
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/DB7F68169BC411F1A594B11D5711F970.roa
File: DB7F68169BC411F1A594B11D5711F970.roa (raw, json)
Hash identifier: MzOblxL2EO6eoY/hF+w+6TErc2kgqiCc+Od6pRCAPt0=
Subject key identifier: BC:44:9D:BF:FD:FF:10:17:80:6A:A1:FC:6B:6F:56:67:9F:06:F0:DF
Certificate issuer: /CN=A9143DE2/serialNumber=DF6D002BBCABA250D2AE6B4454E3CBFD67D2C7EA
Certificate serial: 0A7D
Authority key identifier: DF:6D:00:2B:BC:AB:A2:50:D2:AE:6B:44:54:E3:CB:FD:67:D2:C7:EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/320AK7yrolDSrmtEVOPL_WfSx-o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/DB7F68169BC411F1A594B11D5711F970.roa
Signing time: Wed 19 Aug 2026 11:55:22 +0000
ROA not before: Wed 19 Aug 2026 11:55:22 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 134798
IP address blocks: 49.0.6.0/24 maxlen: 24
49.0.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.crl
rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/320AK7yrolDSrmtEVOPL_WfSx-o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 11:59:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2685 (0xa7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143DE2, serialNumber=DF6D002BBCABA250D2AE6B4454E3CBFD67D2C7EA
Validity
Not Before: Aug 19 11:55:22 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a8599aa-0c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e2:58:73:cb:da:99:db:60:80:a6:dc:9f:cc:
8a:f8:7b:8e:cb:cd:26:3d:63:99:64:cb:a7:53:ce:
60:67:52:3d:2a:c6:fd:e3:a9:8d:46:39:a0:3e:8a:
f9:3f:70:dd:0a:02:a6:88:20:a7:46:83:c5:e5:87:
de:bd:9d:ae:e9:bd:da:dc:21:d6:f9:47:6b:de:09:
d0:b3:42:a8:1c:75:fa:eb:0f:bd:71:d7:4e:5f:f3:
2f:31:47:a3:3d:4c:81:6d:e6:be:b3:c8:fb:d9:b7:
e7:a5:59:b3:36:02:c2:c8:35:d7:96:44:f5:fa:71:
47:eb:24:f4:63:be:84:db:62:25:65:f3:2d:87:ee:
7f:0e:bf:b8:ac:4c:87:55:75:dc:c3:d7:7f:b6:66:
cf:9e:66:50:88:a0:14:42:96:93:ec:00:00:ca:21:
69:b1:f7:f7:59:72:91:c6:7c:fa:85:e9:25:f0:37:
42:f9:8c:4e:b1:ff:a1:51:11:c4:fa:71:f9:80:4c:
be:03:d7:1b:c8:86:f4:dd:81:43:a8:1d:01:13:9e:
92:1b:f1:97:b3:1c:8e:68:74:c6:33:d9:73:e6:23:
d9:8d:e3:2f:a9:8b:80:5d:2a:ca:4f:01:3e:16:30:
e4:17:dd:46:c1:a4:02:c0:5f:11:87:be:8f:34:f3:
0e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:44:9D:BF:FD:FF:10:17:80:6A:A1:FC:6B:6F:56:67:9F:06:F0:DF
X509v3 Authority Key Identifier:
keyid:DF:6D:00:2B:BC:AB:A2:50:D2:AE:6B:44:54:E3:CB:FD:67:D2:C7:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/320AK7yrolDSrmtEVOPL_WfSx-o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/DB7F68169BC411F1A594B11D5711F970.roa
sbgp-ipAddrBlock: critical
IPv4:
49.0.6.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:d0:21:c2:7f:14:1c:95:85:50:e8:98:f3:d9:8b:ca:40:8a:
65:98:7b:d8:7a:ec:6a:5e:99:5c:51:e0:f1:d2:05:a0:68:3f:
75:f3:4b:51:c9:41:1a:c5:99:0b:6d:4e:ac:92:88:50:7f:6b:
a2:12:e9:f4:12:72:d6:5d:25:0e:ea:71:ae:6d:ce:8e:93:dd:
5b:1d:37:5e:e6:05:3d:19:4d:75:9f:f5:79:4a:d9:a1:3a:79:
52:73:ae:a8:03:f1:7b:cb:c2:b5:fe:25:bc:25:b0:15:65:99:
4b:77:23:be:ba:7d:d4:02:8e:79:aa:95:dc:66:ef:e8:db:c8:
cc:da:4f:51:8c:3a:9c:ab:ae:af:3c:1c:44:95:e1:5f:e0:5a:
90:1a:52:17:6b:65:2b:dd:c8:b2:0a:2d:32:43:17:12:c7:89:
5d:04:6a:aa:15:00:67:e1:0d:26:6a:55:0f:e8:ad:c7:50:b7:
ab:aa:e6:98:07:32:f5:75:72:97:18:64:3d:2b:47:88:bd:d6:
e2:8d:f4:e9:ed:d5:cf:c8:43:2c:0f:84:3e:70:cb:e0:a4:ea:
dd:8d:bb:7c:bf:58:f6:ad:9f:ba:c1:15:20:c0:0e:48:1f:4a:
a5:66:5f:1f:f1:a1:46:a0:fa:03:60:f4:ee:0d:97:17:95:2e:
09:24:5f:a8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDNERTIxMTAvBgNVBAUTKERGNkQwMDJCQkNBQkEyNTBEMkFFNkI0NDU0RTNDQkZE
NjdEMkM3RUEwHhcNMjYwODE5MTE1NTIyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTg1OTlhYS0wYzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv+JYc8vamdtggKbcn8yK+HuOy80mPWOZZMunU85gZ1I9Ksb946mNRjmgPor5
P3DdCgKmiCCnRoPF5YfevZ2u6b3a3CHW+Udr3gnQs0KoHHX66w+9cddOX/MvMUej
PUyBbea+s8j72bfnpVmzNgLCyDXXlkT1+nFH6yT0Y76E22IlZfMth+5/Dr+4rEyH
VXXcw9d/tmbPnmZQiKAUQpaT7AAAyiFpsff3WXKRxnz6hekl8DdC+YxOsf+hURHE
+nH5gEy+A9cbyIb03YFDqB0BE56SG/GXsxyOaHTGM9lz5iPZjeMvqYuAXSrKTwE+
FjDkF91GwaQCwF8Rh76PNPMOwQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLxEnb/9
/xAXgGqh/GtvVmefBvDfMB8GA1UdIwQYMBaAFN9tACu8q6JQ0q5rRFTjy/1n0sfq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0RFMi9EMjE4REQ1MjhF
OTcxMUVBOEMyREU1MzdDNEY5QUUwMi8zMjBBSzd5cm9sRFNybXRFVk9QTF9XZlN4
LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzMyMEFLN3lyb2xEU3JtdEVWT1BMX1dmU3gtby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDNERTIvRDIxOERENTI4RTk3MTFFQThDMkRFNTM3QzRGOUFFMDIvREI3RjY4MTY5
QkM0MTFGMUE1OTRCMTFENTcxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBMQAGMA0GCSqGSIb3DQEBCwUAA4IBAQA+0CHCfxQclYVQ6Jjz2YvK
QIplmHvYeuxqXplcUeDx0gWgaD9180tRyUEaxZkLbU6skohQf2uiEun0EnLWXSUO
6nGubc6Ok91bHTde5gU9GU11n/V5StmhOnlSc66oA/F7y8K1/iW8JbAVZZlLdyO+
un3UAo55qpXcZu/o28jM2k9RjDqcq66vPBxEleFf4FqQGlIXa2Ur3ciyCi0yQxcS
x4ldBGqqFQBn4Q0malUP6K3HULerquaYBzL1dXKXGGQ9K0eIvdbijfTp7dXPyEMs
D4Q+cMvgpOrdjbt8v1j2rZ+6wRUgwA5IH0qlZl8f8aFGoPoDYPTuDZcXlS4JJF+o
-----END CERTIFICATE-----
Generated at Wed Aug 19 15:11:39 2026 by rpki-client