
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/FB405D86900E11EAA43BB21FC4F9AE02.roa
File: FB405D86900E11EAA43BB21FC4F9AE02.roa (raw, json)
Hash identifier: Mml/GDHtSEelqn0CLVtWVAulYa1xZrTOLXsNy4rC6ik=
Subject key identifier: 2B:76:97:84:05:ED:5E:95:5E:01:86:EC:B3:A3:FA:E9:EE:9B:79:21
Certificate issuer: /CN=A914C33A/serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC
Certificate serial: 2B21
Authority key identifier: 9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/FB405D86900E11EAA43BB21FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:52:55 +0000
ROA not before: Tue 30 Sep 2025 15:42:30 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 135053
IP address blocks: 2406:e401::/32 maxlen: 56
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl
rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11041 (0x2b21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C33A, serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC
Validity
Not Before: Sep 30 15:42:30 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a460d7-6fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c7:88:03:9a:76:f7:70:22:3f:92:e8:b8:5a:
c5:d7:a9:ee:6a:a0:21:e3:bd:d7:15:51:f7:5d:5a:
fe:93:bb:06:69:10:c0:e9:96:7c:d2:f3:f5:81:72:
3f:3c:b1:42:9a:31:90:b1:b3:b0:f4:69:76:b6:7f:
70:ad:70:d9:0f:c2:95:fc:2f:d2:89:dc:d3:30:7d:
24:50:14:f2:13:b4:60:ef:81:d5:d5:c9:25:4d:74:
6e:74:d0:27:24:cb:52:74:8f:6b:b4:9c:dc:8b:db:
3c:e5:7d:f1:c4:60:07:94:7b:08:93:d1:5b:fe:3c:
39:bd:57:45:58:2f:b1:8f:cd:ff:6a:e5:18:8a:22:
8f:ab:9e:2d:a8:66:68:c2:b5:d9:10:75:60:ca:19:
46:33:83:76:a6:39:c5:e2:79:c7:ef:ff:3a:d0:94:
e8:41:58:c1:d5:16:cb:d5:f7:66:c9:bb:19:a0:5c:
23:57:20:00:7b:d5:a2:c2:f2:20:d2:66:d8:13:5f:
ec:f3:07:79:f4:d9:aa:41:5b:c9:78:bd:1d:e6:96:
72:4e:c0:92:7d:f8:9a:27:2c:f6:b0:72:9d:a1:b1:
44:eb:ad:70:2b:9a:44:4a:a6:c1:84:ce:67:4d:cd:
16:be:87:c6:29:6a:e0:4b:48:a7:ba:90:f9:a7:09:
38:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:76:97:84:05:ED:5E:95:5E:01:86:EC:B3:A3:FA:E9:EE:9B:79:21
X509v3 Authority Key Identifier:
keyid:9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/FB405D86900E11EAA43BB21FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:e401::/32
Signature Algorithm: sha256WithRSAEncryption
0b:ff:8b:9b:c0:7b:ae:50:8c:81:9f:17:c8:a3:5f:af:3d:53:
93:06:f5:60:81:5c:02:4d:9f:c9:34:74:82:9e:31:48:db:4d:
7a:2d:69:db:6f:eb:97:85:ca:63:29:97:4b:58:e6:74:40:7b:
7d:8c:2e:43:bb:b2:11:b3:f8:2c:65:ae:8e:10:3a:2c:e5:8e:
25:28:71:fe:ac:97:2f:cd:3e:37:35:0b:f3:dc:85:33:04:cf:
95:5d:03:45:2f:f2:38:73:8e:36:d9:1d:ce:96:3f:41:fd:b5:
3e:ee:5f:f7:00:a7:b1:e2:02:eb:fa:be:13:03:5b:30:7b:8b:
c8:b8:3f:e9:e1:94:7f:58:82:13:3e:0d:f5:a6:93:bf:ff:47:
a4:68:4d:a4:8d:2b:3a:2c:fe:64:e4:0f:09:83:59:33:96:30:
95:73:f2:cd:d1:b7:f0:21:3c:52:0b:7c:df:ae:50:88:21:91:
9c:de:d6:92:14:23:f2:b7:44:a6:4e:82:2a:4a:f1:5b:4f:be:
c3:d9:9a:fa:37:2b:b1:ae:2f:37:61:5a:73:16:af:d5:78:68:
fe:79:2f:b2:5d:a2:47:4a:a3:9c:b3:25:b1:9d:3e:3a:9d:47:
38:7d:4a:7a:c8:04:56:fb:15:ea:14:d9:f8:20:63:4e:08:07:
e5:5d:8d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:44:15 2026 by rpki-client