
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/E1ADA4BC062B11F08449516EC4F9AE02.roa
File: E1ADA4BC062B11F08449516EC4F9AE02.roa (raw, json)
Hash identifier: ABbCRm4169Zmlom/mbAM7SPDMmE+tdeoPLo48LZrXpg=
Subject key identifier: 2A:B7:B4:9B:1C:0A:C4:2A:AB:2F:D1:AB:CC:9C:21:1B:C1:E5:C3:B9
Certificate issuer: /CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19
Certificate serial: 1707
Authority key identifier: 88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/E1ADA4BC062B11F08449516EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:25:27 +0000
ROA not before: Tue 30 Sep 2025 17:15:11 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 134963
IP address blocks: 2401:8680:4000::/40 maxlen: 48
2401:8680:4100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl
rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5895 (0x1707)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187465, serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19
Validity
Not Before: Sep 30 17:15:11 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a46877-33c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:42:85:01:1e:92:72:8a:59:ec:ad:ce:c9:3a:
24:ec:9f:08:ec:c4:41:d5:87:5d:d0:82:88:b7:57:
70:a6:e0:82:84:9f:6a:f4:5b:85:8c:c9:cb:ad:71:
0f:54:bd:57:c0:ca:82:51:c8:06:86:3e:23:b5:39:
61:7d:83:39:06:da:6c:38:5f:8e:ec:7c:d0:a1:0e:
dd:9c:05:17:49:c6:a2:ad:7c:d9:3d:d4:0e:66:34:
b4:2f:3f:5a:51:6b:69:16:d1:38:4c:dd:4b:d2:67:
fe:33:bd:e4:b7:7b:e4:0f:93:86:6b:9e:3d:0d:95:
c8:a4:b9:15:48:2d:78:46:a6:10:c2:02:cd:a9:cd:
43:a1:62:f4:f2:4b:4d:3a:8a:70:35:fb:72:91:9b:
b0:bb:f1:cb:81:73:a8:8e:26:29:06:6b:08:a5:28:
04:79:d8:c8:b6:aa:0b:dd:52:3a:24:99:17:e7:b8:
1c:d9:c1:a7:98:19:3d:64:d0:e4:dc:33:2d:df:60:
cd:ed:f7:d3:17:ac:41:58:7e:32:05:59:b9:b0:38:
99:2e:87:94:8f:be:8e:95:b4:43:28:6f:95:4b:52:
4a:f7:f5:bb:5a:4c:31:65:70:95:38:60:87:2c:58:
74:62:e7:4e:f1:85:c4:6e:6f:6f:49:2a:b0:7b:f3:
c8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B7:B4:9B:1C:0A:C4:2A:AB:2F:D1:AB:CC:9C:21:1B:C1:E5:C3:B9
X509v3 Authority Key Identifier:
keyid:88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/E1ADA4BC062B11F08449516EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:8680:4000::/39
Signature Algorithm: sha256WithRSAEncryption
44:98:0f:4d:7f:f4:51:cf:a0:bb:05:37:f7:a4:12:e6:6a:44:
da:1e:16:be:d3:d5:19:39:8a:18:49:50:40:19:96:08:2a:9d:
bf:25:a5:ee:5d:4d:67:3a:df:81:ef:d9:94:24:5d:b5:5b:12:
2e:8b:84:68:02:b3:02:e8:98:b1:10:2a:00:9d:b6:33:a0:3d:
9e:c0:91:5c:98:4e:fd:b3:ff:f2:43:6b:35:29:12:fa:15:be:
46:fe:f7:a5:88:43:8c:f8:7b:b2:9d:9c:e0:12:bb:94:a8:e9:
b6:64:b7:d5:0d:7e:af:42:a0:8d:47:8d:77:da:9c:69:01:b1:
b8:30:47:d4:f6:dd:b0:51:ce:44:7e:e9:5c:52:e7:27:f4:77:
4c:45:08:49:1d:35:cb:40:a9:99:ea:72:47:81:6f:bf:15:34:
59:4a:40:b1:31:77:5e:84:39:58:21:e1:17:fd:36:8e:28:b8:
2e:d1:42:20:e6:39:99:f7:90:e0:91:cd:9b:1a:66:54:59:e0:
19:cf:50:d0:ad:32:71:40:77:b9:f4:d0:71:64:a0:05:40:90:
fd:8c:8f:e5:0f:b7:34:95:8c:aa:39:60:12:98:fa:d1:1a:e0:
cb:fe:25:bd:72:6d:35:2b:24:44:f4:81:a0:c6:43:2c:23:2d:
4b:e6:b6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:11:13 2026 by rpki-client