
$ rpki-client -vvf rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/068953907C0411F1A78C011690A30FBC.roa
File: 068953907C0411F1A78C011690A30FBC.roa (raw, json)
Hash identifier: w5YjcHS/MK18ZP9iJMcSrCe3g3iEDBbEXUJzeIg9XZw=
Subject key identifier: 1B:35:E7:48:D8:2A:BB:9E:BB:B5:13:BF:E3:88:29:C0:6D:C2:7F:AD
Certificate issuer: /CN=A919ECE7/serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
Certificate serial: 07FA
Authority key identifier: 77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/068953907C0411F1A78C011690A30FBC.roa
Signing time: Fri 10 Jul 2026 02:06:56 +0000
ROA not before: Fri 10 Jul 2026 02:06:56 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 48274
IP address blocks: 2401:b480::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl
rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 22:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2042 (0x7fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919ECE7, serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
Validity
Not Before: Jul 10 02:06:56 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6a5053c0-3681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:de:6f:38:0b:33:7c:a5:37:3e:b1:3f:48:2e:
ef:64:84:67:e0:7a:12:5a:fe:93:8e:58:95:7e:05:
9b:df:d7:8f:d5:2a:bf:79:68:45:bd:0a:28:57:fe:
91:18:5d:c7:a9:a9:d7:7c:65:62:39:1c:90:1e:3f:
fa:5a:bd:26:3a:1e:2a:a1:c8:54:03:98:2b:cb:e4:
ba:cd:94:93:88:f4:5c:9e:d1:7a:7d:2b:b1:99:c6:
1c:d3:13:1e:0b:17:4f:4a:3f:60:23:53:f7:62:db:
88:50:cb:35:4f:2b:20:67:78:0a:31:97:92:a3:b2:
98:28:ce:60:25:f0:c7:9d:8f:7d:3a:1e:8f:20:dc:
19:87:a2:e2:c7:41:54:59:ca:5e:61:14:a4:db:d3:
b0:35:a2:6c:3a:b1:44:7a:37:e2:64:41:e4:52:a2:
33:7c:aa:e7:4c:51:c8:3a:84:30:6c:b2:8c:f0:a6:
f6:cb:15:b1:51:91:c4:69:b0:9c:0a:b3:b7:02:de:
5d:23:7f:86:15:3f:75:cc:2a:09:bf:92:53:75:74:
96:39:bd:fe:d7:8f:78:19:9a:d7:4f:63:68:81:63:
ba:bd:3b:01:20:52:76:cc:12:8a:39:1f:24:b9:c0:
7a:0b:a8:da:45:82:26:f8:63:b9:60:87:1c:bb:1c:
f9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:35:E7:48:D8:2A:BB:9E:BB:B5:13:BF:E3:88:29:C0:6D:C2:7F:AD
X509v3 Authority Key Identifier:
keyid:77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/068953907C0411F1A78C011690A30FBC.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:b480::/32
Signature Algorithm: sha256WithRSAEncryption
54:43:79:28:2f:57:e7:81:59:20:e7:70:0d:25:69:cb:39:e5:
14:b4:0e:63:b3:5b:ef:62:eb:3c:02:fe:1a:1c:0e:ec:38:a3:
6d:b6:e0:a6:c7:1a:67:e1:bf:e2:a1:e6:cc:22:89:3f:f1:e8:
4d:84:11:b2:a5:3c:90:c9:11:82:4a:0b:19:59:46:6f:15:5e:
b9:c2:bd:e6:94:c3:86:38:23:08:d3:b2:a6:85:58:8b:75:b3:
cf:53:f9:1f:6a:cf:b0:fd:3b:49:e8:fb:09:ec:7f:62:34:dc:
e4:eb:d8:76:a4:4f:69:d6:e8:5b:91:5a:a0:65:57:e9:a2:c5:
8c:f5:5b:ba:c9:f0:f2:33:f8:0d:e0:d9:28:34:8e:12:b7:48:
4b:d6:4c:6d:f3:20:2c:52:e6:6c:88:10:63:f9:70:c5:93:27:
05:9e:8a:e4:58:db:42:c4:17:fb:d0:08:0f:e2:ea:a7:78:42:
55:05:08:a4:96:d9:78:d4:cc:21:12:7d:4b:e5:46:4e:4f:7d:
db:03:64:75:85:d9:72:52:6f:26:66:69:ae:68:90:06:b5:ea:
cd:e7:d4:ac:a7:d0:5d:1c:73:55:67:d6:af:ef:32:6c:56:cb:
86:00:75:6e:e8:b2:d5:9d:cc:10:69:a1:35:ba:77:d9:e5:fe:
3a:63:7d:1b
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgICB/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVDRTcxMTAvBgNVBAUTKDc3MzcwQkMwNzMwNUQxOURCREFDQ0U0QkY3MjA5RTFF
QjZENDBFMzMwHhcNMjYwNzEwMDIwNjU2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTUwNTNjMC0zNjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4N5vOAszfKU3PrE/SC7vZIRn4HoSWv6TjliVfgWb39eP1Sq/eWhFvQooV/6R
GF3HqanXfGViORyQHj/6Wr0mOh4qochUA5gry+S6zZSTiPRcntF6fSuxmcYc0xMe
CxdPSj9gI1P3YtuIUMs1TysgZ3gKMZeSo7KYKM5gJfDHnY99Oh6PINwZh6Lix0FU
WcpeYRSk29OwNaJsOrFEejfiZEHkUqIzfKrnTFHIOoQwbLKM8Kb2yxWxUZHEabCc
CrO3At5dI3+GFT91zCoJv5JTdXSWOb3+1494GZrXT2NogWO6vTsBIFJ2zBKKOR8k
ucB6C6jaRYIm+GO5YIccuxz5AwIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFBs150jY
Krueu7UTv+OIKcBtwn+tMB8GA1UdIwQYMBaAFHc3C8BzBdGdvazOS/cgnh621A4z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUNFNy81RTA1REJBNDVG
QUMxMUVCODQ5NDQ1MkZDNEY5QUUwMi9kemNMd0hNRjBaMjlyTTVMOXlDZUhyYlVE
ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2R6Y0x3SE1GMFoyOXJNNUw5eUNlSHJiVURqTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUVDRTcvNUUwNURCQTQ1RkFDMTFFQjg0OTQ0NTJGQzRGOUFFMDIvMDY4OTUzOTA3
QzA0MTFGMUE3OEMwMTE2OTBBMzBGQkMucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJAG0gDANBgkqhkiG9w0BAQsFAAOCAQEAVEN5KC9X54FZIOdwDSVp
yznlFLQOY7Nb72LrPAL+GhwO7DijbbbgpscaZ+G/4qHmzCKJP/HoTYQRsqU8kMkR
gkoLGVlGbxVeucK95pTDhjgjCNOypoVYi3Wzz1P5H2rPsP07Sej7Cex/YjTc5OvY
dqRPadboW5FaoGVX6aLFjPVbusnw8jP4DeDZKDSOErdIS9ZMbfMgLFLmbIgQY/lw
xZMnBZ6K5FjbQsQX+9AID+Lqp3hCVQUIpJbZeNTMIRJ9S+VGTk992wNkdYXZclJv
JmZprmiQBrXqzefUrKfQXRxzVWfWr+8ybFbLhgB1buiy1Z3MEGmhNbp32eX+OmN9
Gw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:06:30 2026 by rpki-client