
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/EEA88E78AD0C11F1A1B76E9C3C11F970.roa
File: EEA88E78AD0C11F1A1B76E9C3C11F970.roa (raw, json)
Hash identifier: /b7wdkd1tUOXcTuWD0AJo9xrePpTHVqnq+j16rznxnk=
Subject key identifier: 3D:10:BD:D8:08:68:46:1F:FD:04:5D:A9:14:D8:79:C2:5C:56:A3:14
Certificate issuer: /CN=A911B8D9/serialNumber=673D6C8185588B0CF06679C354FBBD0CCBBB54DE
Certificate serial: 07
Authority key identifier: 67:3D:6C:81:85:58:8B:0C:F0:66:79:C3:54:FB:BD:0C:CB:BB:54:DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/EEA88E78AD0C11F1A1B76E9C3C11F970.roa
Signing time: Thu 10 Sep 2026 11:44:08 +0000
ROA not before: Thu 10 Sep 2026 11:44:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134122
IP address blocks: 2400:eb20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.crl
rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:44:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B8D9, serialNumber=673D6C8185588B0CF06679C354FBBD0CCBBB54DE
Validity
Not Before: Sep 10 11:44:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6aa29808-202c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a1:44:4d:31:84:b8:43:3b:69:07:b1:6b:ae:
e9:f2:cf:93:7d:3f:b5:d7:b7:63:20:47:87:8f:d9:
e2:3a:9e:d4:b6:92:dc:90:f7:1c:f3:21:db:6c:6b:
03:da:f5:73:30:48:e4:90:35:76:19:45:c8:a8:e5:
12:1b:e1:0b:8d:93:30:b0:68:cc:23:5f:c9:48:80:
ec:1f:ee:88:22:f6:07:f7:8b:69:fa:7d:2d:29:c2:
3c:13:5e:f5:14:2c:49:a9:45:86:10:df:70:2e:45:
15:e6:c1:60:61:01:fd:f7:93:b4:d9:c8:d3:af:0d:
dd:79:fb:d4:b2:6b:e6:7f:8f:bf:52:06:22:ac:8e:
96:0e:4a:1e:69:6e:81:77:dc:76:77:85:43:34:70:
85:73:5b:cc:33:fc:25:1f:2a:bf:d0:43:22:60:94:
a6:c6:bc:e9:f5:ff:0b:f8:da:63:7b:3b:3f:dd:88:
50:4e:21:a0:34:cd:07:e7:74:63:7e:dc:96:ad:d8:
dc:84:4e:85:92:25:b6:9c:b8:a6:53:97:46:1f:11:
88:2a:05:31:2b:0c:0c:f9:83:21:b2:76:c7:64:59:
dd:b7:4f:d7:21:cc:46:de:78:48:db:57:5b:3c:e8:
ac:3c:2d:fe:d6:4a:6e:f2:23:23:1c:e1:1a:68:d0:
a3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:10:BD:D8:08:68:46:1F:FD:04:5D:A9:14:D8:79:C2:5C:56:A3:14
X509v3 Authority Key Identifier:
keyid:67:3D:6C:81:85:58:8B:0C:F0:66:79:C3:54:FB:BD:0C:CB:BB:54:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/EEA88E78AD0C11F1A1B76E9C3C11F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:eb20::/32
Signature Algorithm: sha256WithRSAEncryption
70:a0:f8:d9:db:71:9e:8c:4b:79:91:bd:44:fb:50:ad:14:8a:
ed:91:e4:d5:4a:7e:63:3c:9b:f0:5c:d0:b4:d7:e9:cc:f4:79:
a5:85:95:bb:6b:a6:61:9f:e7:08:f7:84:17:1c:83:e1:87:69:
92:94:51:0f:87:90:3b:7a:89:0d:8e:66:49:47:23:cd:88:5f:
a8:2e:ae:9d:3f:c9:7c:25:f8:04:9c:90:37:3c:c2:57:42:ba:
62:fd:d0:e7:b9:e4:94:2d:15:08:48:9c:ec:9d:c2:e6:2b:7f:
bf:f8:c0:50:50:f7:0b:a1:47:7a:05:22:3c:26:1d:9e:08:0b:
f0:15:9e:37:2d:e8:b0:18:ba:e9:00:68:08:19:df:94:f0:41:
16:ba:36:b5:8b:f1:3c:cf:db:6d:19:18:3a:3b:00:84:86:71:
86:8a:20:88:c6:2c:69:d6:12:f6:75:0c:24:c1:96:e5:5b:40:
87:e3:fb:e1:50:0f:1f:0e:79:cb:07:b3:2f:62:c4:b1:ab:09:
66:42:b7:7d:60:c9:52:80:8c:23:d5:92:e2:c2:1f:41:cb:4b:
ec:ff:da:cd:00:b4:10:6b:69:0f:dd:de:2e:1d:a6:da:66:4e:
ec:07:6b:04:b3:e7:fe:47:f1:42:75:91:06:fc:de:e7:2f:42:
5b:91:7e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:10:52 2026 by rpki-client