
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181803/C9238C6602B211F1BEFAC7A13E3D8C67/CE3F95CC02B311F18F28F1A63E3D8C67.roa
File: CE3F95CC02B311F18F28F1A63E3D8C67.roa (raw, json)
Hash identifier: wCTc999rZTDq88G4vNU0LDWzQb6uSs8IUZr2oipBmuw=
Subject key identifier: 94:8E:84:EE:C4:17:C5:8F:F6:8D:9E:42:E5:E0:FD:2E:6E:DA:B1:EA
Certificate issuer: /CN=A9181803/serialNumber=8E1AE27DB194FB078285193BBDCBE7820055344C
Certificate serial: 02
Authority key identifier: 8E:1A:E2:7D:B1:94:FB:07:82:85:19:3B:BD:CB:E7:82:00:55:34:4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhrifbGU-weChRk7vcvnggBVNEw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181803/C9238C6602B211F1BEFAC7A13E3D8C67/CE3F95CC02B311F18F28F1A63E3D8C67.roa
Signing time: Thu 05 Feb 2026 16:57:51 +0000
ROA not before: Thu 05 Feb 2026 16:57:51 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 151965
IP address blocks: 2001:df6:acc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181803/C9238C6602B211F1BEFAC7A13E3D8C67/jhrifbGU-weChRk7vcvnggBVNEw.crl
rsync://rpki.apnic.net/member_repository/A9181803/C9238C6602B211F1BEFAC7A13E3D8C67/jhrifbGU-weChRk7vcvnggBVNEw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhrifbGU-weChRk7vcvnggBVNEw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 07:24:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181803, serialNumber=8E1AE27DB194FB078285193BBDCBE7820055344C
Validity
Not Before: Feb 5 16:57:51 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6984cc0f-01c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ae:41:0d:1d:f6:b6:9e:be:57:d0:67:73:e8:
19:52:ee:5f:05:40:fb:ab:8e:4d:de:9b:1b:17:e8:
aa:75:a7:93:9a:bc:b0:8f:a6:63:21:0c:cf:e1:54:
1c:21:7d:df:05:9f:84:e1:61:57:8b:58:fb:19:5f:
5b:8f:44:e2:bf:b1:bc:c0:2b:9c:7a:3d:e1:2f:52:
78:16:39:3c:93:54:a6:df:b2:3c:0c:7d:68:db:73:
c0:b5:46:5c:eb:0b:ed:25:9a:94:64:39:a5:83:e8:
e2:e1:59:d6:73:2c:8d:40:a3:f5:0a:27:1c:a6:30:
f4:97:06:a3:7d:2d:67:74:47:b8:68:18:6d:a0:c2:
79:17:24:4c:15:7c:3d:e2:dd:d7:d6:98:b5:d4:c9:
7d:f0:ef:cd:95:34:cc:a4:47:5d:f5:f3:e3:09:e1:
47:8d:2b:d2:c2:73:53:aa:54:57:f5:91:2c:42:e2:
81:90:17:d4:27:96:a3:d0:93:dd:50:c7:23:b5:af:
e9:65:72:22:a7:72:3a:45:d1:62:a8:65:a2:54:30:
ba:c8:51:e1:f5:0c:be:3c:be:30:b9:8d:96:20:3a:
82:f4:63:e7:57:65:61:56:43:a0:94:9f:c3:7d:70:
19:f2:c0:f1:d9:32:8f:42:9a:be:30:cd:62:40:50:
81:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8E:84:EE:C4:17:C5:8F:F6:8D:9E:42:E5:E0:FD:2E:6E:DA:B1:EA
X509v3 Authority Key Identifier:
keyid:8E:1A:E2:7D:B1:94:FB:07:82:85:19:3B:BD:CB:E7:82:00:55:34:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181803/C9238C6602B211F1BEFAC7A13E3D8C67/jhrifbGU-weChRk7vcvnggBVNEw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhrifbGU-weChRk7vcvnggBVNEw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181803/C9238C6602B211F1BEFAC7A13E3D8C67/CE3F95CC02B311F18F28F1A63E3D8C67.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:acc0::/48
Signature Algorithm: sha256WithRSAEncryption
7c:53:f4:36:a2:3d:68:ca:67:ef:58:64:13:29:1a:8c:10:83:
a2:08:a9:3e:69:94:92:ae:67:ca:b0:f5:f4:82:b6:39:d6:ca:
75:e7:82:7e:a9:73:6e:4d:ff:0c:06:49:95:db:0b:af:2b:ea:
e7:19:42:98:e5:7a:de:82:e2:4a:d9:e9:6e:b9:01:e0:94:35:
86:e2:21:56:7f:60:7a:49:f3:0a:03:ba:29:95:ee:71:0c:ac:
af:ef:cb:af:b9:81:ff:54:38:23:d6:dc:e2:c1:13:23:b1:be:
43:c6:27:87:52:2a:ae:d3:08:17:cd:df:40:45:33:98:44:48:
62:9b:cd:eb:a4:48:d8:5a:47:26:80:62:a7:ba:79:d2:37:5c:
de:88:88:7f:85:bb:b8:a7:65:f9:5d:8f:45:1d:99:dc:96:7c:
d9:f8:77:23:18:6c:fb:08:64:b6:f1:c5:32:7d:4d:83:ea:69:
59:a7:f5:75:a2:50:01:d8:25:4b:80:76:4f:ac:c5:4b:80:25:
30:65:d3:be:77:f5:2b:46:39:52:bb:04:8c:a7:35:02:61:24:
54:b2:6b:dc:a7:83:7c:9a:e5:90:3a:a2:ff:bd:cb:34:6e:8a:
10:f6:09:7b:fb:7c:9d:2b:11:0e:68:72:64:5e:15:f6:29:5b:
be:5f:44:41
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE4
MTgwMzExMC8GA1UEBRMoOEUxQUUyN0RCMTk0RkIwNzgyODUxOTNCQkRDQkU3ODIw
MDU1MzQ0QzAeFw0yNjAyMDUxNjU3NTFaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5ODRjYzBmLTAxYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDVrkENHfa2nr5X0Gdz6BlS7l8FQPurjk3emxsX6Kp1p5OavLCPpmMhDM/hVBwh
fd8Fn4ThYVeLWPsZX1uPROK/sbzAK5x6PeEvUngWOTyTVKbfsjwMfWjbc8C1Rlzr
C+0lmpRkOaWD6OLhWdZzLI1Ao/UKJxymMPSXBqN9LWd0R7hoGG2gwnkXJEwVfD3i
3dfWmLXUyX3w782VNMykR1318+MJ4UeNK9LCc1OqVFf1kSxC4oGQF9QnlqPQk91Q
xyO1r+llciKncjpF0WKoZaJUMLrIUeH1DL48vjC5jZYgOoL0Y+dXZWFWQ6CUn8N9
cBnywPHZMo9Cmr4wzWJAUIEXAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUlI6E7sQX
xY/2jZ5C5eD9Lm7aseowHwYDVR0jBBgwFoAUjhrifbGU+weChRk7vcvnggBVNEww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxODAzL0M5MjM4QzY2MDJC
MjExRjFCRUZBQzdBMTNFM0Q4QzY3L2pocmlmYkdVLXdlQ2hSazd2Y3ZuZ2dCVk5F
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvamhyaWZiR1Utd2VDaFJrN3Zjdm5nZ0JWTkV3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MTgwMy9DOTIzOEM2NjAyQjIxMUYxQkVGQUM3QTEzRTNEOEM2Ny9DRTNGOTVDQzAy
QjMxMUYxOEYyOEYxQTYzRTNEOEM2Ny5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABDfaswDANBgkqhkiG9w0BAQsFAAOCAQEAfFP0NqI9aMpn
71hkEykajBCDogipPmmUkq5nyrD19IK2OdbKdeeCfqlzbk3/DAZJldsLryvq5xlC
mOV63oLiStnpbrkB4JQ1huIhVn9geknzCgO6KZXucQysr+/Lr7mB/1Q4I9bc4sET
I7G+Q8Ynh1IqrtMIF83fQEUzmERIYpvN66RI2FpHJoBip7p50jdc3oiIf4W7uKdl
+V2PRR2Z3JZ82fh3Ixhs+whktvHFMn1Ng+ppWaf1daJQAdglS4B2T6zFS4AlMGXT
vnf1K0Y5UrsEjKc1AmEkVLJr3KeDfJrlkDqi/73LNG6KEPYJe/t8nSsRDmhyZF4V
9ilbvl9EQQ==
-----END CERTIFICATE-----
Generated at Thu Feb 19 16:37:39 2026 by rpki-client