
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/E734D3DE6E7F11ECB1C0E439C4F9AE02.roa
File: E734D3DE6E7F11ECB1C0E439C4F9AE02.roa (raw, json)
Hash identifier: AFiKhGrkmVBF+Lxuf7SnPeEL4/ohAC6TsxVBzmwIG0M=
Subject key identifier: 4E:CA:AF:CC:5F:11:E9:65:56:45:54:3C:23:42:7D:3F:CD:40:12:BB
Certificate issuer: /CN=A9110795/serialNumber=870AE59A4B38DAFC6A31ABE329CCF878FDF72A8C
Certificate serial: 17C4
Authority key identifier: 87:0A:E5:9A:4B:38:DA:FC:6A:31:AB:E3:29:CC:F8:78:FD:F7:2A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/E734D3DE6E7F11ECB1C0E439C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:15:02 +0000
ROA not before: Mon 30 Jun 2025 17:07:10 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 136527
IP address blocks: 2401:1240:204::/48 maxlen: 48
2401:1240:205::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.crl
rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:22:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6084 (0x17c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110795, serialNumber=870AE59A4B38DAFC6A31ABE329CCF878FDF72A8C
Validity
Not Before: Jun 30 17:07:10 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a42dc6-f674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2c:18:6c:bc:4e:61:05:6f:0b:b5:7e:01:41:
fb:0d:0d:7d:a0:04:ec:39:3b:fb:0d:c7:b3:c2:f2:
bb:bf:52:26:37:ec:21:4b:67:d6:ae:55:63:c6:6b:
b0:06:d5:92:86:ce:9c:42:00:b3:f0:ca:03:c8:59:
31:b5:1c:79:4a:43:b2:65:da:d7:c6:65:b3:bf:80:
be:9e:6b:b5:f7:c0:5d:dd:ec:db:35:21:37:3e:62:
a2:53:d7:7d:d7:f6:94:bb:c3:cd:b6:b7:a7:18:02:
20:e2:a1:bb:2d:15:1d:e1:1d:aa:d2:70:cf:d0:4f:
df:59:e2:bb:16:fd:05:53:6c:43:de:33:6e:27:94:
1c:00:86:33:94:48:e9:13:83:4f:5c:cc:da:a0:16:
97:7f:83:f8:40:a5:bf:6f:cd:9b:97:8a:55:16:46:
ba:65:47:63:e0:14:ac:79:42:40:c2:3d:34:7a:55:
6e:e9:2b:1e:be:6e:27:b1:1e:e5:55:22:a8:b1:ab:
0a:69:04:fd:34:50:53:4e:07:3a:1b:9d:19:37:91:
43:8a:44:d2:4b:f8:1e:15:0c:7e:4b:68:57:00:64:
28:46:d5:86:d9:16:0e:41:35:af:8b:04:d8:eb:e2:
90:0b:fa:04:d3:0c:bc:de:e2:3d:93:17:01:10:54:
71:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CA:AF:CC:5F:11:E9:65:56:45:54:3C:23:42:7D:3F:CD:40:12:BB
X509v3 Authority Key Identifier:
keyid:87:0A:E5:9A:4B:38:DA:FC:6A:31:AB:E3:29:CC:F8:78:FD:F7:2A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/E734D3DE6E7F11ECB1C0E439C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:1240:204::/47
Signature Algorithm: sha256WithRSAEncryption
18:ac:06:0c:fa:b0:de:35:1b:6a:ff:85:de:d5:ce:f2:36:41:
98:af:c4:ab:86:2c:7b:a3:66:41:e8:39:08:b6:7d:bd:3c:ba:
75:06:b5:3e:14:eb:58:f0:cd:88:03:b4:b8:1f:9d:c5:41:70:
08:cb:87:50:fd:48:d1:90:bf:b2:ab:f9:21:68:3d:e3:08:63:
84:b4:63:61:db:5e:97:00:bd:bb:9a:06:39:63:1d:7d:ae:33:
9e:31:0e:b4:ed:b7:a0:d0:c3:c0:f6:82:e8:e8:c5:64:13:82:
4b:53:4f:a2:56:e2:0b:5c:cf:75:aa:7e:22:1e:6d:87:cd:a9:
29:b5:de:a0:63:f7:5c:9c:53:d5:70:ac:f8:54:c8:e1:c3:5d:
05:87:98:21:ad:3c:a4:92:cd:37:81:c7:19:a7:81:ad:fd:a5:
11:83:6b:0e:a3:d6:99:ae:8e:d6:dd:31:25:72:31:97:7e:c8:
b3:f2:32:e3:80:f8:65:7a:0f:01:68:d8:61:23:2b:0a:73:62:
8f:d2:42:a6:f8:df:fc:c6:ae:87:4a:50:2e:7f:15:c8:a7:67:
b6:8d:f1:c2:6f:10:70:1d:ad:13:0d:27:36:57:07:dc:6f:41:
fb:55:c2:df:e0:3c:92:60:4d:66:69:0d:08:79:09:c6:17:d9:
4d:fd:8b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:42:19 2026 by rpki-client