
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/DE5B0E52B7EE11EF9BCBDD78C4F9AE02.roa
File: DE5B0E52B7EE11EF9BCBDD78C4F9AE02.roa (raw, json)
Hash identifier: MjjSSBlKodGKkn3/GiKSnc0mZV7lMYdhPxahiq3z0B4=
Subject key identifier: 78:01:A1:7C:73:F4:48:D8:89:CE:D8:1C:B1:57:DB:69:3D:60:8D:54
Certificate issuer: /CN=A916BF2B/serialNumber=CAEB77BCF09FF697F18A617AA860896E4326D9D3
Certificate serial: EF
Authority key identifier: CA:EB:77:BC:F0:9F:F6:97:F1:8A:61:7A:A8:60:89:6E:43:26:D9:D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/DE5B0E52B7EE11EF9BCBDD78C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:12:56 +0000
ROA not before: Sun 11 Jan 2026 05:24:15 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 137410
IP address blocks: 2001:df4:bc40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.crl
rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BF2B, serialNumber=CAEB77BCF09FF697F18A617AA860896E4326D9D3
Validity
Not Before: Jan 11 05:24:15 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a41f38-8f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2a:b8:ae:1e:c7:9a:b4:df:7f:17:d9:dc:2b:
a5:2c:bc:25:d0:3a:10:81:04:c4:c1:e6:3d:0d:15:
09:d2:0b:62:ed:21:40:f6:02:fe:c7:28:c3:0c:c1:
ac:c9:2c:76:5a:0d:39:42:a8:93:b9:c5:ae:30:56:
20:72:d3:ed:8c:cf:cb:77:6c:a8:4c:ad:b0:4e:ee:
f5:00:f9:5e:26:94:e1:99:41:49:bd:e3:4e:12:e4:
85:62:ed:94:7e:7e:ba:30:1c:3c:f7:56:2f:5d:0a:
02:ae:02:fa:63:38:53:d7:2b:79:f6:92:bb:ea:99:
2a:5a:97:83:ad:8c:db:cc:44:14:c2:c4:45:a9:45:
05:b6:41:74:a7:a1:be:1a:82:12:50:cb:18:c3:07:
7b:32:aa:f4:d8:d8:27:b3:12:96:f6:e0:12:1d:d6:
73:19:64:fc:fd:0b:01:d9:44:45:cd:fa:c0:c5:68:
b9:26:36:dc:a0:98:29:25:12:68:54:90:ad:19:4e:
a2:44:80:20:d7:0a:35:a8:d7:1a:15:5a:34:71:6a:
d5:36:fa:c8:38:4c:00:8d:07:80:9f:a3:55:99:55:
2f:a9:a3:34:ba:ae:41:11:a5:44:8a:3b:89:2a:5e:
b9:b8:47:79:cc:e5:6f:e5:1c:ec:69:65:d8:ca:e1:
10:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:01:A1:7C:73:F4:48:D8:89:CE:D8:1C:B1:57:DB:69:3D:60:8D:54
X509v3 Authority Key Identifier:
keyid:CA:EB:77:BC:F0:9F:F6:97:F1:8A:61:7A:A8:60:89:6E:43:26:D9:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/DE5B0E52B7EE11EF9BCBDD78C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:bc40::/48
Signature Algorithm: sha256WithRSAEncryption
12:16:88:f4:94:69:ac:1c:0e:01:c3:3c:ca:d5:08:48:67:71:
17:c5:8f:98:ce:60:4f:71:28:94:5b:36:88:59:35:f5:6d:5b:
03:c0:e7:a7:cd:b2:c3:da:5d:33:4b:24:24:bd:b3:78:e6:ee:
38:41:7a:29:52:07:c3:19:ec:13:80:b0:9b:15:71:d2:c4:a2:
71:d4:21:ad:5b:bf:04:13:14:25:fb:96:71:ba:94:da:3e:89:
3e:3e:b5:af:ee:c7:8b:12:0b:49:bc:6f:02:c1:b4:e3:64:f4:
64:78:70:61:e5:0d:fe:00:c8:0e:0c:68:1c:14:5c:e9:41:dd:
29:2c:07:02:ff:37:03:4e:bc:63:3e:86:cd:83:df:f0:7e:f2:
cf:a1:9d:6a:f6:4d:a4:02:7c:ef:66:de:8d:d3:21:a0:85:c9:
ab:0a:65:17:d8:7e:8c:38:4a:b6:32:d1:d1:d2:42:79:ac:77:
66:f1:dd:bc:f4:82:06:90:0f:85:57:87:64:69:4e:e0:3d:e4:
4b:8b:61:7c:74:34:b8:21:e0:10:fa:b9:24:dc:7a:f4:04:9d:
7b:96:49:ec:69:00:fc:4a:13:10:83:3b:fb:e9:66:f5:1e:9a:
ae:a0:46:d5:40:8a:b9:78:6b:05:a2:5e:01:1d:f8:06:c7:8d:
20:08:4e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:18:22 2026 by rpki-client