
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/C5D7EA08D5CF11F0A0EA7C48C4F9AE02.roa
File: C5D7EA08D5CF11F0A0EA7C48C4F9AE02.roa (raw, json)
Hash identifier: qzSxvuujDmL239/Gh/JLB+28QvjA0lGPnBH2BpP+kM4=
Subject key identifier: 61:03:21:7A:7A:72:FF:EA:DE:C3:67:C4:D3:03:5A:D3:8D:EE:08:B0
Certificate issuer: /CN=A9158682/serialNumber=23E1E4259FABCD49FD58CCD46CF200CD121E2EAC
Certificate serial: 2D
Authority key identifier: 23:E1:E4:25:9F:AB:CD:49:FD:58:CC:D4:6C:F2:00:CD:12:1E:2E:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/C5D7EA08D5CF11F0A0EA7C48C4F9AE02.roa
Signing time: Sun 01 Mar 2026 05:54:01 +0000
ROA not before: Wed 10 Dec 2025 13:54:40 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 15932
IP address blocks: 2403:d300::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl
rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:09:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158682, serialNumber=23E1E4259FABCD49FD58CCD46CF200CD121E2EAC
Validity
Not Before: Dec 10 13:54:40 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3d479-efec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f0:f8:53:71:bb:1a:66:54:3a:25:94:26:90:
3e:c9:f7:79:93:39:c1:aa:13:9e:2d:fb:4b:8e:9d:
29:76:24:2c:f4:0c:03:cc:a5:8a:03:a8:87:fa:fb:
87:e5:c6:3d:c6:47:22:41:0f:7a:0a:a1:ae:16:11:
ba:04:ea:44:6f:d6:bc:e0:5c:1b:f8:f4:36:09:1e:
6c:8b:7b:ca:d1:d5:19:b0:f1:f5:43:fc:2d:ad:73:
ef:9b:8c:64:0e:99:26:6b:47:75:20:92:4e:18:f0:
ec:11:75:1d:ab:a2:59:dc:f7:cd:3f:b3:65:1c:88:
e0:d2:1b:46:17:e9:3d:91:35:95:9c:53:e7:c9:cf:
f6:be:b2:66:b2:f6:28:22:4f:5e:f1:69:f3:b8:ef:
1c:fd:80:c0:6e:00:b3:87:22:3d:76:e2:83:09:c2:
cd:59:bd:b0:7e:c9:a9:3a:f8:c6:d8:29:92:ed:df:
a7:ab:4f:0f:63:83:93:c7:63:11:c5:b5:b1:e4:d3:
ca:8c:27:96:86:0f:fa:2f:18:f9:f8:59:66:1f:4b:
18:07:09:a2:ca:90:1b:21:e5:14:b2:cf:1c:0d:2e:
79:28:43:32:69:23:75:bc:21:76:ca:5c:d5:3d:3c:
82:ca:0f:04:24:55:5a:8f:9a:ea:7f:3d:78:63:54:
51:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:03:21:7A:7A:72:FF:EA:DE:C3:67:C4:D3:03:5A:D3:8D:EE:08:B0
X509v3 Authority Key Identifier:
keyid:23:E1:E4:25:9F:AB:CD:49:FD:58:CC:D4:6C:F2:00:CD:12:1E:2E:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/C5D7EA08D5CF11F0A0EA7C48C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2403:d300::/32
Signature Algorithm: sha256WithRSAEncryption
5d:10:4c:e9:67:7e:c7:14:46:6f:26:c0:9c:73:b7:62:4f:bc:
f9:e2:ef:e2:85:76:1f:9a:ed:07:b6:25:66:0e:3d:cb:0c:04:
cf:ba:19:ab:35:78:0b:07:81:a3:b0:06:27:68:7b:5f:45:21:
4d:05:c4:06:66:40:11:50:49:08:25:06:dc:0a:49:62:6d:58:
1e:dd:b2:18:0a:e6:37:ec:29:86:e8:5b:24:13:62:48:b6:eb:
5e:b8:c6:5a:02:82:3f:b7:b4:d3:c9:ef:ed:ed:eb:1e:cc:a9:
8c:8d:de:68:bc:a4:e0:a0:20:48:98:09:fe:fc:93:55:90:d2:
f4:72:24:58:ee:cb:f2:52:25:4f:79:f5:10:c5:f8:34:97:5a:
5c:83:a9:9b:dc:6a:84:f4:e8:50:b0:52:8b:ad:67:90:c7:77:
ac:18:90:9b:c3:e3:b2:f6:ff:1d:43:b4:15:4c:f8:6a:c3:38:
f6:d0:29:1d:f3:c6:a5:81:06:c8:48:87:54:a4:1e:ad:ee:02:
bc:ec:85:4d:a8:5f:c7:ec:73:a1:7b:b9:49:54:1d:b1:a1:40:
fa:6f:72:a3:91:78:30:73:1e:64:75:02:fd:80:91:c6:68:ac:
9d:09:21:e8:78:78:03:d1:1a:ce:32:9d:82:18:40:89:bf:10:
cf:93:41:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:29:03 2026 by rpki-client