
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/64F859DA812611EDA597255EC4F9AE02.roa
File: 64F859DA812611EDA597255EC4F9AE02.roa (raw, json)
Hash identifier: fn9COoreHDD+zdHLkrrnHjWHJo4W49aJWkK49HG6KBA=
Subject key identifier: 7A:90:28:BA:96:26:9C:A0:EF:29:C4:14:3A:D0:B4:57:5D:A8:63:50
Certificate issuer: /CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Certificate serial: 1A73
Authority key identifier: 61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/64F859DA812611EDA597255EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:35:40 +0000
ROA not before: Thu 08 Jan 2026 17:13:57 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 48337
IP address blocks: 2400:8905::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl
rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:43:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6771 (0x1a73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D03A, serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Validity
Not Before: Jan 8 17:13:57 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a486fc-63ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:11:91:30:3c:ab:ec:ce:e7:a2:b1:f9:e2:ff:
c7:3d:f0:dd:32:b7:8c:18:99:6e:40:ac:54:6a:db:
0c:16:52:17:47:3a:67:e9:9e:01:6e:7d:7a:42:23:
f9:63:69:61:52:d9:46:6b:99:30:55:ab:ec:ad:9c:
1b:93:3a:97:88:fc:42:69:50:f9:0e:c5:f2:40:98:
51:a5:4b:09:f6:9c:db:7e:84:b1:e9:07:f1:24:46:
bc:e3:42:fa:18:3a:d5:43:19:72:15:54:4f:94:bc:
83:f5:d6:e0:67:59:5b:bb:21:7d:1e:70:40:31:4d:
f7:fe:62:aa:9d:91:1b:83:e9:00:9f:54:79:f4:54:
48:9c:9d:f5:ce:21:cf:9e:2e:5a:40:c1:f8:4a:c9:
d4:f8:1c:a0:b6:11:48:6d:03:01:25:c9:3b:1a:da:
28:0e:4e:a6:3e:c2:a4:5d:fb:66:ef:93:54:33:c5:
39:35:c4:7f:07:a2:d4:50:86:94:1f:d0:29:3e:b8:
2e:45:95:ec:10:01:52:59:4a:a0:d8:7e:26:28:31:
22:c0:0f:93:23:77:aa:43:67:88:fd:2b:4e:9c:90:
9a:21:00:1d:48:17:2b:e9:c5:cd:69:97:83:14:59:
5a:b9:c2:76:7b:69:8a:bd:e8:3b:96:b5:34:25:0b:
6a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:90:28:BA:96:26:9C:A0:EF:29:C4:14:3A:D0:B4:57:5D:A8:63:50
X509v3 Authority Key Identifier:
keyid:61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/64F859DA812611EDA597255EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:8905::/32
Signature Algorithm: sha256WithRSAEncryption
19:a1:86:c0:37:41:e2:8e:91:37:41:f6:48:55:d3:03:bc:c9:
60:da:7f:5f:00:33:d2:4f:d6:53:0b:ec:65:59:39:80:8b:f9:
e5:68:28:ac:72:e9:fe:27:a1:3b:c2:56:47:a5:5e:b6:2b:80:
2d:05:89:cc:e1:2b:f2:a3:29:ba:b5:96:14:28:45:a4:67:dc:
9a:85:2c:c0:5b:a4:b8:72:91:44:a7:b5:09:f4:81:07:4e:56:
71:c3:bb:e3:11:52:cc:1b:3d:01:cd:2c:74:b5:be:6c:21:be:
79:ab:b6:25:9d:7b:8e:7d:7e:1a:57:66:f7:5f:01:36:ad:53:
7a:ac:73:bb:72:7e:dc:1a:74:9a:29:6b:0b:bd:af:c0:e2:b5:
d2:f8:54:10:4e:36:69:0d:72:7f:71:16:2a:5a:21:b7:cd:30:
3a:07:59:a7:41:51:59:79:17:e3:1c:be:04:c0:51:f0:2b:4c:
13:f2:31:bd:b6:d6:85:ab:29:ed:c9:4f:63:0d:b0:26:5c:aa:
54:61:d1:46:c1:6d:97:30:a1:60:d6:c1:8a:fe:30:0e:db:c2:
a8:80:62:ed:4a:63:a9:f8:6a:cc:36:e8:2a:72:6d:ee:45:b9:
f3:ca:7b:b3:76:c0:00:f4:a4:fa:b9:ef:c9:38:bf:bf:a8:f4:
64:12:06:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:59:57 2026 by rpki-client