
$ rpki-client -vvf rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/E1AB1F92430F11EAA60DB885C4F9AE02.roa
File: E1AB1F92430F11EAA60DB885C4F9AE02.roa (raw, json)
Hash identifier: HE9RcAckVDFGxlQ4u3qH1H4zDtKxUzAsKn4dFWVW/9E=
Subject key identifier: 4B:F5:88:29:45:9D:CE:69:FF:46:CB:1B:72:4E:D7:04:BE:15:1D:10
Certificate issuer: /CN=A914247C/serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC
Certificate serial: 0B9B
Authority key identifier: 84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/E1AB1F92430F11EAA60DB885C4F9AE02.roa
Signing time: Mon 02 Mar 2026 11:30:33 +0000
ROA not before: Sat 30 Aug 2025 19:40:37 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 24014
IP address blocks: 2001:df3:c600::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl
rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2971 (0xb9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914247C, serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC
Validity
Not Before: Aug 30 19:40:37 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a574d8-2c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:10:e4:4b:14:fc:2d:a8:67:22:de:9e:de:2c:
e1:5f:97:11:9d:38:09:fe:ca:a9:c8:71:39:4a:6e:
13:88:6c:86:f0:aa:34:6e:30:1c:d0:df:13:c7:cf:
57:f6:67:b3:d4:d7:cc:e6:af:4e:75:b3:93:19:4c:
14:ff:7d:25:9e:6e:c1:9d:c2:41:e7:05:b3:73:73:
28:18:cf:f8:3f:b3:10:da:a9:16:cf:1e:c3:d5:2e:
49:ba:c5:98:4f:74:2c:05:6a:f7:41:d5:60:f8:c9:
00:1e:48:2d:90:cc:ae:d6:f2:ad:5b:9e:ec:4a:52:
19:a6:28:ec:84:2c:f9:4d:12:c0:b0:02:66:5a:bf:
b0:bb:47:34:7c:8b:4e:ae:7d:b7:a5:73:84:1f:3b:
a7:b2:63:91:64:c2:b1:ce:dd:58:ca:72:62:e3:27:
d5:01:52:bc:7e:c0:90:fc:b7:47:7e:f6:6b:fd:fa:
60:fd:af:bb:10:53:1b:04:96:17:28:9c:9f:33:7a:
2f:a3:fa:ad:48:1a:6b:64:c1:56:00:64:f0:4f:71:
6a:85:36:d2:d0:51:23:56:32:70:96:73:92:8e:d3:
73:fc:49:00:1c:8b:71:7a:29:51:ed:ea:f1:f2:f7:
1b:50:86:14:55:cb:54:81:aa:30:6f:f5:6a:c9:b6:
c8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F5:88:29:45:9D:CE:69:FF:46:CB:1B:72:4E:D7:04:BE:15:1D:10
X509v3 Authority Key Identifier:
keyid:84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/E1AB1F92430F11EAA60DB885C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:c600::/48
Signature Algorithm: sha256WithRSAEncryption
72:f5:ec:dc:4a:e4:c9:2e:2b:65:20:30:e3:e2:12:8a:e9:c8:
85:c0:84:2c:71:3d:95:d0:4c:b8:19:ef:64:b4:dc:1e:c6:ce:
3d:39:fa:22:0b:b7:67:8b:5f:55:94:99:78:1b:ef:f7:31:fd:
65:3b:08:96:f1:bb:fc:d4:66:ab:e7:40:a0:73:ab:11:25:22:
cc:a4:fe:4e:27:5c:7c:7c:49:32:8b:a5:b2:a5:5f:ef:f2:36:
b6:bf:54:b1:fb:f8:b6:26:75:8c:dc:2c:4c:7d:3c:64:32:ac:
96:4c:84:97:50:e8:91:fb:9b:cb:9d:2d:68:64:a1:30:14:9e:
e7:3f:b4:40:68:65:b4:6b:2c:a4:da:75:6b:fa:b7:41:7d:68:
3e:71:98:18:17:2c:2c:df:02:f9:b6:84:33:82:6a:a1:f0:3c:
01:84:c9:49:7b:c2:08:63:86:98:ac:11:66:4d:bb:a2:aa:2d:
3b:01:c8:99:f4:88:fb:38:2b:bc:87:ef:3a:f8:ca:a1:b1:6e:
0e:f0:4b:71:c8:f6:5a:49:d1:ac:05:ef:c5:79:2f:2f:8c:93:
ea:00:c0:6d:3a:48:c7:f4:83:0d:2a:a0:b6:94:1a:38:58:c3:
01:88:ae:7a:b1:d8:05:b5:11:be:82:20:b8:2a:15:af:5a:d5:
f6:86:61:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:23:58 2026 by rpki-client