
$ rpki-client -vvf rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/C00D9A3C71EE11EFA7DD021EC4F9AE02.roa
File: C00D9A3C71EE11EFA7DD021EC4F9AE02.roa (raw, json)
Hash identifier: 5n/vT2aN9VzYjANmFIq1/DcSFVdlgCzkvZzjJSAeg2Q=
Subject key identifier: 9E:1D:75:08:46:99:81:84:03:0C:79:F1:CB:E4:3A:1D:E6:27:00:4B
Certificate issuer: /CN=A91625DB/serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E
Certificate serial: 01C7
Authority key identifier: 7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/C00D9A3C71EE11EFA7DD021EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:23:30 +0000
ROA not before: Tue 23 Dec 2025 03:23:42 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 152176
IP address blocks: 2001:df3:3d40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl
rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:32:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455 (0x1c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91625DB, serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E
Validity
Not Before: Dec 23 03:23:42 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a43dd2-5a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9c:1c:62:32:49:27:c3:77:ac:73:30:ed:14:
8a:96:87:1c:f5:4e:97:31:3b:38:00:3a:b8:fd:c4:
08:7e:fe:3b:be:eb:dc:7a:13:c4:10:37:50:75:a8:
95:ce:3e:01:ca:af:59:d0:b9:e0:c8:18:b8:4c:de:
4e:aa:81:ab:55:f7:17:5f:70:39:6a:93:14:5c:d3:
48:0f:5f:74:1f:01:c6:ec:7d:96:d7:e2:76:06:5c:
25:35:db:f0:e0:e0:41:94:47:bf:69:9b:58:d9:17:
bd:b0:6d:f3:4a:e8:ba:d6:ba:e9:b3:e6:2a:1f:a8:
35:67:ad:be:f2:a9:a6:39:a6:ea:c1:99:a9:94:88:
bf:a9:58:2e:c3:3c:21:29:fa:8f:ae:f4:67:bc:c2:
de:40:31:b6:ba:44:76:35:20:28:f1:e0:b3:c3:2e:
ad:72:22:97:0d:3f:36:02:96:82:dc:e8:37:e9:98:
33:c7:8a:b0:00:67:98:33:d1:23:6c:cf:2f:84:77:
74:72:2c:01:ee:c6:e2:33:fb:36:9d:c1:f2:08:96:
bf:5a:02:76:84:8e:a8:39:c3:9f:35:82:b6:a4:60:
f8:cd:2a:80:f8:77:d5:4b:60:61:c1:dd:3d:76:07:
5d:9b:cf:43:7f:f9:31:9d:4f:09:bd:3f:9e:51:36:
80:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1D:75:08:46:99:81:84:03:0C:79:F1:CB:E4:3A:1D:E6:27:00:4B
X509v3 Authority Key Identifier:
keyid:7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/C00D9A3C71EE11EFA7DD021EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:3d40::/48
Signature Algorithm: sha256WithRSAEncryption
82:b0:2e:fb:c6:27:91:e1:d7:f4:09:98:1a:a6:97:f5:dd:c3:
7a:a6:d7:8a:cd:2d:6b:f7:89:ac:b4:38:d9:a2:77:9e:88:8f:
ae:77:6c:b2:81:6c:18:f3:76:a8:df:a0:4f:b8:37:a8:bf:0b:
87:76:e8:7c:77:19:6a:b9:49:9b:d5:3b:c0:51:56:d6:5f:77:
0b:97:74:db:f7:e1:c0:11:55:13:34:97:ec:ad:ce:ca:dd:f3:
33:c7:72:06:1a:3c:fe:91:a2:6a:4e:70:55:c9:f0:d9:eb:fe:
87:13:2d:27:38:93:8d:5b:f5:02:71:9b:e8:2f:2a:a2:e4:85:
c6:f2:70:14:26:e2:6b:f2:91:d1:35:a1:f8:f6:df:b9:d2:2f:
3c:ce:56:27:ac:0b:99:98:f4:7e:e1:83:e0:b3:4e:ed:9b:39:
d7:9c:02:02:b7:6c:c8:31:52:09:c7:44:cc:0f:59:69:4f:fd:
96:7d:ed:0a:79:64:fa:1d:c6:96:91:09:7a:44:71:85:36:4c:
f3:c0:40:bc:e8:93:3f:ac:cf:f8:16:07:94:4c:82:17:ab:e1:
02:63:c6:c3:c0:27:80:12:17:90:a6:9d:a0:c2:bb:ed:9f:7e:
aa:4b:ec:88:7b:dc:f8:29:87:93:cc:b8:f3:a9:85:5f:fc:88:
87:35:b5:12
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjI1REIxMTAvBgNVBAUTKDdCRTIzMDE1M0NGRjkwMDE2NDJEQkM5QjI0Rjg1RDBD
QzI4MjM2NEUwHhcNMjUxMjIzMDMyMzQyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0M2RkMi01YTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuZwcYjJJJ8N3rHMw7RSKlocc9U6XMTs4ADq4/cQIfv47vuvcehPEEDdQdaiV
zj4Byq9Z0LngyBi4TN5OqoGrVfcXX3A5apMUXNNID190HwHG7H2W1+J2BlwlNdvw
4OBBlEe/aZtY2Re9sG3zSui61rrps+YqH6g1Z62+8qmmOabqwZmplIi/qVguwzwh
KfqPrvRnvMLeQDG2ukR2NSAo8eCzwy6tciKXDT82ApaC3Og36Zgzx4qwAGeYM9Ej
bM8vhHd0ciwB7sbiM/s2ncHyCJa/WgJ2hI6oOcOfNYK2pGD4zSqA+HfVS2Bhwd09
dgddm89Df/kxnU8JvT+eUTaADwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFJ4ddQhG
mYGEAwx58cvkOh3mJwBLMB8GA1UdIwQYMBaAFHviMBU8/5ABZC28myT4XQzCgjZO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjVEQi8xMTkzOUQxMDkw
NjkxMUVFQjIzRDc0MjVDNEY5QUUwMi9lLUl3RlR6X2tBRmtMYnliSlBoZERNS0NO
azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2UtSXdGVHpfa0FGa0xieWJKUGhkRE1LQ05rNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjI1REIvMTE5MzlEMTA5MDY5MTFFRUIyM0Q3NDI1QzRGOUFFMDIvQzAwRDlBM0M3
MUVFMTFFRkE3REQwMjFFQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN8z1AMA0GCSqGSIb3DQEBCwUAA4IBAQCCsC77xieR4df0CZga
ppf13cN6pteKzS1r94mstDjZoneeiI+ud2yygWwY83ao36BPuDeovwuHduh8dxlq
uUmb1TvAUVbWX3cLl3Tb9+HAEVUTNJfsrc7K3fMzx3IGGjz+kaJqTnBVyfDZ6/6H
Ey0nOJONW/UCcZvoLyqi5IXG8nAUJuJr8pHRNaH49t+50i88zlYnrAuZmPR+4YPg
s07tmznXnAICt2zIMVIJx0TMD1lpT/2Wfe0KeWT6HcaWkQl6RHGFNkzzwEC86JM/
rM/4FgeUTIIXq+ECY8bDwCeAEheQpp2gwrvtn36qS+yIe9z4KYeTzLjzqYVf/IiH
NbUS
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:15:16 2026 by rpki-client