
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/92F8F6D042DA11ED93029A6AC4F9AE02.roa
File: 92F8F6D042DA11ED93029A6AC4F9AE02.roa (raw, json)
Hash identifier: 742WnLRxRAdtV7KzoHDoGL/kuH4GkN1lYPhgQ1RkcrQ=
Subject key identifier: F9:B6:00:56:BD:A8:B3:F9:5B:33:C6:FF:FE:6A:E5:9D:6C:C1:99:16
Certificate issuer: /CN=A913D46F/serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880
Certificate serial: 0D45
Authority key identifier: 39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/92F8F6D042DA11ED93029A6AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:35:12 +0000
ROA not before: Fri 12 Sep 2025 18:28:16 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 141731
IP address blocks: 2406:ff80::/32 maxlen: 32
2406:ff80:1::/48 maxlen: 48
2406:ff80:2::/48 maxlen: 48
2406:ff80:3::/48 maxlen: 48
2406:ff80:4::/48 maxlen: 48
2406:ff80:5::/48 maxlen: 48
2406:ff80:6::/48 maxlen: 48
2406:ff80:7::/48 maxlen: 48
2406:ff80:8::/48 maxlen: 48
2406:ff80:9::/48 maxlen: 48
2406:ff80:a::/48 maxlen: 48
2406:ff80:b::/48 maxlen: 48
2406:ff80:c::/48 maxlen: 48
2406:ff80:d::/48 maxlen: 48
2406:ff80:e::/48 maxlen: 48
2406:ff80:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl
rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 17:57:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3397 (0xd45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D46F, serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880
Validity
Not Before: Sep 12 18:28:16 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a45caf-3422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cb:9f:4f:cf:8d:13:dd:53:33:35:d4:28:25:
7c:e2:b4:b3:0c:a1:d4:1a:e5:ef:8a:5b:ef:93:33:
90:85:65:c2:a3:34:16:9c:4f:14:17:32:83:ac:07:
28:aa:15:3f:97:a6:db:86:82:9f:a2:d7:b5:ae:3b:
6d:f1:ad:9a:eb:cc:f9:ff:2d:bb:c8:18:29:6b:95:
c0:48:16:26:1e:d7:86:be:f4:58:9e:e9:e9:08:fb:
a4:9a:07:53:70:29:33:d1:7f:58:38:5a:71:8d:85:
48:08:28:65:84:69:cb:5e:b3:47:32:e5:a3:39:13:
fb:e0:7a:2f:d2:7c:b5:4f:d7:ca:3a:f8:e8:85:b8:
b2:f7:8c:f6:ac:6e:b1:ae:e6:c6:8a:2b:b3:b2:a6:
61:f9:24:11:55:ca:c4:30:6a:9c:91:3e:ba:0d:2a:
a4:10:97:8c:cd:69:05:92:31:4b:60:b4:0f:ce:95:
44:7e:0b:8d:91:9a:ce:87:5d:9b:10:a9:30:37:da:
c5:ab:03:75:91:6f:74:3d:e0:06:ac:f3:f8:0e:c6:
2e:f3:d1:c4:fe:73:fc:c0:ad:d1:a4:5a:27:8a:f2:
60:2c:ba:93:c0:6d:66:27:16:29:18:3c:9f:d3:7f:
d7:7f:51:29:b2:45:c4:f1:0c:ca:87:47:68:45:03:
7b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B6:00:56:BD:A8:B3:F9:5B:33:C6:FF:FE:6A:E5:9D:6C:C1:99:16
X509v3 Authority Key Identifier:
keyid:39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/92F8F6D042DA11ED93029A6AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:ff80::/32
Signature Algorithm: sha256WithRSAEncryption
10:6e:f1:f9:f7:df:2e:3b:24:69:f9:14:69:3d:e3:d2:cd:76:
42:11:a6:0e:1c:7c:02:95:24:03:7d:b7:2f:c8:a0:b4:51:88:
73:7b:46:63:e7:37:5f:6a:6d:82:73:30:08:ed:f0:57:dd:f8:
a7:2c:1e:16:34:d1:44:e3:9b:ca:45:f8:b2:cd:ef:9d:97:10:
fc:37:b3:68:82:6c:28:b8:3b:91:12:d3:09:95:d7:43:6d:3b:
c2:03:eb:65:c7:a7:ce:6c:4a:d2:fa:ed:26:ff:cd:43:54:2a:
38:a9:7e:74:e1:61:4f:ab:f3:eb:fb:0c:2d:d4:f0:7e:f1:2c:
d2:18:21:63:62:2e:d9:60:00:80:a8:19:25:33:65:bc:3f:45:
0b:89:a0:06:54:01:f4:4f:16:56:2a:a9:35:df:65:04:86:ae:
2b:9f:86:27:46:af:3b:72:8d:45:46:fc:6f:47:d1:cd:fe:6f:
c4:91:4a:fb:37:7d:34:25:96:89:2c:3c:db:1c:5f:e5:64:89:
a2:83:13:62:f4:af:d8:06:5a:10:a8:48:71:7d:79:c8:15:ea:
83:29:77:fb:5c:96:81:d8:8b:35:7d:d0:1b:d0:37:8c:33:5b:
74:ef:3d:d3:0c:77:18:81:0a:a5:80:9d:3d:2a:48:7c:cc:76:
0e:10:79:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 18:56:44 2026 by rpki-client