
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/CE992CA0138D11F198EDAC703A3D8C67.roa
File: CE992CA0138D11F198EDAC703A3D8C67.roa (raw, json)
Hash identifier: hnj4b5BrR1oDY8K6unPrq2mmpWra5ZUyWl2C0okWTrc=
Subject key identifier: AC:B2:B7:19:B1:1E:12:56:5B:3D:8A:4B:29:2F:22:23:F9:2A:EA:0D
Certificate issuer: /CN=A915E061/serialNumber=FAD4299CB205AA3DDDC490A86025BA5C6C1EE0E9
Certificate serial: 02
Authority key identifier: FA:D4:29:9C:B2:05:AA:3D:DD:C4:90:A8:60:25:BA:5C:6C:1E:E0:E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/CE992CA0138D11F198EDAC703A3D8C67.roa
Signing time: Fri 27 Feb 2026 03:38:40 +0000
ROA not before: Fri 27 Feb 2026 03:38:40 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 154507
IP address blocks: 2001:df6:b7c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.crl
rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:44:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E061, serialNumber=FAD4299CB205AA3DDDC490A86025BA5C6C1EE0E9
Validity
Not Before: Feb 27 03:38:40 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69a111c0-532e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:03:66:02:2a:69:4d:8f:7c:8e:d4:87:af:7d:
eb:0c:fd:2b:1c:2e:ad:0c:12:44:73:c8:b3:17:55:
4c:aa:61:c7:cf:20:f5:8c:ca:a9:83:63:55:94:2f:
b0:94:c4:50:69:b4:4a:f9:63:f7:a3:26:f3:36:3c:
8d:21:15:e6:04:df:b8:79:65:e8:3c:a8:72:9a:d7:
6c:24:21:32:4c:19:39:77:f3:97:98:51:e8:cb:b0:
e9:12:6a:96:ac:fa:da:6b:d6:4f:47:39:d7:ad:92:
ae:7e:83:18:ce:86:a9:7f:50:49:18:a0:1c:56:55:
7a:33:db:5e:5e:34:14:e1:44:c8:c4:54:3d:52:8b:
2d:f8:52:86:87:4c:f8:0b:9d:72:94:26:1c:7f:07:
76:df:25:4b:4f:06:5b:1a:35:03:ed:a1:4e:a4:f0:
b1:fc:5d:fc:d3:ee:ae:89:2f:e9:b9:9e:f5:97:39:
0c:44:3a:45:16:cf:85:ae:9e:ef:11:75:85:3e:c2:
f0:32:61:54:57:fd:d5:76:46:ee:09:6b:7d:34:8a:
c8:5a:73:f2:1f:72:ef:08:84:f1:80:dc:30:a5:7b:
6b:a0:22:04:6e:f4:3c:f8:0f:3b:a8:a2:d9:c6:9b:
62:ac:02:62:35:90:1c:4e:8d:f7:16:71:ed:30:a3:
3f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B2:B7:19:B1:1E:12:56:5B:3D:8A:4B:29:2F:22:23:F9:2A:EA:0D
X509v3 Authority Key Identifier:
keyid:FA:D4:29:9C:B2:05:AA:3D:DD:C4:90:A8:60:25:BA:5C:6C:1E:E0:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/CE992CA0138D11F198EDAC703A3D8C67.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:b7c0::/48
Signature Algorithm: sha256WithRSAEncryption
64:10:2b:ae:3c:b3:6c:14:44:4b:a1:f1:c3:a8:84:6f:bc:45:
ee:4b:15:c4:86:ab:a7:68:96:7a:9f:c5:d0:9b:e5:2f:5b:40:
10:86:79:25:91:38:54:35:9a:72:7d:42:96:5b:d5:45:0a:88:
fe:83:80:f3:31:bb:60:93:2e:bc:67:45:8d:d4:1f:59:55:c5:
64:fa:da:7a:49:63:5d:32:a8:01:16:11:b3:58:64:c1:93:2c:
b6:35:b8:a1:a1:af:a7:3c:ec:03:03:78:2c:70:a7:d7:9e:36:
e1:ca:59:e5:7a:78:50:63:8f:16:b0:5c:b0:42:fa:07:64:4d:
6c:be:dc:59:8a:57:72:84:e2:24:74:85:db:36:8d:e1:a9:06:
09:9e:f2:87:5c:31:f2:ef:47:8e:da:f5:7b:f8:90:ba:7a:bf:
bf:c5:5e:2d:41:81:e8:a6:20:5b:6e:3f:ec:6e:97:57:fc:0b:
97:2b:cb:c5:f0:fb:8c:df:fe:d0:ff:0a:e5:f5:86:ce:d5:54:
47:c7:4e:70:2d:e3:e5:92:6d:19:8a:57:a6:50:4a:9a:ae:c5:
ed:85:a0:7d:7d:44:d0:8a:4f:f8:a3:6e:b1:f4:79:b9:4e:6e:
e6:50:ae:c6:c4:43:79:45:d2:5f:24:8f:10:94:b9:5d:e7:36:
57:ba:9b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:03:41 2026 by rpki-client