
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/7350B2AE2BB011EEBF8C0962C4F9AE02.roa
File: 7350B2AE2BB011EEBF8C0962C4F9AE02.roa (raw, json)
Hash identifier: d4lTODvUkouxXVPPc6ygUkOl8NqMMqWXrGfdqtm829Y=
Subject key identifier: C5:26:BB:40:C4:FA:4C:FC:9A:29:29:0C:C1:B3:64:C5:7B:84:3A:AC
Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial: 3601
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/7350B2AE2BB011EEBF8C0962C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:26:00 +0000
ROA not before: Thu 30 Oct 2025 15:31:22 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 148002
IP address blocks: 240a:eff4::/32 maxlen: 32
240a:eff5::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:25:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13825 (0x3601)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Validity
Not Before: Oct 30 15:31:22 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a484b8-62ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5e:65:5a:9e:b7:34:3f:49:dd:5c:59:aa:61:
3f:f5:83:cf:ce:24:38:6b:c2:b5:7a:1e:10:17:a1:
a4:a2:5c:dc:fc:3e:08:3e:cc:27:e8:30:48:51:e1:
69:04:e9:5e:9a:25:c7:e3:43:5d:9c:44:88:ff:e7:
4b:ec:34:6a:63:34:26:4e:de:a4:01:45:ac:49:09:
d0:a3:6c:7a:1d:86:4c:03:3a:95:30:22:98:df:49:
dd:2c:59:57:5c:f0:00:0c:16:77:c8:ab:51:ad:ac:
e9:5f:a4:db:d6:8f:c1:ae:cc:89:cd:99:68:01:8a:
2d:f3:1d:76:03:ba:f3:2d:1e:b6:64:7b:b9:99:de:
11:68:38:6e:58:80:5a:f1:09:30:d9:f2:a6:11:84:
93:be:9c:62:a9:eb:6d:d7:fc:63:77:c4:de:8b:a8:
0e:da:74:d8:bf:32:1a:cc:ac:1f:d8:01:b2:84:a7:
e1:77:50:ff:aa:39:56:25:e5:8c:fd:83:e5:c4:45:
94:4d:74:4a:c6:05:35:69:a4:01:27:28:20:13:87:
c5:f3:2c:b4:06:c7:d8:36:d7:5e:f6:17:66:44:c6:
11:00:0d:0b:49:09:3a:ae:f2:07:c1:27:8e:3a:15:
4a:a0:fa:0a:f5:51:8c:61:c5:79:a4:18:fb:d2:87:
69:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:26:BB:40:C4:FA:4C:FC:9A:29:29:0C:C1:B3:64:C5:7B:84:3A:AC
X509v3 Authority Key Identifier:
keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/7350B2AE2BB011EEBF8C0962C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
240a:eff4::/31
Signature Algorithm: sha256WithRSAEncryption
68:e1:e6:c3:d6:ee:8b:d4:11:8b:1f:c8:e5:76:e4:14:e9:e6:
dd:7c:9a:ea:0f:e9:58:19:6f:27:a1:58:b1:97:d4:00:a8:6c:
6e:4b:30:5d:35:cc:01:43:d5:ff:9d:79:03:96:cc:31:ea:71:
e3:1e:3f:7f:fd:56:98:65:93:2a:82:e4:7b:ae:b4:21:d4:ba:
37:c5:8d:83:5b:23:4a:7e:6c:fa:e4:37:9e:b6:33:3e:63:32:
1a:61:87:79:c7:19:c7:8d:19:91:eb:22:a4:15:ad:10:25:2b:
78:b1:4c:93:37:99:43:7a:01:7b:88:ac:a5:cb:04:b6:d4:a1:
fe:51:bd:3d:42:fc:18:59:fb:19:67:a9:73:40:0d:1e:c2:4e:
98:22:1e:eb:b4:35:36:c4:11:a5:f6:31:9e:c7:e6:9a:d9:98:
30:54:14:4e:58:fe:65:33:05:c1:69:de:30:11:7c:e8:dd:f7:
a8:3c:7c:f5:72:45:22:00:c1:87:9d:c1:ab:41:95:40:22:5a:
93:23:16:74:84:bc:c4:22:b6:7b:cd:6d:58:77:23:9a:1c:09:
13:c4:4d:ba:d2:a2:2c:06:60:52:60:67:18:12:da:d6:02:d1:
bb:30:60:13:25:bb:d4:54:6b:15:e1:e7:06:50:9f:9f:e9:08:
b3:df:7b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:12:22 2026 by rpki-client