
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/84B1619E8C4511F1A27F4BE95411F970.roa
File: 84B1619E8C4511F1A27F4BE95411F970.roa (raw, json)
Hash identifier: hHHcMr65tn2TsQmhaKVCSv+V1ejD7S+aiBSVGPeEC88=
Subject key identifier: 88:00:DB:B8:52:75:EE:DF:A0:FF:93:C0:4B:FD:8C:62:C6:DE:A4:39
Certificate issuer: /CN=A911BDA9/serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA
Certificate serial: 019C
Authority key identifier: B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/84B1619E8C4511F1A27F4BE95411F970.roa
Signing time: Mon 31 Aug 2026 04:54:03 +0000
ROA not before: Mon 31 Aug 2026 04:54:03 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 17644
IP address blocks: 2001:df4:13c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl
rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412 (0x19c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BDA9, serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA
Validity
Not Before: Aug 31 04:54:03 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a9508eb-3eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ee:6d:d7:80:81:18:9d:80:2c:89:dc:b8:b5:
91:cd:95:5c:ac:73:e4:a4:05:50:1d:21:a9:96:f3:
35:bc:1a:2f:bc:77:df:fa:fa:78:09:23:3d:4e:a3:
39:62:ef:01:3e:04:91:88:2d:92:29:eb:e2:cb:4e:
c9:a1:b3:11:e1:ec:37:33:76:a9:92:fd:28:c9:85:
d8:eb:4e:8a:af:83:22:47:54:a9:d8:9f:d0:c0:09:
88:a6:6a:bd:65:49:2b:b1:25:4e:b2:0b:24:28:16:
af:0f:64:46:fd:23:64:4d:15:31:e8:5f:44:dd:65:
89:cc:b4:0b:df:1e:ee:33:a0:df:73:21:64:e5:84:
5b:63:7f:df:d8:10:4b:a5:04:27:b4:64:de:3a:aa:
22:1a:3c:7e:43:26:fb:2c:03:22:3f:cd:2b:c1:69:
e7:2f:fe:23:11:4e:19:86:44:2e:41:2c:8b:fd:3f:
80:59:81:f3:90:63:f1:ab:d8:38:0e:da:d9:9c:11:
b4:4c:aa:80:70:7c:42:0f:16:af:8d:b8:cd:4e:93:
20:0a:3c:77:70:00:98:cd:7c:d4:fa:8e:69:95:aa:
0b:07:de:09:1e:2e:c0:bc:ab:b5:71:ee:3e:79:74:
09:9f:ff:d5:81:30:cd:c7:b3:8c:3a:2f:0e:17:00:
59:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:00:DB:B8:52:75:EE:DF:A0:FF:93:C0:4B:FD:8C:62:C6:DE:A4:39
X509v3 Authority Key Identifier:
keyid:B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/84B1619E8C4511F1A27F4BE95411F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:13c1::/48
Signature Algorithm: sha256WithRSAEncryption
2d:01:3c:65:08:d5:10:a2:b1:33:46:e5:ff:17:f9:42:9e:f9:
58:41:67:1e:40:c1:cd:ce:54:e2:d9:3b:ab:81:e3:47:8d:29:
12:88:1a:d3:d4:b4:8d:4d:cb:26:60:f7:88:6a:cb:14:07:fe:
5e:ff:b5:9c:4b:4f:09:0f:e5:2d:f8:05:32:d0:bf:e1:dc:58:
9f:34:f1:03:00:05:4d:e6:09:e0:3e:0c:b3:a7:b3:00:45:ba:
b1:b3:90:26:d2:8c:b4:33:3f:b9:f1:e7:2b:70:ba:c5:85:df:
26:97:09:92:59:88:8a:1d:95:cc:27:ca:fd:20:3e:e0:a6:c4:
36:4c:e2:a3:67:78:7a:69:37:d3:55:cb:17:e4:34:ec:60:e8:
1c:05:9a:68:7f:66:cf:f1:86:3a:71:cc:03:14:52:75:69:bb:
d5:5c:fd:84:9b:13:62:09:0a:45:70:5a:b7:ae:bb:e1:05:fc:
5a:ad:e8:28:7e:e5:fe:8b:56:c0:44:ec:01:c0:8d:ae:00:fd:
1c:2a:bd:e1:b3:26:48:e5:c1:de:de:38:88:2a:20:0c:5e:0c:
4a:6f:e3:5e:67:9f:0c:10:ec:a6:8b:3e:c2:ae:8f:3f:4b:29:
31:93:ef:25:e3:24:02:aa:46:0e:02:5f:c4:93:87:ae:a0:3d:
b4:ca:c3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:55:06 2026 by rpki-client