
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/F99AFAFE1D5411EA921E0351C4F9AE02.roa
File: F99AFAFE1D5411EA921E0351C4F9AE02.roa (raw, json)
Hash identifier: N07VonMSHhloZ4q0pVriLDRxW5WgXZ0ET2dhrHbnW9g=
Subject key identifier: B1:F0:EA:15:D8:78:33:F8:A2:DC:7E:00:9C:93:0A:51:7E:97:D2:FE
Certificate issuer: /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
Certificate serial: 13CE
Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/F99AFAFE1D5411EA921E0351C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:33:14 +0000
ROA not before: Sat 20 Dec 2025 17:14:36 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 139882
IP address blocks: 2403:cfc0:1016::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl
rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5070 (0x13ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157DAE, serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
Validity
Not Before: Dec 20 17:14:36 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a4866a-f2d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b0:5e:bf:72:31:6b:6e:57:b6:a2:e6:a4:18:
e1:5a:af:47:73:98:a4:e2:83:8b:bf:73:e0:83:4a:
94:0d:fb:ca:44:54:31:fc:58:01:83:c7:c4:c7:16:
7b:aa:54:ee:18:74:bc:a0:f1:38:e5:70:b3:6c:22:
37:6e:78:de:c7:82:5c:3a:4a:0b:5f:29:c8:f7:4d:
d5:20:ce:a7:74:d3:11:1d:cb:aa:3b:69:07:79:5f:
f4:3d:c5:56:15:3e:d4:75:c8:73:75:6f:92:e6:98:
43:4c:8b:93:0a:5a:0f:3d:e2:23:8f:43:af:19:75:
09:9b:b9:8c:08:e6:ea:62:be:66:02:77:14:5c:6e:
22:b1:c6:ea:d7:ce:b3:d9:cf:fe:73:f6:a1:a3:ef:
63:8c:85:66:1f:2e:6f:34:43:9d:f5:96:e4:c4:b7:
3c:15:80:51:7d:3f:26:d9:07:6b:40:83:0c:5e:ed:
02:d7:9b:0a:1f:94:c5:d5:ea:cf:b8:80:9a:34:d6:
7a:0f:e7:2a:99:d0:8a:67:88:01:41:6a:2e:df:78:
0e:5f:b5:38:81:5d:ab:08:3b:06:26:13:37:16:b8:
0f:ff:a9:0f:07:d2:7e:f0:03:8b:ac:a6:99:85:5a:
cc:f4:94:16:b8:4d:04:37:fc:9a:e6:0e:4f:0e:1f:
aa:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F0:EA:15:D8:78:33:F8:A2:DC:7E:00:9C:93:0A:51:7E:97:D2:FE
X509v3 Authority Key Identifier:
keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/F99AFAFE1D5411EA921E0351C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2403:cfc0:1016::/48
Signature Algorithm: sha256WithRSAEncryption
ae:02:75:46:0d:74:8c:f3:7a:01:93:a7:e4:6d:61:c2:3e:79:
d9:ef:4b:f7:20:6c:65:88:f8:e0:9a:5b:5b:ac:ea:2f:e7:a6:
0e:0b:31:47:6b:b8:f9:95:9a:51:58:91:4e:14:51:93:75:91:
f0:28:a1:7e:60:31:6a:eb:c4:a2:c6:dd:e6:20:5c:34:28:55:
67:33:13:ab:80:7b:8b:86:21:2b:72:d1:43:a6:20:37:a1:f7:
4a:a3:79:71:bd:cb:41:7b:57:8a:f0:1b:bc:d7:f7:52:31:74:
a0:3e:d5:27:e1:cf:6e:27:1c:f7:02:bc:d4:7e:af:ba:03:2a:
b0:09:5b:a6:21:f2:9f:ac:9e:24:0d:25:0d:ec:b7:2b:f6:0a:
ab:35:41:31:78:03:8e:4d:97:5b:7e:32:28:38:c5:e7:32:61:
00:00:91:77:dd:5b:44:f8:8d:d2:c5:28:e0:5e:60:8f:04:11:
ee:24:9e:a1:12:15:13:17:d7:39:ef:c3:4a:bd:34:d6:7f:f3:
15:c0:73:67:dc:ac:77:cb:6c:ae:53:95:f1:9e:1e:65:fd:eb:
28:58:a3:23:1e:5f:4b:57:4a:30:8d:24:f7:0d:2f:b0:7e:12:
2c:ec:cd:7a:cf:a2:d8:34:06:24:39:85:6c:23:5e:97:58:a7:
24:1c:e5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:16:12 2026 by rpki-client