
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/5F38A4F082D611EB802C1A55C4F9AE02.roa
File: 5F38A4F082D611EB802C1A55C4F9AE02.roa (raw, json)
Hash identifier: ldfzXY+/A9VMiOIQtTVcd92d4P0qkx/grGqPWElbxL0=
Subject key identifier: B4:CE:69:DD:54:95:1D:1A:E0:E5:1D:42:85:80:EC:3D:B8:ED:30:96
Certificate issuer: /CN=A9110AD1/serialNumber=5854C6D886AE80570ECE62474D54199C4E829CAB
Certificate serial: 06F4
Authority key identifier: 58:54:C6:D8:86:AE:80:57:0E:CE:62:47:4D:54:19:9C:4E:82:9C:AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFTG2IaugFcOzmJHTVQZnE6CnKs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/5F38A4F082D611EB802C1A55C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:43:58 +0000
ROA not before: Tue 06 May 2025 22:33:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64090
IP address blocks: 203.13.41.0/24 maxlen: 24
2001:df6:3980::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/WFTG2IaugFcOzmJHTVQZnE6CnKs.crl
rsync://rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/WFTG2IaugFcOzmJHTVQZnE6CnKs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFTG2IaugFcOzmJHTVQZnE6CnKs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1780 (0x6f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110AD1, serialNumber=5854C6D886AE80570ECE62474D54199C4E829CAB
Validity
Not Before: May 6 22:33:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3fc4e-5d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5c:bf:d3:9b:a1:d4:84:14:7d:e3:cc:67:04:
85:82:45:0a:0e:3b:08:99:6e:72:66:c2:13:aa:95:
8a:1a:1c:62:f2:46:31:7f:cc:fd:1f:1b:bf:09:31:
79:ae:9f:1c:02:24:7d:43:e0:a1:ef:e8:2b:ff:a7:
b4:b6:da:ac:be:e9:05:e8:de:eb:29:0a:be:e7:dd:
3d:36:56:d6:5c:00:33:fb:4f:07:c1:f6:da:b1:5a:
ef:0f:28:81:4d:b7:e8:42:14:e5:c7:81:c0:01:1f:
2a:c6:0d:a5:3e:df:06:5f:3c:66:7e:33:74:74:d5:
6a:e7:7d:5b:e7:29:fa:bd:01:8e:2d:99:a7:52:63:
f3:29:00:07:73:51:e3:10:fe:52:00:cf:09:71:89:
b1:bd:17:e9:ed:bf:4e:92:f4:1a:92:ab:e1:61:6d:
c6:8a:d5:bd:06:b9:b3:89:b9:07:62:93:f4:84:e0:
7e:b4:8a:1d:27:8b:9d:b0:44:2a:d1:9b:62:f8:e1:
44:91:a6:f8:ed:a6:ee:fb:65:ba:6c:c9:b7:fb:69:
01:f4:76:48:8b:a0:ca:47:a7:6d:2f:ec:3e:6e:7d:
59:da:29:a3:bb:c7:ce:0e:64:00:99:f7:a7:09:cf:
9c:f1:b5:d3:51:33:f2:31:19:8f:5e:be:69:1a:d5:
91:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CE:69:DD:54:95:1D:1A:E0:E5:1D:42:85:80:EC:3D:B8:ED:30:96
X509v3 Authority Key Identifier:
keyid:58:54:C6:D8:86:AE:80:57:0E:CE:62:47:4D:54:19:9C:4E:82:9C:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/WFTG2IaugFcOzmJHTVQZnE6CnKs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFTG2IaugFcOzmJHTVQZnE6CnKs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/5F38A4F082D611EB802C1A55C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.13.41.0/24
IPv6:
2001:df6:3980::/48
Signature Algorithm: sha256WithRSAEncryption
4e:d0:58:11:73:7c:4c:17:0a:f9:69:11:c8:ef:35:5f:3a:52:
32:a3:5a:33:52:1d:4a:6a:ac:16:46:f5:b5:d8:6f:49:7d:cb:
5e:fe:8e:27:ae:57:c0:c9:2b:83:ed:fc:58:35:7f:41:58:fc:
40:b6:37:a9:a7:72:c2:fb:1a:a2:27:21:cc:a2:e1:4b:c4:a5:
f5:9f:9c:e2:0e:ae:31:a8:f2:80:b0:b3:ce:fa:1d:40:80:d4:
83:b2:e6:94:ce:48:37:d7:c3:05:36:bb:08:9d:05:15:a4:b8:
0b:78:cf:c1:b5:37:66:37:1a:12:fd:53:ee:30:99:6b:97:c9:
f8:38:74:6c:4a:90:53:b5:74:13:5a:e4:12:f4:38:3b:98:61:
10:00:70:2a:24:a2:30:e1:e9:8e:0c:5d:04:96:3e:c5:4f:c5:
71:07:f7:6b:8b:79:24:7e:db:f6:d5:3b:fe:c8:46:6e:d2:d5:
36:ed:e1:56:56:14:a4:e9:c5:c5:15:9e:29:fb:59:19:46:76:
6b:08:64:88:e9:8c:ef:36:6d:a0:d0:4b:17:1e:5c:6f:c5:64:
ce:34:a9:44:68:cc:39:fa:6a:41:f2:07:15:ec:63:11:2b:8e:
d8:03:9c:15:85:fc:03:ae:dd:ec:60:a1:39:bf:1b:51:7e:d0:
6f:de:ae:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:23:50 2026 by rpki-client