
$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/1EF20696EEC611F0B6553517716F56BC.roa
File: 1EF20696EEC611F0B6553517716F56BC.roa (raw, json)
Hash identifier: C2HYiXqh9FrGOeUUq4VM0nBBKKmKPJMXcJIwTDA1cJw=
Subject key identifier: 05:FE:BF:B3:17:DA:62:3A:B3:32:73:E0:64:CF:FF:BE:1D:55:0C:FD
Certificate issuer: /CN=A911695A/serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A
Certificate serial: 3B
Authority key identifier: 94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/1EF20696EEC611F0B6553517716F56BC.roa
Signing time: Mon 02 Mar 2026 11:27:41 +0000
ROA not before: Sun 11 Jan 2026 08:18:34 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 154313
IP address blocks: 2001:df6:3e40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl
rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:13:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911695A, serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A
Validity
Not Before: Jan 11 08:18:34 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a5742d-07bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:68:62:85:4b:73:76:dc:ba:1c:16:ae:fe:80:
7a:b7:c4:e9:f4:38:87:b3:69:4a:50:33:50:4b:e4:
90:6e:9c:67:c7:d5:31:27:28:d0:a0:1b:9b:86:c9:
11:09:d1:1a:d2:ab:7a:f5:07:99:69:28:53:60:96:
94:c8:01:50:33:09:ce:0a:2d:55:a5:1a:cc:b8:87:
45:32:1b:7b:5d:40:b3:cc:99:9c:f2:72:10:f9:90:
d1:e8:69:9b:29:ca:88:0d:b1:a8:6c:76:58:4a:05:
82:11:3b:ad:17:f7:a6:e0:79:18:88:ab:d3:41:16:
0f:2d:50:f4:bd:96:4b:aa:05:95:61:0e:c6:f0:7d:
8b:68:74:15:ba:ed:05:af:36:71:43:b7:a0:48:3e:
2a:54:15:80:ed:67:02:f3:9d:1d:26:ae:23:65:44:
a8:d1:e7:23:7e:f9:de:61:fd:42:68:62:1b:5b:ee:
4e:96:56:96:e7:50:c1:b8:d3:01:fd:c2:33:43:61:
7e:9b:e1:35:96:5b:2e:5a:80:db:21:da:b1:61:28:
23:53:26:93:1a:12:3b:82:61:45:6b:3d:eb:ba:0c:
e8:4a:f2:0e:95:a9:55:f5:1e:40:9c:fc:eb:cb:c0:
60:ed:3a:59:61:1a:ad:1a:f3:b8:69:70:40:72:7f:
e6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FE:BF:B3:17:DA:62:3A:B3:32:73:E0:64:CF:FF:BE:1D:55:0C:FD
X509v3 Authority Key Identifier:
keyid:94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/1EF20696EEC611F0B6553517716F56BC.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:3e40::/48
Signature Algorithm: sha256WithRSAEncryption
0d:90:4e:58:9b:2a:ef:65:93:a4:78:3c:8c:b1:57:00:5d:c4:
cb:56:3a:33:ab:98:07:2e:cc:91:ba:5d:6d:d4:fa:0e:a2:35:
84:a3:3e:82:8f:1c:bb:6c:d1:f7:f8:e8:cc:f0:b0:f4:8d:df:
c0:ea:91:0e:55:04:ec:e4:b7:05:d5:14:31:27:d1:74:4f:47:
3f:61:78:76:34:84:78:9d:4f:28:e4:c5:ae:2e:7a:f1:98:a9:
7d:ec:f3:bd:42:c4:c6:dc:fc:21:73:f8:a7:d7:1a:ad:83:12:
ec:aa:99:48:e6:81:78:ed:30:e4:8c:d1:54:51:d7:5f:53:c2:
2a:d2:85:29:5b:ce:9a:88:7f:2d:48:a9:20:6c:fe:f1:d5:3a:
f8:d9:ba:8e:47:cd:ec:f8:d4:c2:83:b0:8a:9c:ad:0e:99:da:
3e:1e:ee:e7:14:c4:eb:55:b1:4c:8e:4a:82:b9:58:a6:4f:58:
b5:81:29:7f:dd:03:af:33:a0:8c:67:89:8d:d7:08:89:0a:9c:
2f:9e:a8:af:f6:8d:32:f7:f1:a9:18:2b:a1:49:5b:d3:96:cc:
05:6e:ab:6a:b9:af:0c:a0:21:a7:3c:52:ed:88:b6:63:bc:56:
db:12:c5:54:a9:06:15:b6:0e:e5:1a:7b:42:2a:0c:20:3a:65:
fe:fa:66:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 13:14:45 2026 by rpki-client