
$ rpki-client -vvf rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/E342A7D0F9D911F0908C8513676F56BC.roa
File: E342A7D0F9D911F0908C8513676F56BC.roa (raw, json)
Hash identifier: rFk76m5fW9CYOpE5VZsRNzUgbtpqshwPbQBMeshiV/E=
Subject key identifier: 02:C3:DF:61:45:5F:21:48:6B:04:FF:66:47:5C:CB:7D:E7:A7:0A:F0
Certificate issuer: /CN=A915670F/serialNumber=1FF8CAE22D2D724ABBD1C2D125FB7DB7B4F84AFF
Certificate serial: 16
Authority key identifier: 1F:F8:CA:E2:2D:2D:72:4A:BB:D1:C2:D1:25:FB:7D:B7:B4:F8:4A:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/E342A7D0F9D911F0908C8513676F56BC.roa
Signing time: Sun 01 Mar 2026 05:40:28 +0000
ROA not before: Sun 25 Jan 2026 10:37:46 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 138030
IP address blocks: 2402:44a0::/36 maxlen: 36
2402:44a0:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.crl
rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915670F, serialNumber=1FF8CAE22D2D724ABBD1C2D125FB7DB7B4F84AFF
Validity
Not Before: Jan 25 10:37:46 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a3d14c-8def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ac:b5:08:db:7c:91:7e:9b:74:da:4d:36:10:
2d:47:b3:76:2f:be:5e:1e:65:c1:2b:4a:1d:1d:7c:
5e:5b:02:b5:59:66:6c:59:fc:6c:74:3a:24:1b:25:
02:21:b7:49:6e:d2:ff:bf:61:6d:7b:b4:4e:da:2a:
0b:3f:4d:b1:41:f4:e7:d2:55:a3:41:66:45:49:b7:
74:13:24:a4:ff:fa:6a:17:40:19:71:db:08:b9:4f:
b3:d1:23:5c:58:78:b0:00:9c:2f:1b:15:9c:cb:a1:
6b:7b:eb:6d:e5:71:a2:e2:e2:55:a8:79:d6:85:62:
12:39:fa:a3:48:b1:79:92:64:39:fd:c6:66:cc:a9:
a6:d6:5c:d9:e3:cc:88:fb:7c:44:08:6b:80:f6:9e:
a5:d0:68:34:76:04:c2:69:96:6a:14:54:4d:c4:3c:
40:3f:fd:0a:de:86:ca:84:1f:a9:62:d0:d8:34:6f:
a7:cc:1f:ef:14:88:2b:de:0a:27:dc:a9:2e:cc:f7:
e5:6b:75:35:98:d9:47:6f:be:01:ae:b5:fb:e5:b1:
54:aa:79:af:ed:e4:69:a4:ea:bb:ed:a5:7a:9d:c8:
b5:12:4d:02:65:54:7e:64:c1:b2:d4:1d:23:f6:5a:
83:00:de:fe:88:71:32:8d:34:03:0f:50:6b:09:9b:
94:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C3:DF:61:45:5F:21:48:6B:04:FF:66:47:5C:CB:7D:E7:A7:0A:F0
X509v3 Authority Key Identifier:
keyid:1F:F8:CA:E2:2D:2D:72:4A:BB:D1:C2:D1:25:FB:7D:B7:B4:F8:4A:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/E342A7D0F9D911F0908C8513676F56BC.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:44a0::/35
Signature Algorithm: sha256WithRSAEncryption
0b:e0:ab:77:33:03:cd:68:e4:77:af:93:f4:07:11:46:1b:7f:
30:40:c6:29:2e:61:99:f4:fe:7c:70:0f:e3:59:1d:27:ad:ba:
6a:7a:48:08:b0:a9:9c:8b:b6:2b:bc:00:22:ca:aa:fe:22:a6:
26:68:1e:8c:51:8c:68:f9:51:49:78:fc:ea:f3:3a:9e:84:c2:
78:f9:54:14:3b:6a:b5:03:8b:89:e0:7e:cc:a4:82:bf:8d:d6:
1e:c9:f4:0b:5a:ee:18:e3:16:c1:2e:ba:9f:66:ed:a6:f4:b0:
ea:05:f0:e8:b8:af:60:c4:4d:33:e9:da:8a:db:b8:51:6f:4a:
a2:9f:fd:66:79:2a:74:4f:ca:2b:f9:f7:6f:82:39:94:0f:12:
54:2d:2a:18:f4:8f:25:05:ca:e1:1a:2b:81:75:d1:06:6f:b1:
50:48:ae:10:45:42:c0:4f:33:7f:c6:a1:da:fc:9f:93:0c:79:
cb:cc:85:63:a7:25:a4:56:bc:b0:8b:af:b5:93:33:83:b7:c4:
97:68:ae:ea:64:57:89:a0:a8:cb:2f:0e:24:81:e4:a6:87:ec:
37:00:e3:ce:bb:5c:d7:83:23:4f:4b:d7:1f:55:2f:49:c5:33:
7a:16:d4:26:93:80:ed:94:a0:3b:b2:39:28:67:47:e2:03:e6:
06:be:cc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:49:41 2026 by rpki-client