
$ rpki-client -vvf rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/C2C37E56153A11EF9E378A14C4F9AE02.roa
File: C2C37E56153A11EF9E378A14C4F9AE02.roa (raw, json)
Hash identifier: DCEbqUc1yheRBTgF9eKK2YLM6+N73DDKwX1+nfluYt8=
Subject key identifier: 50:95:21:45:3A:AA:51:8B:E7:6D:F2:39:E5:C7:A3:0A:31:35:C1:EB
Certificate issuer: /CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Certificate serial: 0227
Authority key identifier: CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/C2C37E56153A11EF9E378A14C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:09:53 +0000
ROA not before: Tue 03 Jun 2025 04:01:31 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 201217
IP address blocks: 2401:5a0:ff10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 02:23:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 551 (0x227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911710E, serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Validity
Not Before: Jun 3 04:01:31 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a59a31-ec95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:15:1d:4f:07:2c:d0:11:a4:c0:7a:1e:71:0e:
83:75:16:15:03:cf:c1:8f:e0:d0:6b:54:36:e8:58:
d1:ea:ec:ef:bf:d5:27:1e:36:10:61:5e:e3:30:8d:
18:14:7e:ee:35:26:0c:0e:43:73:20:2b:3a:7f:a0:
c9:d6:50:1b:28:e5:0e:93:01:1b:ec:12:22:81:68:
f1:ae:82:4d:5e:8d:e6:de:ae:ff:64:0e:60:da:31:
a4:79:c2:cc:dc:8f:59:f6:91:96:f0:ce:54:ef:60:
f0:29:a4:95:bd:f4:5b:fe:e5:2c:9e:bc:2d:8c:42:
82:ab:ef:6a:af:47:a5:1c:e9:97:55:76:c7:c3:84:
4c:ee:9e:d2:26:70:66:07:e2:09:0e:ee:ca:a8:0d:
96:ec:85:c7:f9:ed:db:1f:56:dd:ab:42:4b:f2:95:
df:98:78:78:20:93:b1:a5:ae:6b:95:f9:03:df:47:
48:2e:14:f7:73:73:63:4c:30:91:73:24:e8:b6:7b:
d0:80:79:26:d5:dd:1b:79:ef:3e:e6:4e:f2:3e:32:
35:7e:65:71:74:76:17:76:79:95:0b:bc:b0:9c:5b:
bd:78:3e:9c:0a:6f:2e:4b:36:cd:e8:fa:86:5a:fa:
a6:40:19:22:60:fa:25:fc:f5:32:1a:53:36:bf:8b:
c3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:95:21:45:3A:AA:51:8B:E7:6D:F2:39:E5:C7:A3:0A:31:35:C1:EB
X509v3 Authority Key Identifier:
keyid:CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/C2C37E56153A11EF9E378A14C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:5a0:ff10::/44
Signature Algorithm: sha256WithRSAEncryption
cd:2b:b9:0c:1c:6f:59:d9:9d:a4:dd:1d:ef:86:72:61:33:7a:
ea:60:cd:01:92:85:b3:bf:26:64:ac:d8:bf:e2:2f:42:b9:12:
c8:34:0d:cf:28:99:7b:b5:52:f0:54:7a:e7:5f:60:45:dc:f2:
84:85:c0:41:88:3f:70:ce:5e:4e:21:9b:29:5e:ed:5b:dd:66:
ea:9d:83:13:98:c3:da:db:d6:b8:7b:fa:22:95:7b:fa:2e:3c:
50:99:f4:6d:32:d3:5e:28:8b:38:e2:92:61:f4:fb:b2:48:d8:
67:79:84:bd:37:e2:2b:40:b9:ca:f0:b8:ff:30:ec:3e:84:db:
0e:85:e4:de:dd:f8:02:70:db:fe:3c:46:4e:70:67:ed:6a:cc:
82:2d:35:3e:16:49:b1:ac:5d:6c:48:ed:dd:f4:ca:c7:6a:e6:
6c:7f:16:c9:a7:a7:2f:8e:09:bb:5a:69:49:ed:5d:d8:ee:d4:
57:2a:dc:eb:de:cd:42:8e:8d:71:68:73:49:f8:f2:ad:96:50:
63:8a:c5:04:37:4f:ce:01:58:49:9d:b1:ed:7e:d4:d3:3e:46:
2d:0b:0e:12:43:68:45:1f:48:c7:e3:dc:75:29:65:9a:d2:af:
41:75:40:cf:d5:d7:30:18:3b:f4:8e:3c:97:57:85:36:ee:22:
6b:28:c4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 10:43:14 2026 by rpki-client