
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/A1F2E73A19D511EF85D48428C4F9AE02.roa
File: A1F2E73A19D511EF85D48428C4F9AE02.roa (raw, json)
Hash identifier: U/V2tfCzXIkMn9+RRMC4iOnoKIBTmGoYLcKDBldRoGs=
Subject key identifier: 94:D5:E4:23:9F:42:9E:44:5F:04:DB:E6:AF:6C:9B:14:CC:E1:DD:C9
Certificate issuer: /CN=A9149F48/serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79
Certificate serial: 073E
Authority key identifier: 00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/A1F2E73A19D511EF85D48428C4F9AE02.roa
Signing time: Thu 26 Feb 2026 22:18:43 +0000
ROA not before: Thu 26 Feb 2026 22:18:43 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 141726
IP address blocks: 2407:1d40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl
rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:18:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1854 (0x73e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F48, serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79
Validity
Not Before: Feb 26 22:18:43 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69a0c6c3-ec40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:39:b3:11:9a:b8:41:d2:d6:13:40:49:02:d6:
bb:e3:2a:ef:f1:40:87:58:d9:84:9a:93:6d:f6:39:
e4:81:ab:70:66:44:b0:0b:b3:c1:ee:07:5c:3f:48:
f9:96:29:6f:8f:b2:4e:99:56:1e:ff:2e:25:cf:31:
c4:b1:6f:ba:d6:18:d1:19:fa:cb:5b:ea:bc:82:1b:
80:b7:c5:79:4b:7b:aa:f3:d9:63:05:c1:5e:b3:6d:
d5:5c:28:dd:25:bd:d3:7a:f9:82:81:3f:12:19:0b:
82:71:6f:54:3e:60:c1:9e:07:0b:60:90:b0:4f:1d:
aa:1e:07:4b:3c:48:19:a4:41:61:d4:a6:c0:5b:db:
f8:83:af:6d:b9:86:64:96:34:01:b5:c0:eb:24:06:
01:35:0b:6f:f1:2d:36:fc:ff:b5:fe:3e:ff:a3:c6:
1b:c7:56:dc:aa:ec:fe:f6:2f:86:a1:ff:a5:67:cd:
a0:9c:29:90:77:1d:25:d6:cd:6a:aa:88:9a:27:4e:
73:e0:b6:bd:cf:4c:c1:db:96:7d:ce:2a:6e:0e:0c:
ea:e7:7f:9f:1d:22:83:9c:b1:56:7d:31:68:50:93:
5c:b2:c7:fe:4d:82:65:e3:10:70:80:42:0b:7d:78:
73:27:5b:34:d0:20:54:f5:de:25:ec:c6:40:ef:63:
00:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D5:E4:23:9F:42:9E:44:5F:04:DB:E6:AF:6C:9B:14:CC:E1:DD:C9
X509v3 Authority Key Identifier:
keyid:00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/A1F2E73A19D511EF85D48428C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2407:1d40::/48
Signature Algorithm: sha256WithRSAEncryption
40:d6:a6:80:57:a0:27:ce:84:76:8a:87:e9:81:93:ea:7e:f7:
0d:22:7b:59:a5:30:69:1d:b1:c9:87:96:54:46:18:7f:0f:22:
ad:71:97:78:67:d4:6a:51:02:33:12:ba:02:31:53:03:e4:41:
59:83:0e:ac:49:3d:98:20:54:eb:d4:ed:00:3d:f4:df:8e:cc:
1d:5e:f9:b0:8d:57:e6:07:15:d9:d6:9c:3c:ee:4c:1e:59:cd:
e0:b5:f5:dd:d7:d1:e6:ae:56:82:ac:1b:d8:68:d8:2f:e5:51:
f9:6b:af:74:31:47:e8:78:df:55:0e:13:27:51:70:f8:e2:49:
5e:29:6c:94:ed:ec:dd:fd:aa:c3:a3:05:a4:11:f6:93:e5:ca:
07:81:92:40:03:4f:09:8f:e3:78:1a:94:88:74:a5:fa:4c:45:
f7:24:c2:6f:58:91:72:02:75:1c:b3:c2:35:ab:1a:35:a5:21:
46:fb:bc:94:06:59:20:d5:65:0f:59:42:29:fc:93:70:48:9d:
22:d9:5c:21:40:06:57:0d:ea:29:da:f8:fe:41:b3:a6:12:7c:
de:45:44:76:17:30:9c:b4:ce:2e:83:f2:bc:15:98:f7:51:3c:
25:bd:d4:ec:a4:59:34:c6:28:78:e9:f9:b8:51:07:e1:10:46:
a2:a3:81:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:20:16 2026 by rpki-client