
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/E474AF108D8811EDB3C13D6CC4F9AE02.roa
File: E474AF108D8811EDB3C13D6CC4F9AE02.roa (raw, json)
Hash identifier: noBQw864/f72VFx3andbpjd4W9nv+2EjSEATcB2fGbI=
Subject key identifier: 36:0E:E7:EC:98:EA:56:0A:D1:D2:BA:54:82:2E:39:66:19:07:DD:EF
Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial: 3608
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/E474AF108D8811EDB3C13D6CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:26:06 +0000
ROA not before: Thu 30 Oct 2025 15:31:29 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 9885
IP address blocks: 2405:8a00:ffff::/48 maxlen: 48
240a:eabc:d00d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:34:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13832 (0x3608)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Validity
Not Before: Oct 30 15:31:29 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a484be-c1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:71:63:c4:95:06:5f:2b:9c:9a:f3:c8:93:bf:
4f:20:0f:b8:a8:a5:8f:2a:d2:0f:60:03:0d:ee:aa:
99:52:43:11:e5:bc:d0:35:e0:28:00:ce:6d:16:d3:
2b:f4:cd:72:01:18:64:23:fd:55:2a:41:f5:ef:34:
0d:32:6b:b7:f2:64:0f:6e:50:8f:84:39:8b:6b:81:
94:28:da:bf:d7:ad:3f:06:06:5e:56:f5:31:ef:ee:
13:a3:0d:91:bf:07:8e:d9:e9:8b:05:ae:73:38:78:
fa:1f:55:99:5e:41:1a:c9:6c:53:3d:43:c5:e8:9f:
ab:b3:d4:7b:8a:a1:9a:c1:67:13:cd:7e:9f:fe:f5:
3e:db:8e:3b:57:41:bb:ff:18:11:1c:60:1f:03:28:
4b:de:54:ed:3e:a2:7c:d3:e7:54:f9:a4:55:b6:26:
f5:31:af:fc:04:02:fe:a9:c5:39:ca:d6:9a:95:ee:
26:37:31:0f:12:4d:98:24:b4:bf:94:9d:e2:23:ca:
60:ee:ff:3f:6b:4b:79:62:da:31:a6:1b:c4:e2:fc:
4c:ca:db:f3:10:43:30:34:4a:08:f4:3e:c2:9f:4c:
a2:00:dc:5c:82:d9:f6:37:c4:0e:8f:e5:7a:8c:30:
24:0e:fe:5c:e0:3c:32:10:e2:c5:92:d5:9f:0e:39:
83:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0E:E7:EC:98:EA:56:0A:D1:D2:BA:54:82:2E:39:66:19:07:DD:EF
X509v3 Authority Key Identifier:
keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/E474AF108D8811EDB3C13D6CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:8a00:ffff::/48
240a:eabc:d00d::/48
Signature Algorithm: sha256WithRSAEncryption
5e:97:9c:8c:dd:05:e7:23:99:b7:50:a6:ee:8e:db:3a:99:85:
79:3c:d1:db:a3:47:87:56:1a:33:e8:5e:7b:6f:78:a5:fd:34:
57:3d:7f:78:7a:d9:83:27:d9:5a:32:bf:54:03:0a:fe:85:37:
a8:97:e1:4d:7b:40:12:19:f1:f4:61:42:c4:41:2f:d9:91:44:
3f:32:08:a4:f4:a0:00:18:f4:b2:93:eb:b9:20:c4:4e:69:97:
46:dc:b4:8e:b1:43:a6:2e:2d:15:d0:ff:8b:b3:2c:b2:42:30:
16:ca:37:7d:52:80:16:84:3d:f5:52:85:b9:47:8a:b1:71:44:
73:56:35:98:b9:f5:3d:a6:75:fc:fb:e9:72:5a:23:e0:90:40:
f3:84:0d:e8:3e:b3:25:13:46:19:a8:c5:49:46:20:57:8b:a9:
cd:7d:3e:c1:b4:de:eb:15:75:7a:23:af:7e:f0:d0:5c:0a:16:
b7:77:cc:18:03:15:db:dc:54:57:21:ab:bd:2b:19:a7:06:36:
94:94:f9:a3:ce:af:de:61:90:06:fd:0a:5c:17:e2:e7:ac:b3:
52:73:37:b3:9b:c5:2a:e3:9f:66:da:9a:e3:ea:19:a0:78:08:
cb:e8:da:41:a0:a8:a2:8f:f8:dd:65:45:45:b3:67:69:20:c6:
af:43:90:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:15:53 2026 by rpki-client