:5a:04:9f:c5:de:f3:1e:
5d:20:27:56:d0:9f:96:21:7d:cd:8e:08:37:70:80:
09:9c:5c:74:fa:9f:e0:03:61:ea:d2:c4:0d:70:2f:
bf:ae:b5:a9:17:e2:e4:74:9f:1e:29:49:8f:f5:d4:
ee:32:28:a1:ff:71:d8:ba:9a:2a:04:7b:35:a6:fb:
06:b3:58:d7:a7:5d:61:1e:1f:76:dc:c2:35:00:59:
b9:ef:a9:9c:e9:95:8e:54:17:7a:fb:06:1c:b8:d2:
b2:88:9c:12:86:7c:2e:64:52:82:fc:d5:de:f2:cb:
b8:47:31:4e:ed:d5:d6:8a:9c:1c:a2:a7:c4:73:1d:
68:39:90:00:ea:72:e1:a9:15:b5:27:0a:8b:7d:ef:
6d:2e:51:bc:4d:aa:85:6f:a1:7c:c4:3a:7e:1e:18:
f8:c1:83:9c:e0:95:1a:af:b3:21:7a:6f:93:3a:35:
13:a5:96:7a:04:f3:a1:38:8d:70:48:2c:ca:06:b2:
f5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9B:3F:3A:22:34:F5:46:35:B7:04:1C:F4:66:45:11:34:7D:2F:2C
X509v3 Authority Key Identifier:
keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/DC7EC870132311ED84EFCD51C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2404:150::/32
Signature Algorithm: sha256WithRSAEncryption
18:bb:d4:95:4e:13:9d:84:d7:e9:cd:80:e2:f4:8d:c7:cf:86:
a2:27:3c:0d:cc:2b:1d:0f:97:a2:66:a5:a4:9a:cf:fc:6e:e3:
0a:f1:36:b9:2e:bb:49:9c:eb:51:88:02:32:83:d0:f0:c0:54:
4c:fc:de:cb:2c:ec:2c:81:bc:05:03:07:b9:80:cc:22:49:6e:
66:c1:df:04:cf:73:11:19:20:7c:59:d5:6b:49:5d:c1:8c:0a:
84:00:2a:79:67:2c:c0:46:e9:85:00:ca:ac:59:9b:70:7c:71:
52:4e:21:7a:22:fe:02:b7:ba:48:1c:93:b7:9d:c0:e0:96:7a:
21:01:e8:3a:29:d9:3c:95:76:c6:06:16:b9:14:81:a5:f3:79:
ed:2f:1a:53:60:27:33:b0:10:af:5b:7a:67:30:9d:41:9e:ed:
40:a1:2a:33:b1:ef:b3:c8:64:2e:ab:9f:8c:e2:95:e7:2b:41:
6d:d2:19:aa:f1:2a:36:6c:bc:df:04:5c:ea:6a:a8:67:be:38:
68:89:2f:16:33:dc:16:bd:12:7a:41:35:9c:db:04:33:54:98:
64:ee:21:10:2d:53:64:1d:24:b3:d8:ef:15:fd:36:c9:79:70:
4a:49:12:d6:56:14:f9:ef:3a:22:7a:4c:38:0b:fb:cc:13:6d:
ea:cb:0f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:18 2026 by rpki-client