
$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/0448C04E5CC211E8AC07E63AC4F9AE02.roa
File: 0448C04E5CC211E8AC07E63AC4F9AE02.roa (raw, json)
Hash identifier: aPABOs1ZfY6CsddlG9S4y/FU2vK4MYcUFih4LTUW0u4=
Subject key identifier: F4:34:AD:0F:7A:25:3A:14:E5:05:88:55:8E:0B:D0:91:5D:A1:E3:46
Certificate issuer: /CN=A916FA49/serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A
Certificate serial: 154E
Authority key identifier: 19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/0448C04E5CC211E8AC07E63AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:17:29 +0000
ROA not before: Fri 28 Mar 2025 17:26:15 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 9411
IP address blocks: 2406:3100::/32 maxlen: 32
2406:3100::/36 maxlen: 36
2406:3100:1000::/36 maxlen: 36
2406:3100:2000::/36 maxlen: 36
2406:3100:3000::/36 maxlen: 36
2406:3100:4000::/36 maxlen: 36
2406:3100:5000::/36 maxlen: 36
2406:3100:6000::/36 maxlen: 36
2406:3100:7000::/36 maxlen: 36
2406:3100:8000::/36 maxlen: 36
2406:3100:9000::/36 maxlen: 36
2406:3100:a000::/36 maxlen: 36
2406:3100:b000::/36 maxlen: 36
2406:3100:c000::/36 maxlen: 36
2406:3100:d000::/36 maxlen: 36
2406:3100:e000::/36 maxlen: 36
2406:3100:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl
rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5454 (0x154e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FA49, serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A
Validity
Not Before: Mar 28 17:26:15 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a40429-11dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:45:f0:dc:82:95:df:ab:a9:b2:c3:df:fb:38:
ec:01:45:77:31:0a:4c:9d:cd:52:33:5c:61:72:0c:
ce:f5:a7:e9:aa:1b:74:3e:3a:bf:45:92:a8:cc:b9:
79:a2:af:a2:62:06:74:cb:a6:6d:42:5f:5b:2c:ea:
29:91:5c:6e:c1:b6:88:58:69:97:48:19:24:87:4d:
ac:0e:2e:ae:8a:eb:8b:d8:26:b2:98:0f:0d:95:03:
4c:67:04:ef:e8:46:ca:49:98:b1:e3:76:8a:4a:02:
c2:80:52:a2:c8:10:40:c8:74:0a:4f:01:e0:b3:c3:
93:52:1e:8c:21:df:0b:5c:a2:1c:21:c7:32:62:96:
b8:9c:4d:8f:c8:1c:e6:ba:e1:21:c2:af:db:ec:96:
85:3b:aa:b8:6e:6b:16:ca:39:26:b2:2c:dd:e7:60:
76:27:c4:89:0d:12:ad:97:68:11:7a:90:3a:6c:91:
49:43:89:4e:55:b0:d0:f7:21:0b:d6:a6:05:7b:41:
be:df:41:ab:04:c8:88:4e:b7:60:7e:04:98:d9:e4:
bf:9a:41:b6:48:3b:6c:6c:5d:9b:4c:5d:08:d4:e6:
d4:a2:88:21:98:7b:dd:c7:b2:3f:e0:aa:8a:cc:59:
fd:22:ad:c3:f7:98:68:3b:b4:20:aa:51:ca:36:2a:
7b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:34:AD:0F:7A:25:3A:14:E5:05:88:55:8E:0B:D0:91:5D:A1:E3:46
X509v3 Authority Key Identifier:
keyid:19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/0448C04E5CC211E8AC07E63AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:3100::/32
Signature Algorithm: sha256WithRSAEncryption
ab:8c:51:22:43:66:bd:50:a9:b2:b8:63:ad:7a:52:79:91:7c:
9a:1e:95:13:cd:58:e3:12:e1:69:80:51:6e:13:97:e8:64:53:
11:f9:94:e4:f6:99:4d:e0:3c:ff:53:ab:81:93:10:c3:9f:88:
ef:cb:aa:2a:de:83:ba:fe:59:2f:f5:37:d3:74:ce:d4:f2:f9:
ea:cf:f6:f8:3d:ce:54:e7:19:e1:a5:fb:73:28:12:e1:b0:8e:
40:ec:6a:2e:58:cd:b1:9e:be:c2:5d:2e:41:6e:66:d2:93:15:
2b:be:e6:7f:d9:e3:3d:07:18:e3:4c:af:2c:8f:9a:32:5c:80:
13:d4:26:9d:c0:04:a6:d4:8c:fc:01:50:a5:86:8c:e2:e6:7e:
a6:6a:a1:45:45:90:6a:b3:3f:b4:d8:84:18:62:15:99:e8:1a:
d3:e2:e9:57:ba:9b:f7:db:c7:c7:73:8d:f5:90:b2:91:30:7b:
03:87:01:ea:9f:0f:f9:ee:d8:b6:7a:0c:79:93:88:ee:45:36:
f2:dc:a0:1c:20:60:2a:05:77:48:02:2b:41:5e:6f:b5:15:e1:
0c:4d:57:e9:1d:67:24:72:c8:f7:b4:4a:09:0b:b5:e3:e6:dd:
cd:b9:b6:e9:c6:27:d1:e3:dc:a9:e0:03:c9:e4:0b:9c:9f:dc:
9f:c5:01:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:49 2026 by rpki-client