
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/A486779E6FED11F1B401E8288CA30FBC.roa
File: A486779E6FED11F1B401E8288CA30FBC.roa (raw, json)
Hash identifier: UpK9c8N8ZSB4zwZRHjceSr8yRtw/Sm4QRpoWWyjkIM4=
Subject key identifier: 67:35:3F:E9:8C:BA:18:0D:7E:9B:E4:B6:46:2A:E2:C1:77:00:32:10
Certificate issuer: /CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7
Certificate serial: 0648
Authority key identifier: F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/A486779E6FED11F1B401E8288CA30FBC.roa
Signing time: Fri 02 Oct 2026 23:43:41 +0000
ROA not before: Fri 02 Oct 2026 23:43:41 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 10111
IP address blocks: 2400:8da0:eb00::/44 maxlen: 48
2400:8da0:ed00::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl
rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Nov 2026 23:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1608 (0x648)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DB2F, serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7
Validity
Not Before: Oct 2 23:43:41 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac041ad-39f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3b:2c:39:da:93:4e:6c:28:fb:eb:d3:65:44:
c8:63:13:c8:42:05:d4:c3:74:d1:4b:f5:c9:e9:ba:
4e:8e:5e:ea:4d:2e:cb:60:4e:da:be:a1:ae:e5:46:
9f:cc:32:98:16:7f:27:1b:0d:ef:cd:81:3b:74:09:
ff:70:52:e7:2e:3b:6a:11:42:39:c9:7c:4e:9c:0e:
76:e4:6e:9c:03:f6:47:a9:fc:d0:8b:8c:7b:c3:ac:
34:3d:c5:98:2d:67:9c:bc:3c:cd:c5:42:99:c8:7d:
40:54:bc:b4:63:d1:0d:4c:d0:2c:c8:8d:6c:02:6f:
f2:6f:0e:5e:0e:55:ff:d8:d7:07:89:e0:b4:04:89:
60:7a:58:e7:2f:18:28:bf:71:48:91:95:c8:07:f5:
18:6c:4c:85:83:9c:c0:e8:2c:80:06:cd:29:79:54:
c5:02:d6:93:c5:58:44:3a:10:44:94:b6:fb:2b:a7:
a3:b4:66:e7:18:d0:2d:e2:22:92:8a:0d:b2:5d:b6:
e1:07:c0:f4:4d:ef:55:37:9f:fe:1e:4c:28:41:28:
65:de:08:0f:f8:16:d2:54:f7:19:c5:b6:fb:30:35:
13:86:cd:92:07:40:c1:32:59:d3:11:23:7a:d6:fc:
d3:5f:1a:5b:83:51:6d:f3:01:4c:89:c5:2a:17:5d:
76:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:35:3F:E9:8C:BA:18:0D:7E:9B:E4:B6:46:2A:E2:C1:77:00:32:10
X509v3 Authority Key Identifier:
keyid:F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/A486779E6FED11F1B401E8288CA30FBC.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:8da0:eb00::/44
2400:8da0:ed00::/44
Signature Algorithm: sha256WithRSAEncryption
b3:29:97:ca:5e:a4:2c:e0:1b:d5:89:f9:c1:e6:c6:b8:32:56:
03:82:5f:90:c1:cf:df:94:ed:5a:ce:af:c9:c2:ff:44:89:4a:
33:db:57:55:f5:40:bf:f2:30:d3:1b:8f:ec:99:25:2b:5d:7a:
d2:3e:8e:f7:4b:b7:6b:55:0d:f8:1f:36:ed:e3:3d:44:42:5b:
50:81:d1:99:5c:24:97:6b:f9:44:9e:85:5c:13:b9:fa:43:65:
64:86:0b:ac:b1:82:4c:c4:2f:09:ea:fc:9c:12:a3:dc:d8:ca:
a4:8c:d7:65:6c:ea:a7:21:ac:bc:bf:b1:df:51:12:2d:9d:cb:
bb:8a:e4:ee:16:eb:25:68:95:8e:67:b3:24:5c:13:c4:0e:a0:
d9:85:73:5f:52:29:0f:30:ed:20:54:18:e0:7c:29:08:2e:ad:
47:64:36:a0:6f:54:77:f7:2f:61:f6:51:06:90:60:6f:ad:d4:
ea:d5:57:a3:b8:af:36:2c:06:23:2c:fb:b6:a5:a9:5b:13:9a:
4a:91:84:9b:6f:e2:8d:05:f3:7b:a3:21:a5:33:b4:7d:5c:f9:
e4:11:37:15:af:a6:32:4e:d8:2f:34:8c:d7:84:57:84:a8:ef:
dd:43:3f:ac:03:b1:e6:96:71:37:b7:be:fd:ee:93:e2:b6:3e:
3c:bd:44:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 01:25:35 2026 by rpki-client