
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/28393F1411E211F1A80167F20C3D8C67.roa
File: 28393F1411E211F1A80167F20C3D8C67.roa (raw, json)
Hash identifier: J0yLTt5l2Cgh6Y+Q/baTwl4H39BuMDi2DFqmq2r3dew=
Subject key identifier: 30:1D:5D:EA:62:23:98:42:A0:40:04:07:8D:F9:CC:A1:3D:9D:7F:DE
Certificate issuer: /CN=A914CFBF/serialNumber=78EC0F0E494F228EAA4383D6C60DEB1C362A5051
Certificate serial: EA
Authority key identifier: 78:EC:0F:0E:49:4F:22:8E:AA:43:83:D6:C6:0D:EB:1C:36:2A:50:51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOwPDklPIo6qQ4PWxg3rHDYqUFE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/28393F1411E211F1A80167F20C3D8C67.roa
Signing time: Sun 01 Mar 2026 18:14:46 +0000
ROA not before: Wed 25 Feb 2026 05:25:58 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 152605
IP address blocks: 163.61.128.0/24 maxlen: 24
163.61.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.crl
rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOwPDklPIo6qQ4PWxg3rHDYqUFE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CFBF, serialNumber=78EC0F0E494F228EAA4383D6C60DEB1C362A5051
Validity
Not Before: Feb 25 05:25:58 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69a48216-cc06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0a:8f:cf:41:a3:07:2c:db:26:be:6c:f9:3d:
54:05:ec:7f:ee:b5:05:2e:2e:d3:3d:54:6d:8e:0f:
3e:78:b9:bd:0e:cc:05:3b:39:fa:60:03:27:bb:d0:
ab:1d:7a:d0:71:56:9a:b3:2d:11:06:5a:ce:b1:ca:
a1:c4:07:14:bf:a2:ff:e5:2c:12:76:c5:a7:9e:f6:
e6:45:d7:9c:48:32:c4:8e:3c:ed:24:6b:2b:ac:5b:
80:c5:6c:a3:90:f1:53:29:51:05:4a:a3:f6:8e:ff:
7e:dc:4e:fd:e3:96:65:bd:04:fc:a5:67:f8:48:4c:
9b:ad:ae:5f:61:95:1d:c5:68:10:72:41:e1:f5:6a:
b6:63:35:52:f8:cb:28:d0:a4:63:52:21:22:6f:e4:
da:30:56:16:7a:bb:e4:8e:48:5f:16:4f:6e:42:67:
fb:9a:d3:a8:96:3f:7e:38:b4:ba:83:3a:09:ee:93:
93:4c:06:04:09:e8:7e:9d:03:e3:64:b5:80:4e:4b:
cd:fa:8c:b7:c7:d5:ad:21:e6:ed:96:22:ac:6e:c9:
c3:3d:58:22:45:c3:85:09:9a:22:a1:01:1d:57:cb:
3a:5f:f8:d0:30:48:8a:a9:8c:b7:99:ac:e2:ce:5f:
3d:ab:49:0a:3e:ec:d3:96:80:ab:29:7b:ac:e8:51:
5a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1D:5D:EA:62:23:98:42:A0:40:04:07:8D:F9:CC:A1:3D:9D:7F:DE
X509v3 Authority Key Identifier:
keyid:78:EC:0F:0E:49:4F:22:8E:AA:43:83:D6:C6:0D:EB:1C:36:2A:50:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOwPDklPIo6qQ4PWxg3rHDYqUFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/28393F1411E211F1A80167F20C3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
163.61.128.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:85:18:bb:89:a3:4d:04:45:40:c9:18:3e:58:c2:92:06:a7:
9f:da:56:48:2f:c7:9d:a7:25:8c:3b:5d:8f:28:fb:89:5a:9a:
79:bd:c1:4f:62:94:bb:98:10:86:fa:0c:ba:c0:49:7e:3c:6c:
60:7a:88:3c:94:4c:65:ef:d5:06:cc:d6:30:36:fc:d2:64:50:
9a:49:f9:5c:91:f0:1e:df:00:ef:ea:ab:05:67:ba:8a:d3:63:
13:6b:7a:1e:16:79:64:2f:6a:45:28:8a:77:15:ab:b3:23:36:
3b:49:9a:c2:85:71:17:91:d2:a6:85:00:58:4d:fc:6b:f2:25:
00:8a:40:c9:a4:ad:04:94:da:e9:fe:24:6a:9b:2d:bc:dc:b9:
b4:9c:ed:86:95:4c:9a:6e:23:64:fa:78:d7:f1:32:1d:d3:0d:
af:4b:9f:75:72:c2:42:e0:53:52:67:8e:51:d1:c1:d1:ac:08:
20:34:18:02:09:96:c3:29:fb:92:57:94:34:e1:a0:c5:8f:ef:
96:6d:6e:cd:86:73:f0:ce:24:73:24:da:30:95:bd:35:4e:f3:
63:d1:14:3b:0c:66:bc:51:17:92:a8:66:ff:e6:31:4f:fb:e1:
c0:ff:50:ac:5d:d7:be:23:5f:89:4b:a5:d2:05:e0:05:c6:90:
14:f8:d7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:09:09 2026 by rpki-client