
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/E367308E8D8811EDB3C13D6CC4F9AE02.roa
File: E367308E8D8811EDB3C13D6CC4F9AE02.roa (raw, json)
Hash identifier: a063z56fhF465bYqQMqQ/VS6+YD1pprAbiKfQKP6c7Q=
Subject key identifier: C5:8A:4B:DD:80:9D:A4:69:A0:63:74:FF:8E:AA:B6:3D:42:A7:09:B8
Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial: 3603
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/E367308E8D8811EDB3C13D6CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:26:02 +0000
ROA not before: Thu 30 Oct 2025 15:31:24 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 38620
IP address blocks: 2409::/40 maxlen: 40
240a:e000::/21 maxlen: 22
240a:e800::/21 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:25:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13827 (0x3603)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Validity
Not Before: Oct 30 15:31:24 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a484b9-351e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:31:05:5f:2a:e7:5f:d7:7a:66:67:31:aa:c5:
95:93:6c:a5:11:c0:ff:f7:be:7a:11:5c:41:a4:2f:
0d:2d:7b:0f:b9:ff:e1:62:4f:a8:d0:70:c2:84:b0:
0b:1f:d7:c6:88:57:b7:bc:a7:69:a4:aa:18:64:38:
ae:bf:ea:96:26:5e:b5:af:72:ce:22:fa:7d:c1:15:
9c:cf:e6:2c:71:11:22:54:fd:3c:95:e7:6e:0b:d6:
e2:42:ed:52:e1:ec:cd:5d:a7:6b:de:a5:34:7c:8c:
82:09:d6:03:ac:d9:ec:25:61:6e:21:f3:9d:00:9d:
0f:22:ad:0c:fd:47:23:d9:80:f2:9b:af:3c:21:c7:
43:07:d8:35:d5:4e:23:2d:1e:45:7f:77:ca:fe:c2:
b6:0e:80:64:77:4d:9c:f6:64:14:29:78:3f:5b:1f:
59:eb:16:d7:98:a7:39:3e:1c:19:27:66:3e:6d:22:
4b:58:ca:5e:48:20:c3:30:96:dc:67:52:b8:ac:b1:
2b:f4:73:8e:d3:2c:ee:a7:96:f9:22:9b:4b:0f:51:
f5:12:cf:d9:48:a5:e7:b0:db:e3:17:15:09:12:67:
ea:ad:b0:02:12:05:8b:0f:b1:8c:31:64:b0:5e:99:
e3:34:08:12:e0:ae:ec:5a:7a:17:77:fe:b1:39:84:
b4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8A:4B:DD:80:9D:A4:69:A0:63:74:FF:8E:AA:B6:3D:42:A7:09:B8
X509v3 Authority Key Identifier:
keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/E367308E8D8811EDB3C13D6CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2409::/40
240a:e000::/20
Signature Algorithm: sha256WithRSAEncryption
78:ca:f0:cd:3f:52:82:df:15:b6:cf:5a:ef:23:1b:4e:bd:de:
89:86:e7:54:a7:ac:08:9e:f0:d4:ee:a5:d3:c6:4e:d6:c7:f7:
5c:d0:db:5d:29:c4:06:32:73:25:f6:d8:ae:6d:46:04:f3:5b:
c0:29:e1:59:27:b0:6f:5c:2a:a3:8d:06:57:94:ca:ab:78:96:
90:d2:b0:c4:fe:8b:cd:5c:17:0c:be:2f:82:d1:21:ae:f3:4b:
68:43:69:45:1f:8f:6b:27:7e:75:cf:60:44:eb:ea:71:bf:33:
7a:96:bb:2f:3a:c6:12:c7:7c:7d:0d:e1:0b:e2:10:47:0a:de:
91:ee:4e:2c:1a:64:ce:2b:e1:40:ec:c0:01:02:d6:9c:1d:f8:
93:4b:f0:b2:9d:9a:f6:04:82:35:df:52:27:00:91:3c:9d:c8:
8c:89:82:10:34:11:0d:e9:ae:d2:86:42:47:c8:ff:e7:05:dd:
b9:52:37:78:99:3f:b2:24:8a:e9:c4:66:d7:3c:1e:b3:0e:ed:
fe:6d:3e:6c:6e:e5:1b:88:8d:b8:1e:64:a0:45:8d:40:b9:56:
29:ab:ab:b7:0f:65:cf:c5:6c:82:10:9b:b0:83:65:1b:62:f0:
50:af:31:14:60:5a:47:fd:73:93:a9:de:11:02:ff:c4:c4:00:
c6:71:f4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:21:52 2026 by rpki-client