
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/B2E4A482E4D611EDB15EDE36C4F9AE02.roa
File: B2E4A482E4D611EDB15EDE36C4F9AE02.roa (raw, json)
Hash identifier: VFVTymwrp8V+E6BLs3C4Cm25rAuqTUZ0SRrvUpgChQk=
Subject key identifier: 23:3B:37:F5:96:44:38:CB:9E:78:57:89:AF:1E:49:4E:73:A9:1D:B5
Certificate issuer: /CN=A919C47E/serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934
Certificate serial: 140A
Authority key identifier: 89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/B2E4A482E4D611EDB15EDE36C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:59:59 +0000
ROA not before: Sat 04 Oct 2025 17:15:59 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 138938
IP address blocks: 2403:b4c0:4000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl
rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5130 (0x140a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C47E, serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934
Validity
Not Before: Oct 4 17:15:59 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4708f-bb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:06:00:27:63:dd:e0:c0:cf:56:9e:ab:c9:
0b:77:39:cc:3f:33:34:25:b0:73:ee:e3:8b:26:3e:
d0:64:27:44:d4:8f:32:fd:e4:86:26:4f:d7:b5:70:
53:cc:9a:b4:c1:7b:9a:f1:4c:22:b5:87:0f:bf:3a:
32:62:c1:9d:3b:5c:88:87:ec:2b:51:66:64:be:af:
71:41:d6:a1:55:15:e1:0f:fc:25:9a:48:98:2e:fc:
fa:9a:87:4c:cf:eb:69:01:5b:d5:22:cf:ad:8f:82:
a5:d5:49:bf:83:e3:93:60:5f:98:ac:a2:96:dc:b1:
f0:b5:a3:88:29:8f:2a:21:21:15:90:c2:e4:c1:23:
5d:a1:fd:ed:ea:28:2b:0f:39:e1:a5:23:6c:b5:b2:
5f:ef:90:96:03:34:ef:e6:bb:ed:23:43:b5:92:d7:
eb:2e:11:d9:a7:80:e7:4c:5e:6f:d4:4a:32:b9:d2:
c8:6a:af:fe:e5:11:df:72:87:75:52:49:2c:c9:3a:
f5:b7:81:af:6d:2e:be:b5:46:b6:9f:20:77:f5:cb:
7d:b1:34:79:f3:61:a4:65:99:3a:fb:35:5a:62:d6:
94:90:fc:55:24:16:c4:ed:03:65:d6:e3:4f:8f:3a:
80:46:26:d8:72:1c:58:52:32:ee:c4:5e:8b:ab:1f:
f1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3B:37:F5:96:44:38:CB:9E:78:57:89:AF:1E:49:4E:73:A9:1D:B5
X509v3 Authority Key Identifier:
keyid:89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/B2E4A482E4D611EDB15EDE36C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2403:b4c0:4000::/36
Signature Algorithm: sha256WithRSAEncryption
60:7a:6b:82:50:80:fe:d6:cb:07:1e:40:3b:2e:2e:99:b6:0e:
a7:04:0d:72:6b:21:76:42:4e:d4:38:48:f9:91:2a:f7:3d:60:
24:56:dc:e8:b8:4a:b5:53:41:ad:ab:12:0d:28:f5:11:00:39:
b5:e1:db:10:38:9b:57:c4:e5:42:d8:cc:61:04:32:ea:f4:01:
6c:95:11:95:5f:25:6b:7b:e2:39:fe:c8:5b:72:c7:b0:4b:21:
0d:19:1e:31:b4:20:68:b9:f8:c2:37:7a:53:ce:23:7d:46:8c:
38:f8:f1:5a:4d:c7:dc:2d:41:66:bc:9f:68:f3:9f:46:ae:1b:
44:4f:f7:2b:9c:18:41:5a:fa:6a:d8:6a:53:84:e9:d6:4f:71:
f5:8b:cd:7f:63:73:2a:6c:d2:2f:56:c8:ae:ef:ec:89:ed:9f:
a0:30:76:e9:21:03:be:54:d8:3d:8f:86:40:40:4b:71:7e:62:
8f:6f:c9:23:d5:d4:fb:57:d1:45:ab:eb:1b:92:c9:ac:59:b7:
e3:f0:cb:51:7a:30:39:60:9c:42:5e:ed:57:94:37:e1:58:87:
b9:5c:8c:57:e2:73:ff:e1:99:9a:90:13:88:93:23:b8:35:d3:
87:c4:bc:c4:04:ec:70:d1:7b:3b:7f:54:d1:fc:84:fa:15:61:
45:a5:9e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:12 2026 by rpki-client