
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/6C8E6D381C6411F1B68A335785EE528E.roa
File: 6C8E6D381C6411F1B68A335785EE528E.roa (raw, json)
Hash identifier: PHiN9WhM1Yjs+fJf4ch6Xa0wX5cn9N5EasUrbY9oPEs=
Subject key identifier: 49:28:10:F5:DF:D8:C2:26:75:1B:E7:49:07:E4:5E:3B:F6:8F:1C:23
Certificate issuer: /CN=A915B2EC/serialNumber=C93438F7DCE1ADB3FFE0E588536FAAB9EFFFEFD7
Certificate serial: 04
Authority key identifier: C9:34:38:F7:DC:E1:AD:B3:FF:E0:E5:88:53:6F:AA:B9:EF:FF:EF:D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTQ499zhrbP_4OWIU2-que__79c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/6C8E6D381C6411F1B68A335785EE528E.roa
Signing time: Tue 10 Mar 2026 09:35:07 +0000
ROA not before: Tue 10 Mar 2026 09:35:07 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 149767
IP address blocks: 2407:d840:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.crl
rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTQ499zhrbP_4OWIU2-que__79c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Mar 2026 22:56:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B2EC, serialNumber=C93438F7DCE1ADB3FFE0E588536FAAB9EFFFEFD7
Validity
Not Before: Mar 10 09:35:07 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69afe5cb-d35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4f:1c:ff:7f:59:06:01:45:b2:99:e1:ce:62:
84:97:d7:6d:85:4d:f5:1f:c2:fc:29:d2:24:bb:46:
88:c6:e0:62:f6:da:2e:89:63:8a:d4:3c:d0:a4:a7:
ab:3f:e8:2c:06:9a:15:20:3f:cd:7b:9a:a3:88:b1:
85:52:d4:ad:1e:16:4e:83:85:c4:20:1f:12:aa:0b:
41:c3:d3:a5:1b:44:09:17:d6:39:02:a1:2e:a2:be:
ec:20:21:63:5c:f6:85:cc:f1:af:c0:b8:06:e1:62:
c8:ee:db:3b:d2:03:9e:cd:3b:a7:34:4a:57:29:df:
ec:c6:3c:39:e8:51:c0:66:94:06:5c:9d:a0:41:1c:
e6:68:e3:8c:0f:45:b2:42:be:3c:40:50:c3:2b:b7:
1d:53:8e:5c:b7:63:4a:2a:69:95:4f:a2:23:e5:1f:
fe:48:96:60:47:34:70:b8:02:37:52:7a:11:f7:a3:
0c:a8:ba:c2:6e:13:e8:9f:75:f7:ac:7a:a9:a3:64:
7c:71:c7:cf:9b:23:f9:87:cb:2d:f7:db:0c:36:f7:
21:11:44:ce:10:12:83:eb:61:d1:41:24:e5:b6:39:
53:8a:3f:e6:d1:e1:ad:20:da:7e:c4:28:9d:4d:af:
46:66:26:e0:14:27:51:b7:33:39:ad:b6:3e:3f:8a:
a3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:28:10:F5:DF:D8:C2:26:75:1B:E7:49:07:E4:5E:3B:F6:8F:1C:23
X509v3 Authority Key Identifier:
keyid:C9:34:38:F7:DC:E1:AD:B3:FF:E0:E5:88:53:6F:AA:B9:EF:FF:EF:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTQ499zhrbP_4OWIU2-que__79c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/6C8E6D381C6411F1B68A335785EE528E.roa
sbgp-ipAddrBlock: critical
IPv6:
2407:d840:2::/48
Signature Algorithm: sha256WithRSAEncryption
14:a7:df:cc:2b:13:e1:f0:0e:65:a7:7f:3f:a8:b7:8d:f2:cb:
33:a3:c8:53:29:09:3b:29:d2:49:a1:91:08:64:a8:e2:1e:26:
23:0b:57:ef:80:f5:95:18:73:fd:4b:35:ee:8d:84:c8:13:bb:
6e:af:e9:66:bd:dd:ca:0d:eb:ed:89:70:6b:83:50:fc:96:fc:
39:82:89:e7:da:e2:96:b3:07:f2:84:2a:e4:fe:2f:65:ea:6c:
42:e2:59:dd:53:23:78:94:e3:70:b4:7c:f9:05:45:33:e2:ac:
b1:14:4e:a7:14:80:8f:b9:19:6e:18:48:4f:0f:28:54:55:4c:
a1:81:ae:ef:2c:97:6c:05:99:7b:ee:70:3e:73:97:98:33:e1:
0f:66:bd:1b:1f:93:f5:8c:d8:21:1e:7e:9c:52:0e:8e:17:40:
54:71:18:2e:3e:c3:f0:b7:02:13:f2:ba:87:81:50:2e:25:3f:
9b:ea:30:af:97:51:a4:2f:d8:4b:d1:3b:31:8d:26:30:41:37:
60:12:0b:f3:3b:2f:91:42:66:36:98:28:76:e8:4b:82:f1:63:
f0:be:75:0c:9a:f8:91:76:6b:05:5e:82:53:f0:c8:cb:c3:5f:
7f:e9:95:01:76:05:0e:35:d6:64:2e:79:e2:73:2f:6d:90:4f:
65:b5:9f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 18:39:03 2026 by rpki-client