
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111537/D5B3B540760311F1B9B648AC79A30FBC/D5D654E4760611F1B28E97E07AA30FBC.roa
File: D5D654E4760611F1B28E97E07AA30FBC.roa (raw, json)
Hash identifier: qWGHlmqa6yJvxX4z6j346ttmGh9zL+Arf/v0rm1Qucg=
Subject key identifier: D0:72:3F:F3:D8:76:1C:61:49:B9:4E:54:BF:2C:5C:5F:EA:9D:16:A7
Certificate issuer: /CN=A9111537/serialNumber=A08850D5315F74B6148C2E56F964A7DC193640AE
Certificate serial: 02
Authority key identifier: A0:88:50:D5:31:5F:74:B6:14:8C:2E:56:F9:64:A7:DC:19:36:40:AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111537/D5B3B540760311F1B9B648AC79A30FBC/D5D654E4760611F1B28E97E07AA30FBC.roa
Signing time: Thu 02 Jul 2026 11:11:55 +0000
ROA not before: Thu 02 Jul 2026 11:11:55 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 154742
IP address blocks: 2001:df7:2b40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111537/D5B3B540760311F1B9B648AC79A30FBC/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.crl
rsync://rpki.apnic.net/member_repository/A9111537/D5B3B540760311F1B9B648AC79A30FBC/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 Jul 2026 10:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111537, serialNumber=A08850D5315F74B6148C2E56F964A7DC193640AE
Validity
Not Before: Jul 2 11:11:55 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a46477b-ae54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f4:75:db:18:b9:d2:92:89:6b:24:32:3e:87:
5e:24:5f:4d:7c:62:ca:6a:78:07:23:04:e9:41:bf:
a1:24:ac:7c:d1:ec:a8:45:ee:26:4b:ea:a0:97:c2:
b8:fd:66:67:7a:e3:54:8a:17:cd:da:8d:cb:c2:d0:
05:06:70:08:56:18:57:a9:ac:3e:28:ac:cf:b6:89:
38:cf:3a:61:eb:f5:9f:9c:26:e7:85:8c:74:d7:5a:
5d:e4:bb:db:a2:3f:f7:1a:14:ec:c6:e4:3d:1a:dd:
86:b3:8d:ac:ef:9d:05:59:5f:b1:df:51:8a:54:16:
e3:73:47:fe:23:c4:2f:db:21:dc:0d:ff:66:4f:da:
19:9e:7b:fd:ab:04:97:ea:6e:8b:b3:e9:ad:3d:a4:
bb:6c:17:f3:fb:2e:fd:11:4d:4e:36:19:7f:cd:2a:
b4:e6:85:13:bd:ce:73:6e:15:eb:af:0a:f2:68:b0:
b0:26:34:be:a1:31:66:13:88:38:89:c0:cd:2f:f4:
f2:ed:6b:12:f1:c9:2b:a5:bc:92:b6:e1:82:fd:31:
b6:9e:9e:75:01:25:e8:5c:ae:a5:e1:97:26:14:6a:
ad:a9:11:e5:6a:57:dc:34:1a:40:ad:74:76:36:3f:
00:db:38:67:b5:74:69:79:85:7c:65:1b:16:d6:5a:
02:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:72:3F:F3:D8:76:1C:61:49:B9:4E:54:BF:2C:5C:5F:EA:9D:16:A7
X509v3 Authority Key Identifier:
keyid:A0:88:50:D5:31:5F:74:B6:14:8C:2E:56:F9:64:A7:DC:19:36:40:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111537/D5B3B540760311F1B9B648AC79A30FBC/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111537/D5B3B540760311F1B9B648AC79A30FBC/D5D654E4760611F1B28E97E07AA30FBC.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:2b40::/48
Signature Algorithm: sha256WithRSAEncryption
a9:ce:f3:9f:64:d7:8e:a8:09:7c:33:b0:c8:d0:30:f6:b9:9f:
e6:4c:e8:79:9f:14:09:bc:60:77:fe:ea:7a:7d:71:36:5e:d8:
1e:14:b5:88:af:26:8c:7d:66:0d:2c:e9:9a:58:c1:98:e5:67:
bb:ab:62:a1:26:00:e8:d3:94:24:c9:55:b4:c6:d7:10:e0:95:
f3:51:6a:8a:c9:b2:be:0b:6a:0f:22:b2:d9:d0:80:df:28:df:
14:af:3b:bf:f6:f9:79:93:dc:8e:36:7a:47:c7:e4:f6:f6:ad:
83:b4:05:6d:4a:ad:ed:66:9b:a7:6c:3d:ac:ac:f6:95:01:e0:
7b:6f:9f:5a:4a:f3:c5:f8:e0:68:4b:54:2f:4c:71:d7:7b:2c:
4b:94:e1:94:87:d1:25:08:31:94:bc:70:be:12:fb:6e:c1:b7:
e0:9a:96:a0:f7:9a:02:c0:ee:6e:7c:52:a3:3f:f2:df:75:3f:
35:8b:93:c7:34:01:0f:65:16:89:2f:44:e2:ca:6e:3f:7c:af:
50:51:4f:f7:30:39:5c:62:a1:25:0b:33:5b:95:5c:f8:92:35:
1a:12:1d:06:df:da:99:09:ac:cf:28:9f:ef:39:b1:c7:d8:44:
ca:e9:13:91:b8:cb:9d:d2:03:a7:d5:4c:69:cb:bf:75:f4:4c:
38:15:33:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:36:29 2026 by rpki-client