
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/EF1D0466455311E98FA31F68C4F9AE02.roa
File: EF1D0466455311E98FA31F68C4F9AE02.roa (raw, json)
Hash identifier: WNcYetTPqeiv/gJdhSaTlqe8oWCCpgSvbxYX4ELwCGg=
Subject key identifier: 6F:D4:DF:B4:90:5C:01:20:60:9E:44:E7:AB:09:11:D8:A0:DE:FB:D5
Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial: 3605
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/EF1D0466455311E98FA31F68C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:26:03 +0000
ROA not before: Thu 30 Oct 2025 15:31:26 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 55433
IP address blocks: 2405:8a00:6029::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:25:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13829 (0x3605)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Validity
Not Before: Oct 30 15:31:26 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a484bb-6331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:cf:2a:8c:c3:ac:da:9f:23:38:58:7d:e4:d4:
33:b4:68:c8:0a:fa:fc:46:68:66:65:a8:f2:b3:56:
91:d6:d8:ca:66:1d:d2:d6:4b:7f:e4:21:2d:24:ae:
71:bc:99:04:da:6b:15:a2:a8:88:4b:a0:3c:64:ac:
b5:53:f6:88:54:62:4d:a4:c1:c0:7f:0a:c5:d4:a4:
ea:e4:5e:1c:03:4f:86:a4:e5:a0:03:83:73:d5:4d:
6b:4a:2f:9e:c4:8f:e8:13:27:d1:7e:83:db:a2:ad:
d8:8c:de:60:c5:3b:a4:e5:36:c5:33:b6:6b:a7:f4:
fe:7e:82:dd:44:8a:2a:83:7f:52:48:3c:99:69:07:
d8:42:a1:d0:88:b8:cc:6f:7f:27:9e:e9:d9:ee:4a:
61:bb:3a:41:8f:7e:d1:7f:58:df:60:ae:ae:6b:a9:
9c:16:28:f3:42:76:72:f0:73:9d:43:c0:57:8b:d4:
74:e0:5d:eb:00:b8:34:3b:3b:27:c0:89:5a:3b:e8:
7d:ff:df:90:09:e5:ba:bb:f4:65:d2:dc:9e:e0:43:
b8:60:de:63:bf:f2:42:33:de:c6:bd:a9:7f:47:6a:
c8:70:19:79:e7:31:34:92:17:b8:2b:bd:d4:34:ce:
4a:f8:fd:07:59:99:d8:0b:00:e6:ef:b1:c6:76:f3:
e1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D4:DF:B4:90:5C:01:20:60:9E:44:E7:AB:09:11:D8:A0:DE:FB:D5
X509v3 Authority Key Identifier:
keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/EF1D0466455311E98FA31F68C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:8a00:6029::/48
Signature Algorithm: sha256WithRSAEncryption
c3:d0:da:01:de:c1:31:3b:6e:c9:b7:1b:74:78:a5:b9:84:ba:
71:86:6b:fb:fd:73:c1:b7:35:9e:e0:9f:ce:e1:13:03:f4:71:
d2:f7:e3:25:54:08:1f:10:44:aa:8b:b1:2f:44:09:90:06:83:
88:9e:67:b8:cb:e5:ea:ca:1a:3d:23:d5:c6:a4:20:d7:5a:b5:
e3:f3:0f:49:3c:66:85:de:46:89:a5:af:bd:81:ee:e4:4d:bb:
20:49:f4:17:73:ef:ad:1b:a9:13:d8:74:a1:b2:ce:98:4e:be:
8f:3f:88:9f:ca:b2:b4:4e:d8:d6:80:e7:bb:50:db:88:f0:87:
fd:c2:17:5f:34:8a:42:6b:d4:02:74:4a:17:fc:c9:62:d9:a3:
40:18:7c:41:86:e2:ba:95:97:3b:76:fb:5c:57:4b:fa:40:e2:
97:da:1a:71:e9:7d:c9:e1:d5:9b:44:fb:cf:93:99:72:0c:f9:
3e:1d:7d:60:d8:79:f3:ab:d6:bb:07:8b:78:8d:2a:a0:72:aa:
bf:49:b0:a3:e2:3c:f4:89:14:7e:69:a4:db:2b:26:8f:c0:0d:
a2:0d:2c:64:25:51:29:8b:7c:64:cc:0a:80:80:2e:07:fb:58:
1f:05:aa:c0:56:af:da:84:e4:aa:e7:ce:b4:74:3d:a6:e4:37:
04:cf:b3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:35:30 2026 by rpki-client