
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/FA2CCDCCDE6111E88BFD7810C4F9AE02.roa
File: FA2CCDCCDE6111E88BFD7810C4F9AE02.roa (raw, json)
Hash identifier: 7ZAEA0r9lzg48+UEX+NDAtHxRbz47d+Yj5cRgz6OmvE=
Subject key identifier: 1A:07:69:6B:B0:48:B7:CD:9F:7C:DE:A8:AE:2E:D7:A7:CA:E7:CF:2C
Certificate issuer: /CN=A916A31E/serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196
Certificate serial: 1896
Authority key identifier: E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/FA2CCDCCDE6111E88BFD7810C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:42:04 +0000
ROA not before: Mon 22 Dec 2025 17:13:54 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 132383
IP address blocks: 2401:f9c0:1111::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl
rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6294 (0x1896)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A31E, serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196
Validity
Not Before: Dec 22 17:13:54 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a46c5c-dd07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b5:09:60:11:8e:00:25:be:f8:fa:24:04:3e:
2d:4e:75:9b:07:80:74:60:3b:c6:8f:e4:c7:e6:54:
19:2e:d7:b3:4d:12:c0:ff:11:95:cd:25:ea:7f:d7:
f4:43:af:59:1e:85:db:2e:d3:e4:23:d6:b8:b0:e4:
de:b4:06:70:ef:41:83:ea:ac:a1:3e:35:44:00:f3:
44:aa:ef:3c:11:55:0b:5a:60:a2:ce:5e:f8:91:2d:
af:24:25:07:d6:4e:dc:71:2d:b0:0d:9a:f6:9d:ac:
94:d8:64:e9:4f:48:de:4f:a3:e4:80:21:55:1a:44:
cf:16:7d:90:b4:f4:0c:6b:d3:de:00:d0:a4:6b:47:
25:52:56:95:09:10:76:54:0f:2d:a7:24:72:4a:4f:
ee:20:aa:77:d7:1d:0a:10:ba:16:ce:66:a3:35:13:
2e:db:cb:82:0c:37:53:ec:30:e7:82:31:cc:87:ab:
30:f7:ce:35:c2:64:b2:65:aa:15:1e:8d:03:90:ad:
04:13:3a:29:b2:74:8d:a8:2f:ea:b5:08:58:b3:5a:
7d:f3:01:0d:1f:70:e9:1e:c2:0e:11:2f:c1:d7:35:
f3:dc:75:db:22:98:06:8c:30:fb:e2:eb:0e:aa:9d:
4d:65:59:aa:9b:f0:bf:7f:af:3d:e3:f5:0e:27:5b:
e3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:07:69:6B:B0:48:B7:CD:9F:7C:DE:A8:AE:2E:D7:A7:CA:E7:CF:2C
X509v3 Authority Key Identifier:
keyid:E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/FA2CCDCCDE6111E88BFD7810C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:f9c0:1111::/48
Signature Algorithm: sha256WithRSAEncryption
75:66:56:c4:c1:53:cb:57:0b:f8:7d:0b:d0:33:72:a2:3f:d2:
dc:87:4c:08:22:c2:d3:84:52:b2:10:08:60:04:06:20:b0:1e:
8f:5d:f4:b8:f6:84:96:5c:8b:6d:38:ac:83:b4:70:08:b1:43:
ba:38:35:95:89:40:fd:84:e7:02:57:51:1b:42:8e:dd:76:56:
be:82:ae:5f:0e:42:69:ef:4e:96:b5:c1:80:89:10:94:16:6a:
38:dc:ec:17:16:00:49:4a:74:28:81:f8:03:e8:4a:8e:1f:82:
3e:e5:cf:1b:ce:63:50:a1:43:6b:67:6f:4d:4f:aa:51:8e:bc:
1f:6b:66:39:cb:3e:c6:0a:b8:55:9f:8e:e8:93:73:90:41:f9:
11:da:09:73:28:4c:6a:9c:0a:ed:3a:6a:f6:4b:01:4e:b1:02:
41:1d:ba:ca:0e:17:a1:89:04:4c:2f:6a:2c:56:93:75:71:c1:
fe:d7:16:49:dd:b8:82:5f:5b:29:a9:9b:5a:96:54:bf:e9:c5:
ee:15:9e:9f:5d:8a:db:99:79:56:7f:1a:8c:44:b4:c9:90:6a:
0f:24:fd:ab:2c:01:f6:d0:87:4a:7f:73:d4:a9:54:3a:df:94:
7e:07:12:cc:35:f1:d5:e1:b0:ae:c3:af:6c:11:20:9d:39:32:
c9:8e:85:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:01:54 2026 by rpki-client