
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/21D4377C8C4511F19227BDCF5411F970.roa
File: 21D4377C8C4511F19227BDCF5411F970.roa (raw, json)
Hash identifier: Q5nqflo0XdbDKgMTEhv81FckTDKKK7RQBGI9jc5A/cI=
Subject key identifier: B6:69:22:26:28:6B:D5:6A:19:8F:EA:3C:56:8D:89:CF:F7:89:51:F3
Certificate issuer: /CN=A912B666/serialNumber=3508197A10FEA46A718463314FEBA93944B6248B
Certificate serial: 8E
Authority key identifier: 35:08:19:7A:10:FE:A4:6A:71:84:63:31:4F:EB:A9:39:44:B6:24:8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQgZehD-pGpxhGMxT-upOUS2JIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/21D4377C8C4511F19227BDCF5411F970.roa
Signing time: Thu 30 Jul 2026 18:33:17 +0000
ROA not before: Thu 30 Jul 2026 18:33:17 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 17644
IP address blocks: 2001:df6:5941::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.crl
rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQgZehD-pGpxhGMxT-upOUS2JIs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 01 Sep 2026 07:25:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B666, serialNumber=3508197A10FEA46A718463314FEBA93944B6248B
Validity
Not Before: Jul 30 18:33:17 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a6b98ed-c658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:51:04:01:23:d6:c2:3a:93:89:41:c6:80:
ae:d1:6d:61:63:6d:94:c0:95:03:a6:18:c6:97:34:
65:8a:a9:e0:b6:62:01:06:58:51:f1:0a:66:91:f8:
5a:5c:70:41:f9:2d:2f:15:5e:eb:a3:66:3c:03:a3:
1b:d6:2b:a6:d5:22:68:98:c5:b1:bb:3a:8b:be:c7:
64:aa:ed:3f:9f:1e:ff:ba:fb:00:e0:62:da:ed:fd:
8f:15:eb:5b:89:55:11:ad:85:4e:d6:fe:5a:af:d7:
01:c7:d7:0b:ae:84:71:6c:1e:8e:27:8d:18:4f:3b:
16:60:45:1b:17:c8:04:7e:c4:90:5d:a3:0e:26:a6:
e6:66:4d:44:88:99:11:34:db:16:de:ec:ee:7e:e2:
22:d8:82:89:c7:c0:1b:7f:0b:99:e9:03:6d:c9:1f:
e9:0d:1f:91:70:fe:79:b6:42:53:3f:90:21:0b:7c:
36:cf:f5:01:b9:5d:7b:ac:3c:20:a9:43:28:80:7b:
4b:2d:b8:34:3b:92:30:98:be:f9:4e:1d:1c:d4:97:
2d:bf:b6:ec:2a:5e:c4:fb:58:e3:36:69:bb:47:a2:
97:63:00:75:21:f6:e0:ce:ed:10:55:54:6b:73:7e:
59:5d:4c:fa:25:e9:c8:51:f7:9e:74:8a:b1:8d:96:
be:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:69:22:26:28:6B:D5:6A:19:8F:EA:3C:56:8D:89:CF:F7:89:51:F3
X509v3 Authority Key Identifier:
keyid:35:08:19:7A:10:FE:A4:6A:71:84:63:31:4F:EB:A9:39:44:B6:24:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQgZehD-pGpxhGMxT-upOUS2JIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/21D4377C8C4511F19227BDCF5411F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:5941::/48
Signature Algorithm: sha256WithRSAEncryption
5c:15:aa:5d:84:a0:b7:bc:f7:de:09:a8:02:ad:e7:e8:97:a3:
48:ca:db:0e:6e:d7:e8:0f:47:58:6c:38:f4:1e:3c:a4:17:58:
72:3b:b9:78:56:35:85:c3:8b:a8:ea:e7:62:95:fb:10:65:6c:
b2:5d:9e:92:01:91:7e:f1:6b:a2:94:80:ea:1d:03:19:1c:ee:
89:38:9e:31:f8:98:b2:02:4f:81:7a:e6:92:ea:e5:39:58:49:
c3:31:d7:0e:a7:f5:ea:d0:63:9c:75:b7:ed:f0:6b:b2:ad:4f:
1e:17:6b:1a:47:57:67:cc:18:bb:56:73:fb:c6:f8:d5:b1:d6:
3c:ea:bc:a6:d3:cb:78:28:11:9a:cf:33:aa:28:28:b8:58:46:
2e:c0:f5:bb:3f:fe:08:2e:58:af:89:c7:3e:8e:1f:b7:99:f6:
af:49:db:83:a1:ea:c9:c6:92:3f:56:89:b5:65:dc:07:5d:36:
c2:5c:bc:e5:82:17:5d:e0:1c:b1:9b:be:48:af:8e:31:5e:29:
35:db:ca:b4:2c:0d:7e:e0:da:75:1a:4a:b6:07:49:25:ee:05:
50:3c:89:83:81:f5:35:c8:51:94:b7:45:5e:73:20:20:48:c0:
2b:40:ff:53:4c:e6:6a:ea:6c:f3:ea:de:2d:f1:e9:d6:5e:20:
80:25:6c:2a
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkI2NjYxMTAvBgNVBAUTKDM1MDgxOTdBMTBGRUE0NkE3MTg0NjMzMTRGRUJBOTM5
NDRCNjI0OEIwHhcNMjYwNzMwMTgzMzE3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZiOThlZC1jNjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvqpRBAEj1sI6k4lBxoCu0W1hY22UwJUDphjGlzRliqngtmIBBlhR8Qpmkfha
XHBB+S0vFV7ro2Y8A6Mb1ium1SJomMWxuzqLvsdkqu0/nx7/uvsA4GLa7f2PFetb
iVURrYVO1v5ar9cBx9cLroRxbB6OJ40YTzsWYEUbF8gEfsSQXaMOJqbmZk1EiJkR
NNsW3uzufuIi2IKJx8AbfwuZ6QNtyR/pDR+RcP55tkJTP5AhC3w2z/UBuV17rDwg
qUMogHtLLbg0O5IwmL75Th0c1Jctv7bsKl7E+1jjNmm7R6KXYwB1Ifbgzu0QVVRr
c35ZXUz6JenIUfeedIqxjZa+KwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFLZpIiYo
a9VqGY/qPFaNic/3iVHzMB8GA1UdIwQYMBaAFDUIGXoQ/qRqcYRjMU/rqTlEtiSL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjY2Ni85OTM2MUE3Q0M5
MjkxMUYwQjIzOEYyODFDNEY5QUUwMi9OUWdaZWhELXBHcHhoR014VC11cE9VUzJK
SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05RZ1plaEQtcEdweGhHTXhULXVwT1VTMkpJcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkI2NjYvOTkzNjFBN0NDOTI5MTFGMEIyMzhGMjgxQzRGOUFFMDIvMjFENDM3N0M4
QzQ1MTFGMTkyMjdCRENGNTQxMUY5NzAucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN9llBMA0GCSqGSIb3DQEBCwUAA4IBAQBcFapdhKC3vPfeCagC
refol6NIytsObtfoD0dYbDj0HjykF1hyO7l4VjWFw4uo6udilfsQZWyyXZ6SAZF+
8WuilIDqHQMZHO6JOJ4x+JiyAk+BeuaS6uU5WEnDMdcOp/Xq0GOcdbft8GuyrU8e
F2saR1dnzBi7VnP7xvjVsdY86rym08t4KBGazzOqKCi4WEYuwPW7P/4ILlivicc+
jh+3mfavSduDoerJxpI/Vom1ZdwHXTbCXLzlghdd4Byxm75Ir44xXik128q0LA1+
4Np1Gkq2B0kl7gVQPImDgfU1yFGUt0VecyAgSMArQP9TTOZq6mzz6t4t8enWXiCA
JWwq
-----END CERTIFICATE-----
Generated at Wed Aug 26 20:25:59 2026 by rpki-client