
$ rpki-client -vvf rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/1CFC5814474611F087FA4A1DC4F9AE02.roa
File: 1CFC5814474611F087FA4A1DC4F9AE02.roa (raw, json)
Hash identifier: L+RGI8DiExoZY0mv12iDdF9NzZPJb1mnMDdUtqo1o7c=
Subject key identifier: 74:5C:BF:16:4D:3E:13:EA:26:DD:AB:33:AA:81:D7:FA:0F:C9:F3:69
Certificate issuer: /CN=A919337F/serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912
Certificate serial: 0D53
Authority key identifier: 33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/1CFC5814474611F087FA4A1DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:34:33 +0000
ROA not before: Mon 22 Sep 2025 18:38:47 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 133429
IP address blocks: 2401:31c0:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl
rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3411 (0xd53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919337F, serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912
Validity
Not Before: Sep 22 18:38:47 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a45c89-6500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:84:6a:db:be:9b:50:55:85:97:f7:cd:e7:a1:
e1:10:91:6f:ed:60:3d:e7:79:b0:52:49:35:f4:8f:
93:bf:9b:cc:a3:12:07:11:1c:dd:fe:a7:6a:73:7f:
d3:28:3b:16:83:e2:1f:9e:55:0c:2a:a8:17:c4:a6:
97:53:cc:3b:5f:3c:13:cd:c2:fc:f9:09:74:5d:a9:
49:44:a8:9d:4f:1f:8a:ec:44:07:1e:33:d8:1d:86:
2f:c6:ba:5e:bf:63:83:0f:a6:4f:12:22:a1:fc:64:
02:8c:73:fa:b7:7c:10:c0:e3:7b:70:c6:8b:fa:7b:
9d:05:58:b3:19:00:11:b8:23:9c:bc:fe:f1:c9:fe:
76:a9:1e:94:ae:a0:6f:d6:71:63:ed:fd:00:5a:0e:
ee:60:f1:4a:21:19:05:08:4a:ee:2e:62:af:64:91:
65:e9:c9:f2:e1:83:7f:c8:b6:84:b1:ae:7e:5b:e1:
f8:ac:af:3f:1c:6d:69:98:9d:29:20:1f:f1:97:07:
d5:e9:61:c8:22:bc:29:8f:f5:4f:8b:cb:b7:bc:22:
b4:c6:50:7d:91:34:ef:83:e7:06:31:40:83:d7:04:
76:fc:d6:65:df:76:9b:82:c8:58:86:fa:f8:1b:12:
50:79:d8:70:49:89:a0:b8:ec:8c:70:b6:64:67:fb:
4c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5C:BF:16:4D:3E:13:EA:26:DD:AB:33:AA:81:D7:FA:0F:C9:F3:69
X509v3 Authority Key Identifier:
keyid:33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/1CFC5814474611F087FA4A1DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:31c0:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
81:d6:43:c5:1b:26:cd:57:0b:36:54:bc:a9:c2:aa:f5:00:96:
18:33:12:d9:ef:88:69:74:fb:9c:78:8b:ec:51:0f:b2:be:0d:
1c:11:56:60:3a:ec:e8:42:c9:a4:a5:2c:0f:e9:cc:0c:50:92:
47:21:58:5e:62:8c:c8:ed:8a:18:43:5a:28:fc:e3:30:b0:83:
cd:a0:24:94:b3:9a:29:6e:68:64:19:e5:2b:b4:33:78:e5:0b:
c9:fa:8d:b6:e3:2a:a4:e9:ef:9d:70:96:8b:6c:a7:d0:69:49:
98:14:5c:8a:cc:de:e6:a2:a1:20:c0:e9:d1:33:b4:31:e1:ed:
66:15:9c:86:20:e3:ff:57:3f:dc:4f:8a:b2:d0:fc:b2:87:04:
62:d8:1e:56:ef:3c:72:33:43:1b:1c:fc:cc:f3:4d:f0:62:43:
71:15:2c:28:04:41:2d:23:2c:35:b4:6c:43:a0:dc:09:7b:3b:
ce:1d:26:4a:4e:a6:f6:f9:4d:cc:62:17:31:72:8b:29:84:32:
bf:b5:c2:2b:8d:ce:fd:98:ff:c8:01:0b:7b:b0:67:9e:af:b5:
98:eb:d6:b0:e9:5b:08:4c:6d:9d:69:96:c0:6e:ad:01:0c:95:
76:f7:0c:6c:3f:7d:60:c8:71:93:a5:e9:6c:99:e0:3d:0e:b8:
c9:3e:84:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:19 2026 by rpki-client