
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/C5D7EA08D5CF11F0A0EA7C48C4F9AE02.roa
File: C5D7EA08D5CF11F0A0EA7C48C4F9AE02.roa (raw, json)
Hash identifier: FWaWZRn2VagzBM02EknVAFE8HgmoQjfzWkVbJA60FRs=
Subject key identifier: 4E:CA:93:23:21:16:B1:9F:99:FC:15:22:D1:1F:86:D5:C6:E3:8A:3C
Certificate issuer: /CN=A9158682/serialNumber=23E1E4259FABCD49FD58CCD46CF200CD121E2EAC
Certificate serial: 5E
Authority key identifier: 23:E1:E4:25:9F:AB:CD:49:FD:58:CC:D4:6C:F2:00:CD:12:1E:2E:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/C5D7EA08D5CF11F0A0EA7C48C4F9AE02.roa
Signing time: Fri 29 May 2026 08:40:44 +0000
ROA not before: Fri 29 May 2026 08:40:44 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 15932
IP address blocks: 2403:d300::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl
rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94 (0x5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158682, serialNumber=23E1E4259FABCD49FD58CCD46CF200CD121E2EAC
Validity
Not Before: May 29 08:40:44 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a19510c-509f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3c:52:b5:2f:4b:97:25:37:6f:ba:6b:ca:89:
f9:80:69:5c:61:75:6c:fc:99:8e:f2:2c:d6:de:67:
69:b8:44:23:62:0f:38:fb:7d:fa:ab:c6:99:33:22:
a0:ef:e5:b0:f7:f2:16:31:25:f6:c6:be:8f:78:86:
03:43:a7:c4:ec:d9:99:a5:f3:5f:07:6c:b6:57:f8:
06:1d:0b:83:a4:bd:1b:72:34:51:2d:fe:6d:2c:a0:
ee:73:9e:b9:1f:2f:35:15:99:35:bb:c6:70:ea:67:
82:f7:e3:83:92:e7:f3:eb:91:1b:4d:3e:ef:9c:e0:
a8:c1:58:33:66:47:d1:45:c2:99:fc:13:48:97:11:
ca:5b:8d:10:b8:25:e7:98:28:6a:76:6f:9a:e2:7b:
c8:52:72:51:cc:a0:a9:f9:09:70:e2:99:9d:56:97:
42:d0:c1:83:33:b3:39:1d:be:56:83:14:f7:a7:1f:
bc:a4:cc:0b:c0:24:76:57:94:61:94:8f:7c:db:71:
9f:61:d9:cb:b0:0d:27:9a:08:35:fd:ec:5b:a8:0f:
fa:52:5a:b6:d3:5f:ef:8b:9b:21:78:d5:09:ee:98:
1c:7c:1f:03:86:65:13:c3:f0:e6:0b:5a:40:ec:d4:
49:0b:3c:df:60:2a:d7:ca:18:d6:7e:0e:2a:36:81:
46:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CA:93:23:21:16:B1:9F:99:FC:15:22:D1:1F:86:D5:C6:E3:8A:3C
X509v3 Authority Key Identifier:
keyid:23:E1:E4:25:9F:AB:CD:49:FD:58:CC:D4:6C:F2:00:CD:12:1E:2E:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/C5D7EA08D5CF11F0A0EA7C48C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2403:d300::/32
Signature Algorithm: sha256WithRSAEncryption
4b:1f:0e:fa:f4:d9:2c:ba:67:90:bb:69:57:60:a5:28:62:cf:
10:ba:a0:96:3a:94:d7:71:85:6a:c5:92:81:cf:9e:fc:bd:9c:
36:f0:83:8c:a6:c3:86:0d:2e:bf:23:52:7e:c9:e8:cd:bc:11:
5e:a8:e8:35:d9:42:b4:1d:2a:56:c6:31:ea:4a:4b:27:ff:7b:
ad:e9:89:bf:98:87:68:e5:f7:8f:eb:ab:33:32:dd:d5:86:c3:
7c:f3:f6:d0:f1:a0:5c:9b:10:d4:39:be:dd:af:05:69:32:dc:
d0:d7:79:f2:04:ed:ab:e9:2b:19:b2:9a:94:2f:eb:28:f0:71:
18:9d:cf:7a:e0:12:fd:26:c1:d7:b4:4e:90:95:6f:d0:d0:a5:
f2:cd:fe:b7:fc:68:ce:1b:aa:ab:d9:d2:66:f5:b8:74:e4:71:
9d:41:f1:d9:0c:5b:a5:18:77:5b:3b:70:4b:3d:2f:92:52:8c:
49:e3:e7:dd:2c:2f:49:e5:74:f3:76:25:b4:b7:63:dd:be:26:
8d:c6:ca:ed:a7:37:d7:c7:27:1f:70:ef:b9:89:73:a9:88:c3:
b3:4f:12:43:23:ba:67:a7:d3:e5:39:a4:1a:14:dc:33:c7:35:
27:f9:a6:e5:28:20:1f:be:22:62:5f:33:24:c4:bd:99:3e:6a:
07:3e:45:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:16:17 2026 by rpki-client