
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/A5A8DBE2865111F18C986E6391A30FBC.roa
File: A5A8DBE2865111F18C986E6391A30FBC.roa (raw, json)
Hash identifier: 96vGy7bp1vNNLVl0lRAFljn5SIt5ui19VMtj1FMFzNE=
Subject key identifier: DB:25:E7:E3:7B:3B:15:12:48:66:B3:3D:AA:A9:BB:86:24:97:04:00
Certificate issuer: /CN=A9157DA0/serialNumber=8887CF6CF5102F0FB713F4C4A1BDE389481F1C44
Certificate serial: 3594
Authority key identifier: 88:87:CF:6C:F5:10:2F:0F:B7:13:F4:C4:A1:BD:E3:89:48:1F:1C:44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/A5A8DBE2865111F18C986E6391A30FBC.roa
Signing time: Thu 23 Jul 2026 04:47:46 +0000
ROA not before: Thu 23 Jul 2026 04:47:46 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 10130
IP address blocks: 2407:4800:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.crl
rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 14:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13716 (0x3594)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157DA0, serialNumber=8887CF6CF5102F0FB713F4C4A1BDE389481F1C44
Validity
Not Before: Jul 23 04:47:46 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a619cf1-495d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8c:2f:3d:d4:61:39:9b:62:de:fa:76:04:55:
1d:c8:a6:89:13:16:9b:e3:9d:24:50:43:af:eb:a5:
17:cd:6f:99:96:d9:7f:64:63:c7:b9:cf:d6:3b:d0:
3a:50:fa:59:10:df:17:4b:ed:a2:0a:39:10:09:ab:
18:73:e1:ba:1c:de:60:45:0c:75:8b:64:26:24:95:
b5:ca:8e:1e:d0:e1:61:f5:09:47:0d:6d:f3:cb:5f:
91:41:ce:80:5c:18:04:81:4f:71:0d:c0:d9:f7:c1:
5d:5f:e9:67:21:ce:43:a9:f2:41:c9:26:82:56:77:
8f:c4:a8:6f:ff:4b:84:77:49:ec:92:c6:4a:80:ab:
e6:46:4c:ba:cb:97:6b:a1:9d:36:5d:30:d1:c1:21:
61:7c:bd:8e:44:1f:68:81:e4:77:78:20:27:59:1b:
a6:af:d4:55:ec:e7:9f:aa:d6:f0:56:8a:79:b9:5c:
8c:08:e8:b7:07:3a:13:63:8a:fb:0e:4f:6d:15:fa:
d9:af:ee:a8:18:99:65:32:c6:af:0f:60:14:df:44:
2f:18:35:b3:4b:b1:8f:2f:5e:6a:09:ab:1a:a2:d4:
92:b6:59:7d:b3:e8:e4:86:82:f4:54:ec:96:e3:3f:
44:f9:42:cd:5c:5f:c2:f9:5b:ce:6d:fb:b6:3d:6f:
21:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:25:E7:E3:7B:3B:15:12:48:66:B3:3D:AA:A9:BB:86:24:97:04:00
X509v3 Authority Key Identifier:
keyid:88:87:CF:6C:F5:10:2F:0F:B7:13:F4:C4:A1:BD:E3:89:48:1F:1C:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/A5A8DBE2865111F18C986E6391A30FBC.roa
sbgp-ipAddrBlock: critical
IPv6:
2407:4800:1000::/36
Signature Algorithm: sha256WithRSAEncryption
86:70:a7:88:78:2b:13:a8:2b:56:3b:d3:ba:07:4e:ba:f5:cd:
27:a8:85:03:0d:58:99:67:06:df:ef:52:d5:6b:07:5f:c7:84:
21:61:9c:67:c7:93:11:26:3a:ed:fa:77:cc:51:72:4e:2b:96:
8d:06:a8:03:75:c1:e3:14:ae:15:8d:f9:8a:b2:e3:ed:3a:d7:
2a:30:2a:c2:61:cd:89:3d:1c:38:b3:96:e7:24:ec:8b:65:a0:
b3:61:45:22:e2:d9:98:5f:38:46:96:41:88:c1:79:33:45:df:
c6:96:da:6c:40:0e:bb:e2:3b:47:a6:31:b4:2e:c4:1f:b6:de:
a9:1c:3c:ad:3a:0a:6f:8b:5f:bc:1f:bf:6e:76:f9:66:d5:98:
4b:4a:0f:07:ae:85:b7:03:62:a0:74:ae:48:e8:73:44:07:52:
53:eb:48:65:e2:d1:a2:4f:71:f3:4f:58:a2:88:ca:56:54:d7:
ee:d5:87:51:7e:d9:e4:38:8d:4c:5c:09:9b:55:33:5c:1a:df:
57:07:c9:3c:12:e5:53:6b:95:10:90:34:47:d8:5b:16:de:90:
0c:d3:7c:e3:5d:a3:2d:d5:c2:e7:38:95:d5:7d:d5:7f:d9:f4:
f7:ec:73:4c:b9:37:32:eb:d2:ac:ef:12:bc:a0:ea:48:c8:18:
f8:6f:e6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:21:32 2026 by rpki-client