
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/95B5C59E2DCE11EEB652B16FC4F9AE02.roa
File: 95B5C59E2DCE11EEB652B16FC4F9AE02.roa (raw, json)
Hash identifier: d6iO9u2ih9RRm7pMd+vjg8OegUnNhTtH4LrmCu5pQ4M=
Subject key identifier: B4:C1:84:6F:D8:11:17:10:E2:D2:54:57:61:34:BE:2F:0E:39:EE:E9
Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial: 3602
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/95B5C59E2DCE11EEB652B16FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:26:01 +0000
ROA not before: Thu 30 Oct 2025 15:31:23 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 148003
IP address blocks: 240a:eff6::/32 maxlen: 32
240a:eff7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:25:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13826 (0x3602)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Validity
Not Before: Oct 30 15:31:23 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a484b9-50ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4c:81:3f:32:90:b0:50:50:13:b9:34:a4:28:
9e:56:dd:00:5d:f2:61:c4:75:59:ff:9c:4f:7f:13:
54:7e:95:39:96:73:1e:4b:74:59:66:46:bb:9b:5a:
c3:61:21:55:f0:85:1a:1d:5d:a7:2c:1b:04:ed:64:
83:0c:5a:95:5e:2c:79:1a:51:77:9b:97:87:a4:a2:
70:30:59:4f:59:00:51:48:42:b2:0e:17:06:88:8f:
f5:f3:dd:59:04:a0:04:e9:77:74:42:c7:e3:c7:a7:
c0:13:cc:8d:3e:0b:db:33:0f:a5:c7:dd:37:37:41:
1a:4c:9f:9d:40:03:45:4e:8b:50:1b:47:da:00:48:
9b:c4:fd:0f:ca:cc:f1:ce:57:e1:4e:6e:ee:b4:48:
46:7b:79:e8:77:96:29:27:f5:bf:9d:ed:ae:1b:75:
7d:8e:3e:5a:ce:55:f9:26:de:0f:b9:bf:10:18:5a:
6e:25:86:62:e5:8b:d8:df:6d:bd:20:4b:d5:9c:0d:
68:76:9b:0b:38:c8:2d:cc:39:a7:f3:42:88:b4:df:
da:e0:13:ba:f5:fc:69:00:43:7b:21:60:41:29:fd:
c5:a6:1c:c3:f5:65:13:a1:b2:26:cf:09:70:7d:ab:
a7:0f:54:fc:1e:a9:39:45:98:3f:89:cd:50:93:74:
90:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C1:84:6F:D8:11:17:10:E2:D2:54:57:61:34:BE:2F:0E:39:EE:E9
X509v3 Authority Key Identifier:
keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/95B5C59E2DCE11EEB652B16FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
240a:eff6::/31
Signature Algorithm: sha256WithRSAEncryption
75:69:0c:4f:3f:ab:49:43:d3:9c:42:d3:4a:0c:a6:1f:7f:31:
8e:26:75:80:ed:4d:37:ca:c0:15:59:55:1e:c7:f5:ef:26:7b:
1c:b0:79:77:08:f6:97:3f:7f:71:98:7b:90:3c:68:6f:92:bd:
e0:5e:f7:1b:77:fe:1d:9f:10:45:db:63:11:fe:29:11:5f:c5:
9e:81:c0:dd:a2:af:a1:9b:a7:bf:8c:12:5c:f1:16:c7:ae:54:
d6:e2:10:d7:46:ce:52:bf:5f:08:84:f5:ab:61:8b:54:03:ba:
87:a8:97:fa:c7:97:77:b2:c3:54:e9:ed:23:47:bf:59:ce:52:
2e:e3:92:cc:7d:43:b8:f6:ad:ed:b8:62:39:84:99:eb:f8:b3:
07:c3:07:d7:f2:04:1b:a3:20:fb:31:0c:ea:c5:50:4e:29:a6:
9b:3d:08:70:02:98:9d:02:ed:87:28:dd:d6:9e:82:47:69:54:
94:4f:24:3d:b4:d9:02:69:d8:70:62:c7:05:91:c3:12:73:d0:
07:8e:b2:cb:90:8f:55:28:e5:e5:f2:44:ed:05:e8:a3:5e:27:
a0:77:95:9a:6f:a7:8a:65:e3:38:07:bb:ef:7e:a2:8a:f4:7b:
f5:83:85:ef:c4:98:ed:ae:1d:6d:8f:58:5c:1a:99:3a:09:0f:
0d:29:3c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:52 2026 by rpki-client