
$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/CCACFBE2457411F1A79BF008B4833773.roa
File: CCACFBE2457411F1A79BF008B4833773.roa (raw, json)
Hash identifier: 69kJO7SbSIclkQPTtHUHDZya4cNb1UG7+lT2HQ2fYMc=
Subject key identifier: B8:63:A9:5E:A2:22:99:25:BB:A1:B8:CC:6D:1A:F2:6D:39:91:13:33
Certificate issuer: /CN=A91883D3/serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
Certificate serial: 0160
Authority key identifier: EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/CCACFBE2457411F1A79BF008B4833773.roa
Signing time: Fri 01 May 2026 15:45:38 +0000
ROA not before: Fri 01 May 2026 15:45:38 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 152451
IP address blocks: 64.251.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl
rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 May 2026 22:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 352 (0x160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91883D3, serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
Validity
Not Before: May 1 15:45:38 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69f4caa2-8bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:fe:f0:7a:a4:a7:e3:80:b4:7f:38:73:5e:
d5:ee:99:ed:34:a9:30:91:ee:91:bf:9b:9b:04:22:
08:83:77:80:bb:23:3d:7c:00:08:67:00:c2:23:26:
e4:55:97:b4:21:d8:de:05:00:6f:71:33:d3:c7:41:
13:3f:a6:d2:50:78:f2:e6:cd:ac:d0:07:75:7a:cd:
65:ba:36:92:46:fc:fd:f0:c2:ad:e7:e9:56:82:a4:
c9:14:d5:2e:8c:f3:0e:f6:bc:37:fd:58:5b:b4:07:
48:13:c9:04:4a:bf:3c:30:a6:d5:d4:72:8b:e1:4f:
dd:ea:93:3d:56:51:31:75:8f:2f:dd:73:56:38:03:
9b:9e:cc:7a:47:8a:42:3c:69:cc:36:84:7a:8d:ca:
27:0a:00:50:c6:27:4e:8d:9a:1c:79:74:ae:de:d4:
b0:d6:3c:81:80:61:42:11:96:ed:d7:7e:0f:6b:7c:
54:b6:f9:64:50:09:04:5f:3a:5a:f9:e0:91:73:c8:
52:0b:db:9e:16:ef:be:b7:27:5b:ed:02:d3:ad:f3:
4d:ce:0f:cc:5a:bd:4c:9b:0d:54:0f:2f:1c:4a:be:
2f:ad:de:3f:d4:31:7b:59:59:9a:f9:33:bc:fc:09:
97:56:00:20:d6:fc:64:c7:b0:25:73:13:cb:e7:8c:
11:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:63:A9:5E:A2:22:99:25:BB:A1:B8:CC:6D:1A:F2:6D:39:91:13:33
X509v3 Authority Key Identifier:
keyid:EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/CCACFBE2457411F1A79BF008B4833773.roa
sbgp-ipAddrBlock: critical
IPv4:
64.251.192.0/20
Signature Algorithm: sha256WithRSAEncryption
7e:49:2c:14:27:82:12:47:32:bb:6f:19:fd:77:01:86:10:e1:
e2:ac:b2:0a:47:30:f9:a8:d5:70:fa:16:87:00:b3:a7:8c:53:
39:2a:bc:2a:8a:8c:27:96:eb:64:8b:4e:ea:71:6c:b3:84:66:
e8:97:25:21:f0:20:61:6e:9e:ea:fc:49:48:0f:76:d9:02:76:
02:45:20:65:72:35:2d:c1:75:eb:c6:4e:32:e2:d5:55:d8:20:
29:b6:eb:12:eb:a6:c8:86:6d:b5:84:e4:b0:0d:05:df:04:b3:
c7:f6:c8:6c:08:05:28:eb:01:be:01:cd:72:4c:24:35:a3:72:
50:41:91:b8:f9:f8:3c:b1:44:80:f5:48:0d:bb:54:03:40:78:
bb:61:7e:76:d5:26:94:71:80:65:34:b0:d9:14:a1:e3:1f:1c:
8a:e5:60:f0:e9:de:55:42:51:22:49:c9:a8:d6:fb:7e:ab:a6:
98:71:17:fb:e2:84:bd:dc:f7:d3:54:bc:69:18:bd:af:79:21:
ba:95:82:54:fa:77:9d:ab:c3:c5:30:30:e7:5e:b0:4d:b7:cb:
35:bc:d2:d1:f9:55:9e:ea:1d:fc:a4:f9:66:11:ce:1b:3d:ad:
cd:90:7c:ba:ca:e5:36:36:0b:40:ce:18:b8:7d:91:77:3e:09:
3c:10:4b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:49:59 2026 by rpki-client