
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181803/C9238C6602B211F1BEFAC7A13E3D8C67/CE3F95CC02B311F18F28F1A63E3D8C67.roa
File: CE3F95CC02B311F18F28F1A63E3D8C67.roa (raw, json)
Hash identifier: DAka7fMLV65bGOuwmNjPvrI44LXaBykWyx4PYR3DdH0=
Subject key identifier: 43:03:5E:B0:4C:E0:3E:78:F0:18:0E:7E:7B:D1:F3:75:D5:00:53:DB
Certificate issuer: /CN=A9181803/serialNumber=8E1AE27DB194FB078285193BBDCBE7820055344C
Certificate serial: 10
Authority key identifier: 8E:1A:E2:7D:B1:94:FB:07:82:85:19:3B:BD:CB:E7:82:00:55:34:4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhrifbGU-weChRk7vcvnggBVNEw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181803/C9238C6602B211F1BEFAC7A13E3D8C67/CE3F95CC02B311F18F28F1A63E3D8C67.roa
Signing time: Sun 01 Mar 2026 05:36:44 +0000
ROA not before: Thu 05 Feb 2026 16:57:51 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 151965
IP address blocks: 2001:df6:acc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181803/C9238C6602B211F1BEFAC7A13E3D8C67/jhrifbGU-weChRk7vcvnggBVNEw.crl
rsync://rpki.apnic.net/member_repository/A9181803/C9238C6602B211F1BEFAC7A13E3D8C67/jhrifbGU-weChRk7vcvnggBVNEw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhrifbGU-weChRk7vcvnggBVNEw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:36:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181803, serialNumber=8E1AE27DB194FB078285193BBDCBE7820055344C
Validity
Not Before: Feb 5 16:57:51 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a3d06c-7b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2d:1f:5b:f1:78:39:c3:b7:4d:2c:c0:72:d9:
d1:ef:69:6e:50:d9:26:5e:af:fa:c0:4e:e2:5e:d9:
f3:2b:64:76:d1:1e:85:9e:aa:20:7f:1b:f4:b9:e2:
c2:c4:a1:75:32:d1:64:ca:2f:be:94:84:91:a6:b7:
ae:d8:2b:aa:a5:55:ca:33:d9:bf:53:05:2d:4d:f3:
e7:93:ce:94:c3:3f:6f:63:9f:ec:97:ad:99:f8:07:
73:58:d5:27:56:de:91:9d:df:09:e4:f5:e8:d9:45:
68:5e:4b:96:ba:1c:84:2b:d7:15:9f:c4:ac:7f:61:
14:30:86:d3:cb:1f:20:36:0a:05:d5:d8:3d:23:e9:
24:db:84:f4:88:f4:9e:94:2a:0b:df:62:da:a2:e4:
d0:94:23:c3:8f:04:ce:20:8f:00:0a:8c:55:b7:91:
d0:68:dd:b7:48:0c:23:72:28:3e:b3:80:78:bb:e7:
4b:0b:8d:de:93:0b:83:21:1f:2b:a5:86:c7:06:c2:
dc:da:00:e6:29:98:8c:ef:66:7f:57:ba:b0:c0:3c:
a4:59:a9:24:49:e0:54:bd:64:78:e0:1e:d3:5e:e8:
2f:79:01:4c:e5:bb:0c:bd:80:19:55:d2:93:ab:15:
18:e7:b0:e4:34:b3:fa:93:73:d7:eb:d1:c7:d9:51:
e6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:03:5E:B0:4C:E0:3E:78:F0:18:0E:7E:7B:D1:F3:75:D5:00:53:DB
X509v3 Authority Key Identifier:
keyid:8E:1A:E2:7D:B1:94:FB:07:82:85:19:3B:BD:CB:E7:82:00:55:34:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181803/C9238C6602B211F1BEFAC7A13E3D8C67/jhrifbGU-weChRk7vcvnggBVNEw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhrifbGU-weChRk7vcvnggBVNEw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181803/C9238C6602B211F1BEFAC7A13E3D8C67/CE3F95CC02B311F18F28F1A63E3D8C67.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:acc0::/48
Signature Algorithm: sha256WithRSAEncryption
8f:00:e4:88:ce:ef:00:8c:38:9d:a1:fa:f8:c4:67:56:34:89:
20:8a:7b:39:87:49:10:72:81:55:c0:11:99:7a:b4:8d:cb:55:
61:8c:c9:99:d5:2a:16:d5:7c:74:79:0f:4f:5a:e8:85:b7:26:
73:83:5a:ac:63:f1:7f:d3:ee:22:8e:9e:d6:f9:ae:97:20:a5:
7a:95:e0:63:a5:1c:8f:5b:55:48:9a:cf:d8:16:87:f3:6c:96:
cc:ed:52:99:0b:ab:bc:ad:36:dc:33:1f:b8:d8:6b:9f:39:59:
a9:cf:18:e5:ea:ea:b6:65:b6:17:07:3e:78:07:84:2e:c1:7a:
56:7e:6b:23:b9:eb:46:21:af:80:a2:c7:b2:8b:c8:aa:e2:0d:
c6:29:af:73:2a:d7:e1:7f:c0:0b:6b:0e:48:16:cb:df:46:b9:
19:1b:71:ff:0b:9b:2d:54:7a:d3:bb:0b:16:a9:b6:f0:a0:50:
29:99:cf:74:33:e5:7e:b5:fa:12:39:5d:8d:67:42:58:87:22:
c6:20:48:3e:94:70:8a:d7:ef:4b:a0:f1:c9:ee:6f:da:86:2a:
6b:54:7a:45:62:a1:3a:37:a8:cd:6c:41:4c:6f:e5:7d:97:42:
a3:a8:c1:02:57:25:4a:a2:38:15:19:e8:87:b8:f6:4d:01:0f:
ae:ea:dc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:09:41 2026 by rpki-client