
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/AF14F7EC516411F08E03714FC4F9AE02.roa
File: AF14F7EC516411F08E03714FC4F9AE02.roa (raw, json)
Hash identifier: 388AG09rRUDKvKhyNmxbF15VLGsqHkKaZsreBoM4fr8=
Subject key identifier: 7C:02:F4:EC:00:F3:55:88:23:46:DB:4C:C0:12:F6:C9:FF:AE:4C:8E
Certificate issuer: /CN=A919C47E/serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934
Certificate serial: 140B
Authority key identifier: 89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/AF14F7EC516411F08E03714FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:00:00 +0000
ROA not before: Sat 04 Oct 2025 17:15:59 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 139074
IP address blocks: 2403:b4c0:ae00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl
rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5131 (0x140b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C47E, serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934
Validity
Not Before: Oct 4 17:15:59 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a47090-199a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:18:fd:3a:4a:cb:0b:d2:89:97:53:7a:bb:5e:
66:3d:38:3b:82:96:b3:b8:46:d3:18:32:69:c2:5e:
8f:2a:60:87:58:7d:ab:7c:46:cd:f5:25:ef:f7:96:
e0:ab:e4:0b:19:a2:d8:39:71:79:07:b0:04:3f:c0:
b2:bc:7c:ea:66:95:50:11:b2:00:d2:a3:77:b5:fa:
5c:e8:0c:55:42:48:1c:d9:18:c1:a1:bc:5d:32:fa:
89:c2:5c:56:5c:01:0b:1b:2a:db:4e:20:1d:07:48:
be:a1:a6:f3:9f:48:72:51:dc:5e:f3:1c:4e:d1:f9:
e6:0a:d4:d3:4b:78:d3:84:7d:d1:11:bb:8e:db:30:
6b:99:09:c9:14:7a:f4:bd:0a:19:b5:7c:f1:e3:c0:
f5:bd:2b:b4:d4:4a:0d:31:67:cd:9f:47:e3:60:0a:
47:ae:02:8c:b9:91:a6:2c:33:5a:14:8c:28:17:fb:
0c:29:d1:19:5f:7e:0a:26:9f:e3:3b:6c:fd:ac:e0:
cf:11:a4:f3:b5:cc:fe:ed:8f:b9:23:bb:16:70:11:
01:be:75:e3:56:11:79:6e:c9:51:c5:58:19:e5:3e:
1b:7b:5f:58:41:78:fc:cc:dd:7d:d5:11:fa:7b:08:
50:75:c6:96:16:02:0a:eb:be:c6:9e:0e:5e:a1:22:
82:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:02:F4:EC:00:F3:55:88:23:46:DB:4C:C0:12:F6:C9:FF:AE:4C:8E
X509v3 Authority Key Identifier:
keyid:89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/AF14F7EC516411F08E03714FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2403:b4c0:ae00::/40
Signature Algorithm: sha256WithRSAEncryption
70:62:f9:a1:1c:71:5a:69:3a:3a:c9:3c:f3:51:70:e9:fe:84:
ea:38:60:1e:4a:1a:d2:e2:61:3c:db:ed:ef:07:6a:7d:60:67:
8d:86:ce:d4:15:8c:22:3d:af:a8:e0:b0:76:7a:80:b1:00:6e:
a9:d5:51:92:a7:08:95:94:fa:45:88:4b:7d:36:02:b9:7c:99:
25:9a:91:0a:ec:c0:16:bb:2c:7b:a1:a5:ae:4d:00:01:07:7d:
f2:5b:cb:06:c7:4d:0e:51:55:00:ad:1f:35:df:49:60:97:e4:
ee:81:aa:2d:ef:f9:f7:b1:42:73:29:07:cc:f8:ea:c8:38:84:
b4:dc:c7:be:07:8b:83:c5:c7:d8:00:47:66:1e:a6:a7:22:bd:
4e:66:a7:c7:e8:aa:4a:e3:12:da:20:f6:aa:5e:99:bf:af:40:
b0:06:55:2a:8e:2d:b0:58:a2:49:81:74:4d:2c:8d:78:f4:c6:
68:68:c7:8e:8d:9a:1a:41:e2:2f:15:d2:19:e9:ca:68:5b:b6:
2a:cd:8a:84:2b:b2:be:ec:12:85:6d:e8:64:98:2b:3e:6a:30:
a5:c1:dc:d3:3b:b7:9c:ae:99:7d:a5:19:a7:b4:de:8b:5c:6d:
ed:da:4d:d7:47:bb:93:55:93:17:69:38:77:20:7a:12:72:9f:
6f:f0:cb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:20 2026 by rpki-client