
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/849C352211F811EF820BF24FC4F9AE02.roa
File: 849C352211F811EF820BF24FC4F9AE02.roa (raw, json)
Hash identifier: Ih8PvSH71tidY/KL+bbrT1wqWaxQVlqqWQgWjuHSNG4=
Subject key identifier: CB:7F:85:EE:35:6B:98:F6:AA:A6:81:E8:29:81:8F:04:35:CF:DE:CF
Certificate issuer: /CN=A911B6FB/serialNumber=AD234E3F1EBBADAD019FE09AFFF70E8075AFDE17
Certificate serial: 01A0
Authority key identifier: AD:23:4E:3F:1E:BB:AD:AD:01:9F:E0:9A:FF:F7:0E:80:75:AF:DE:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/849C352211F811EF820BF24FC4F9AE02.roa
Signing time: Tue 07 Jul 2026 05:31:56 +0000
ROA not before: Tue 07 Jul 2026 05:31:56 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 152853
IP address blocks: 2001:df3:cec0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl
rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Jul 2026 05:05:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416 (0x1a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B6FB, serialNumber=AD234E3F1EBBADAD019FE09AFFF70E8075AFDE17
Validity
Not Before: Jul 7 05:31:56 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a4c8f4c-bd06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e9:fe:e1:06:3e:93:91:4f:e8:a3:6c:49:ab:
93:dc:6b:ce:c7:18:ea:cf:c3:73:eb:f7:5c:84:39:
91:23:42:cc:59:4a:c3:9a:b6:04:44:a4:a9:c6:78:
db:78:34:de:d6:c7:ea:01:79:78:aa:3e:78:0a:34:
f5:e8:d9:16:b2:f2:b4:c6:17:a5:fb:66:ef:ca:35:
cc:2e:3c:bb:21:f1:64:6a:0e:69:f2:e3:3c:66:f4:
02:6b:85:f0:72:76:cf:99:8d:21:8b:b9:a1:15:b2:
c6:ac:c9:e1:96:d4:6e:79:0e:2e:6d:55:eb:81:5a:
0a:aa:05:1e:c8:a5:08:c5:b2:09:f5:df:1a:6a:85:
ce:99:76:5b:6c:eb:13:6d:c4:5a:51:8e:39:53:f4:
9b:36:21:57:93:62:79:ca:6b:07:64:a0:b8:8d:ac:
22:57:93:a0:99:af:2a:95:ad:7b:09:d2:de:5a:d1:
01:99:e3:f3:b4:4f:68:01:46:06:f1:83:f6:ca:14:
62:79:4a:5e:fe:29:76:5d:9f:a8:49:f9:0d:c6:d5:
d8:15:19:c6:21:aa:04:1f:f8:48:8f:01:ed:c7:9d:
dd:d9:9d:88:dc:3d:10:e0:61:37:a8:39:cb:3a:88:
b3:e7:55:fb:33:65:c8:be:b1:61:c3:15:d6:0f:64:
2f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7F:85:EE:35:6B:98:F6:AA:A6:81:E8:29:81:8F:04:35:CF:DE:CF
X509v3 Authority Key Identifier:
keyid:AD:23:4E:3F:1E:BB:AD:AD:01:9F:E0:9A:FF:F7:0E:80:75:AF:DE:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/849C352211F811EF820BF24FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:cec0::/48
Signature Algorithm: sha256WithRSAEncryption
41:0f:9a:ae:4e:74:40:44:87:74:81:33:b3:2a:2a:05:67:b4:
cd:7b:a3:f2:12:dc:92:da:28:1e:4c:a1:12:42:70:21:3c:93:
86:74:c0:81:0e:c6:95:43:3f:7f:0c:b6:f4:09:9a:df:7b:e6:
4d:36:e0:74:4c:18:6b:04:b5:6e:6e:9b:99:f4:9d:a8:82:5c:
b9:44:79:47:a6:0e:2a:2e:80:e5:76:b4:20:42:a2:ae:17:f6:
06:1d:5f:b1:8a:fb:f6:70:cf:5b:10:65:66:53:63:13:7f:5d:
2d:f7:4c:63:ec:34:29:49:e0:11:f4:9d:d3:b3:b1:91:1d:37:
cc:f8:86:41:30:3d:e5:ef:1b:b2:13:87:3b:7f:87:fb:01:49:
6c:08:fa:35:8f:ad:d2:9f:84:01:71:11:f8:92:46:be:50:f7:
29:15:ff:ab:52:21:71:c4:0c:41:60:b3:16:d6:61:de:de:db:
3f:9c:46:45:73:02:0c:0e:e1:b9:ad:03:cc:85:26:f1:8c:b5:
36:e9:de:42:1e:94:c4:58:49:89:79:b0:51:e1:af:54:ce:d7:
dd:04:61:81:6c:2c:07:ff:4c:c6:e6:d5:5b:1c:b1:f1:af:23:
84:6c:1b:2b:51:c0:13:c0:8b:98:e3:08:13:d7:2d:d3:0b:b0:
3b:b4:fc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 23:52:47 2026 by rpki-client