
$ rpki-client -vvf rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/2C0C6AD016BA11F18FA4AADE273D8C67.roa
File: 2C0C6AD016BA11F18FA4AADE273D8C67.roa (raw, json)
Hash identifier: Mo9qwFmdq75T/whkFUsqjkEWIUbTkfdU/vMW7YIniHg=
Subject key identifier: 68:3D:03:D4:47:4B:4B:9B:A7:C0:EB:39:13:D9:87:B6:1A:74:F9:26
Certificate issuer: /CN=A914145F/serialNumber=40E9302B75C5EA1923EA7F6958E2AF410865AF8E
Certificate serial: 03
Authority key identifier: 40:E9:30:2B:75:C5:EA:19:23:EA:7F:69:58:E2:AF:41:08:65:AF:8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/2C0C6AD016BA11F18FA4AADE273D8C67.roa
Signing time: Tue 03 Mar 2026 04:33:48 +0000
ROA not before: Tue 03 Mar 2026 04:33:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154525
IP address blocks: 2001:df6:c6c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.crl
rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 08:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914145F, serialNumber=40E9302B75C5EA1923EA7F6958E2AF410865AF8E
Validity
Not Before: Mar 3 04:33:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69a664ac-04a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:64:27:2b:9e:4a:49:33:37:6f:8c:73:a6:f8:
df:a4:2a:3c:18:41:cf:b0:b5:9c:e8:68:9e:82:9d:
73:90:df:f7:74:94:31:e0:a9:45:98:0a:c3:44:7a:
12:6c:3b:d3:31:6e:c1:5e:ec:ac:b4:8a:32:e1:c0:
fc:5e:2e:a6:0c:fa:3f:7b:bf:5b:22:8f:36:77:da:
bc:2d:7a:89:a9:50:d0:f5:fa:50:aa:e2:ce:e0:66:
b9:e0:28:5b:54:bf:23:23:bf:4a:d5:ff:42:2c:dc:
63:99:99:7c:f9:0d:fc:5a:5f:47:2c:3f:69:fc:62:
e6:4a:b8:5a:5f:f7:b6:a7:db:ea:c9:f6:11:c2:9d:
ac:ac:0b:69:43:d4:0f:12:25:4f:15:35:57:b1:c5:
72:21:d3:1e:e3:d6:45:31:e5:98:fa:5d:26:5d:df:
19:cb:27:a9:b3:61:3f:99:f2:59:fd:37:99:09:20:
45:45:af:41:01:6f:93:51:0e:a1:d4:f8:a8:4d:9b:
30:70:b8:6b:be:fe:44:70:77:57:54:1d:8a:9b:9a:
04:0b:ba:d0:f1:c0:cf:47:8b:0f:28:b8:6d:db:d3:
c9:74:df:07:0d:29:9a:49:49:9c:6d:25:e5:89:33:
26:79:0c:84:15:11:53:11:e1:29:9c:2b:80:be:d0:
1a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3D:03:D4:47:4B:4B:9B:A7:C0:EB:39:13:D9:87:B6:1A:74:F9:26
X509v3 Authority Key Identifier:
keyid:40:E9:30:2B:75:C5:EA:19:23:EA:7F:69:58:E2:AF:41:08:65:AF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/2C0C6AD016BA11F18FA4AADE273D8C67.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:c6c0::/48
Signature Algorithm: sha256WithRSAEncryption
09:9c:56:bd:75:d0:39:bc:38:62:00:06:78:b0:cd:70:72:6c:
83:be:76:21:cd:22:e8:1d:a5:88:8f:89:e2:12:0d:12:3b:9d:
fe:60:76:03:33:ee:57:05:63:33:2d:35:21:3d:80:6d:43:07:
8f:27:3d:67:90:9c:1d:65:4f:7c:7b:c3:30:ac:a6:f2:32:d3:
bf:0c:83:e7:ea:4c:ef:55:3f:53:69:5d:9e:df:52:6f:3c:c2:
04:0c:c5:ad:d3:c9:69:a4:e0:67:78:ed:e7:0e:22:f4:ac:a5:
c5:fe:88:0a:c5:f3:fd:04:3f:10:9a:8f:a7:65:70:31:da:e8:
09:49:11:ec:19:d6:a2:19:7c:f4:f6:45:1b:47:b9:63:1a:ae:
ef:46:32:c1:df:17:50:5b:a0:5b:80:df:2d:5f:b2:69:ac:d2:
33:60:a8:2c:f5:3a:f6:e9:ae:85:b3:4e:e3:b2:90:5e:30:75:
aa:65:13:8a:67:33:50:71:e4:4e:40:6b:cb:c0:4b:3f:88:b5:
4a:c2:35:7f:95:ab:25:c2:22:11:90:8c:ac:54:3a:ea:19:5c:
32:18:97:43:f5:c2:44:29:3d:19:dc:1e:bb:e8:f8:71:7b:0b:
67:b1:7d:b5:ad:fa:dc:af:fa:1c:da:92:0c:6e:e3:87:31:9c:
53:f6:a0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:39:23 2026 by rpki-client