
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/C2C631C8A47911E99DBEDD52C4F9AE02.roa
File: C2C631C8A47911E99DBEDD52C4F9AE02.roa (raw, json)
Hash identifier: 3XTOJXN5zvpAvqmVhz6NCzW96tW+Mzns3L/n2HObiXE=
Subject key identifier: FB:F3:86:22:C3:DF:0D:B1:B1:1E:A9:4B:B2:A2:48:22:77:78:E0:F4
Certificate issuer: /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Certificate serial: 3975
Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/C2C631C8A47911E99DBEDD52C4F9AE02.roa
Signing time: Tue 30 Jun 2026 15:11:18 +0000
ROA not before: Tue 30 Jun 2026 15:11:18 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 58562
IP address blocks: 2001:c20:c817::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:23:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14709 (0x3975)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C, serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Validity
Not Before: Jun 30 15:11:18 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a43dc96-7efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1a:e6:3e:34:f6:4c:0e:90:52:07:63:27:ef:
1a:77:0c:d0:4b:8d:f5:6e:5c:92:b3:1f:fb:87:fe:
1a:74:6a:85:82:d6:fa:d9:90:35:b8:79:ed:40:f9:
6d:e0:6c:b8:f5:65:8b:5e:85:3a:b5:dc:8c:05:45:
8c:ff:a2:29:86:b6:60:1d:78:e3:b9:dc:0b:a3:02:
4c:f5:cf:18:fb:0c:14:91:29:8f:72:3c:05:62:a0:
ef:5c:bd:c5:38:ab:36:d7:4c:0b:ed:f6:14:4d:71:
5c:60:a0:d3:a6:7f:c3:e8:32:46:69:99:58:9b:e2:
59:86:b9:94:aa:a4:df:cc:07:18:4d:0a:34:36:48:
b9:7c:a7:5e:a4:1a:eb:5a:31:1e:b6:ec:3b:b1:39:
eb:a8:05:0f:9b:66:1f:42:d3:02:e9:db:0a:18:34:
19:68:73:ec:e7:05:42:67:df:8b:ae:70:b5:7f:c4:
01:54:81:c8:62:c4:13:09:1c:25:18:46:a0:1e:98:
40:d7:af:33:e6:b3:02:ae:95:f0:9c:d9:a6:4c:f0:
4d:e0:83:e9:36:36:27:3a:43:2d:fc:4a:68:e5:e9:
8f:b9:e9:e0:39:c6:f8:35:9d:c3:45:f9:a7:b5:c1:
62:01:01:32:fb:88:27:dc:24:d8:8f:8a:8b:e7:3d:
8b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F3:86:22:C3:DF:0D:B1:B1:1E:A9:4B:B2:A2:48:22:77:78:E0:F4
X509v3 Authority Key Identifier:
keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/C2C631C8A47911E99DBEDD52C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:c20:c817::/48
Signature Algorithm: sha256WithRSAEncryption
b2:a0:a0:9d:81:13:6a:1c:7f:d4:85:49:35:92:0d:fc:6f:d9:
90:a8:4f:f0:2b:aa:4b:67:10:a4:0b:68:f7:f0:c0:d4:4b:2d:
0b:c4:f4:56:52:b4:68:24:d7:98:19:29:5a:66:75:2b:4f:6f:
b8:66:93:fd:10:72:5c:80:97:35:84:8e:86:b7:44:cb:62:4b:
fd:97:e0:ee:22:c5:ae:57:c4:57:61:e7:c0:5d:fc:f5:18:d6:
2d:24:7f:a2:c6:de:64:be:71:7c:58:b4:c2:87:eb:34:f0:78:
08:7c:23:81:b7:32:38:20:e2:e0:a4:a9:84:50:e0:be:83:11:
1a:70:1b:7e:01:d9:2d:b1:2c:87:d7:f2:a7:c5:b8:29:00:45:
be:e3:f0:e4:f1:9e:55:5c:66:30:04:3d:28:61:66:8c:e5:c8:
63:9f:fb:3b:36:59:d8:95:f1:aa:1c:75:c7:cc:63:58:ad:bf:
f0:43:f0:90:d8:3d:81:86:c0:22:44:b0:8f:e8:40:1b:04:64:
52:37:bc:bc:18:f3:dd:77:97:03:c6:c1:cd:c0:2a:b6:2a:10:
d7:72:39:d6:02:4e:67:16:66:96:fa:f6:32:4a:5f:81:6e:e6:
02:a6:08:5b:6b:43:da:6e:43:62:46:ee:a0:6d:11:8a:ba:01:
59:dd:62:7d
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICOXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUY4OUMxMTAvBgNVBAUTKEFGOEYwQ0ZCNDdGQkZDQzdDNDkzM0M0NzNDREIzNjQ0
MkI1MDUxQ0UwHhcNMjYwNjMwMTUxMTE4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTQzZGM5Ni03ZWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlxrmPjT2TA6QUgdjJ+8adwzQS431blySsx/7h/4adGqFgtb62ZA1uHntQPlt
4Gy49WWLXoU6tdyMBUWM/6IphrZgHXjjudwLowJM9c8Y+wwUkSmPcjwFYqDvXL3F
OKs210wL7fYUTXFcYKDTpn/D6DJGaZlYm+JZhrmUqqTfzAcYTQo0Nki5fKdepBrr
WjEetuw7sTnrqAUPm2YfQtMC6dsKGDQZaHPs5wVCZ9+LrnC1f8QBVIHIYsQTCRwl
GEagHphA168z5rMCrpXwnNmmTPBN4IPpNjYnOkMt/Epo5emPuengOcb4NZ3DRfmn
tcFiAQEy+4gn3CTYj4qL5z2LtwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFPvzhiLD
3w2xsR6pS7KiSCJ3eOD0MB8GA1UdIwQYMBaAFK+PDPtH+/zHxJM8RzzbNkQrUFHO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy82OTA3QzNFMjFE
ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi9yNDhNLTBmN19NZkVrenhIUE5zMlJDdFFV
YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3I0OE0tMGY3X01mRWt6eEhQTnMyUkN0UVVjNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUY4OUMvNjkwN0MzRTIxRDgzMTFFMjlCMzVBNUQ4MDhCMDJDRDIvQzJDNjMxQzhB
NDc5MTFFOTlEQkVERDUyQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEMIMgXMA0GCSqGSIb3DQEBCwUAA4IBAQCyoKCdgRNqHH/UhUk1
kg38b9mQqE/wK6pLZxCkC2j38MDUSy0LxPRWUrRoJNeYGSlaZnUrT2+4ZpP9EHJc
gJc1hI6Gt0TLYkv9l+DuIsWuV8RXYefAXfz1GNYtJH+ixt5kvnF8WLTCh+s08HgI
fCOBtzI4IOLgpKmEUOC+gxEacBt+AdktsSyH1/KnxbgpAEW+4/Dk8Z5VXGYwBD0o
YWaM5chjn/s7NlnYlfGqHHXHzGNYrb/wQ/CQ2D2BhsAiRLCP6EAbBGRSN7y8GPPd
d5cDxsHNwCq2KhDXcjnWAk5nFmaW+vYySl+BbuYCpghba0PabkNiRu6gbRGKugFZ
3WJ9
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:13:40 2026 by rpki-client