
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/2AB59F90B32B11F18709B4406B11F970.roa
File: 2AB59F90B32B11F18709B4406B11F970.roa (raw, json)
Hash identifier: clvnbHXIKELJptfVK6hqDlF+vZurzpLAxjAzDVUqsa8=
Subject key identifier: 0B:55:98:16:E5:4B:F3:4A:20:9F:AE:FF:05:5C:EA:75:E6:66:DA:0D
Certificate issuer: /CN=A913E32A/serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543
Certificate serial: 2775
Authority key identifier: C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/2AB59F90B32B11F18709B4406B11F970.roa
Signing time: Fri 18 Sep 2026 06:37:18 +0000
ROA not before: Fri 18 Sep 2026 06:37:18 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 137561
IP address blocks: 210.56.4.0/24 maxlen: 24
210.56.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl
rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 15:37:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10101 (0x2775)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E32A, serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543
Validity
Not Before: Sep 18 06:37:18 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6aacdc1d-804d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c5:10:b1:a6:7f:bc:a2:35:72:a9:22:3c:e5:
9f:b4:56:03:9a:e4:3a:9f:35:77:12:99:f0:f8:20:
2f:d4:b0:2c:25:3f:e6:5a:4d:9b:f7:ed:e4:96:fa:
6c:f6:c1:21:49:71:d6:6f:1c:78:aa:23:d1:b0:4f:
46:ba:b2:0c:96:1e:43:68:14:60:3e:b5:9d:4a:3f:
8d:01:2c:5b:0d:7a:c4:76:dc:54:e0:81:03:43:67:
e4:87:6f:52:e0:f5:a7:a4:22:85:27:8d:1e:fd:9f:
d9:25:be:d8:4d:57:4a:5d:e9:13:46:91:40:e8:03:
87:9d:57:eb:73:39:76:66:5e:8e:10:4d:f0:f3:e7:
47:c3:fd:31:29:d1:98:40:b3:af:a7:30:84:e8:08:
e2:56:27:9a:0a:e3:48:05:1a:0b:c9:64:5b:e4:3d:
2e:cf:6d:a9:02:6b:8c:1f:0b:b6:19:a2:5a:79:7c:
68:f9:f5:a1:43:39:00:4d:c5:8f:8f:e4:f4:d2:bf:
3b:a4:83:bc:55:9a:4d:08:27:29:d6:64:d6:75:91:
e3:97:82:52:a3:f6:85:f0:0a:65:e8:f6:95:05:bc:
af:04:86:9b:90:86:93:a3:1d:47:4d:80:59:66:42:
a1:39:ff:2f:7e:f2:2b:29:b5:30:7b:f0:cd:56:7e:
fe:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:55:98:16:E5:4B:F3:4A:20:9F:AE:FF:05:5C:EA:75:E6:66:DA:0D
X509v3 Authority Key Identifier:
keyid:C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/2AB59F90B32B11F18709B4406B11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
210.56.4.0/24
210.56.19.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:57:c7:df:52:a4:74:16:19:2c:9b:4e:bc:03:3b:2e:77:3b:
1d:8b:c7:3c:1f:1b:a9:38:14:1f:de:df:11:ff:61:9b:75:9c:
b5:f8:9f:1f:59:4c:d7:74:5e:74:b8:b6:7e:88:ce:22:5e:7d:
de:6b:e9:31:50:8b:5f:6a:52:23:61:76:46:2a:6b:38:f8:c5:
ca:bf:55:6d:74:5f:f9:8c:7a:12:63:48:35:36:3f:84:ed:2e:
0f:3e:ed:d7:5e:5c:d8:1f:43:1a:a9:c9:ee:86:bd:34:e8:ca:
3c:fc:02:65:39:a3:ee:2a:5e:d0:49:01:87:86:a5:f9:35:e3:
fd:03:95:3e:bc:b9:58:68:50:88:6d:c0:49:e9:3a:93:83:10:
fe:f7:bb:76:de:f4:a6:6d:af:13:dd:bf:80:85:cb:72:9f:5d:
ea:73:19:92:99:64:40:d5:4f:77:35:5e:be:a6:5d:10:c3:6f:
12:7f:90:b2:70:ac:48:25:c9:89:b1:56:e7:e3:44:ba:fc:66:
9f:f6:02:97:a3:ea:57:28:a3:69:cb:57:3d:d8:05:cf:0b:04:
29:b9:b9:31:76:e4:27:6e:9f:62:e0:fa:cb:af:41:d6:b3:ff:
d4:2a:52:8c:9c:39:00:88:e6:9a:f5:22:8f:2e:33:7a:ab:74:
eb:ba:2d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:29:14 2026 by rpki-client