
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/FB405D86900E11EAA43BB21FC4F9AE02.roa
File: FB405D86900E11EAA43BB21FC4F9AE02.roa (raw, json)
Hash identifier: qMpPh7x99PhZagH9wPyBkNioKW8FOSzLaiUjeJtK1aA=
Subject key identifier: E7:B9:95:5E:D7:50:A4:27:D9:2B:27:7B:EA:DD:9F:4C:B9:EA:DB:55
Certificate issuer: /CN=A914C33A/serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC
Certificate serial: 2B98
Authority key identifier: 9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/FB405D86900E11EAA43BB21FC4F9AE02.roa
Signing time: Sat 10 Oct 2026 16:22:15 +0000
ROA not before: Sat 10 Oct 2026 16:22:15 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 135053
IP address blocks: 2406:e401::/32 maxlen: 56
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl
rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 15:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11160 (0x2b98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C33A, serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC
Validity
Not Before: Oct 10 16:22:15 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aca6637-ad9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3d:b0:df:5f:9a:3f:3f:47:3c:aa:8e:0e:9d:
2e:ad:2f:f8:00:68:31:c5:4d:7c:82:69:1d:75:b9:
ad:fe:d9:a1:aa:0f:5c:c4:21:cf:e0:90:2d:93:28:
38:d8:91:c3:a1:d2:4d:58:e9:19:85:c8:29:de:48:
b7:b1:58:3e:9f:57:2f:07:47:fa:a2:83:36:d5:c0:
c3:d5:88:55:f9:f4:8a:46:b8:af:70:9e:54:6f:77:
da:9a:9b:cd:8b:73:a1:c7:44:cc:15:40:ae:75:47:
42:9b:1c:df:c9:c6:9b:60:c1:37:24:f8:e6:ac:d6:
3b:ed:35:0a:5c:00:c6:ec:19:eb:49:30:23:23:d1:
44:96:5a:41:79:2f:3d:fb:e2:84:e4:98:e8:f7:8d:
6d:7c:0a:ad:4f:1d:1c:a2:c8:99:03:a2:2b:e8:31:
eb:7d:3c:a2:a8:4f:62:6b:20:eb:9f:f5:31:0a:25:
62:be:f5:d8:7b:f4:fa:51:44:dc:06:ee:12:6f:02:
42:2a:45:52:26:70:08:83:e6:f5:68:19:e5:59:a7:
f2:fa:e8:2a:79:66:d9:84:88:2c:ed:38:e3:6c:e9:
89:5e:9b:01:71:11:71:26:a1:cc:6c:dd:89:c3:55:
5a:90:97:98:c0:0c:7f:e0:34:cc:90:3f:98:50:be:
7c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B9:95:5E:D7:50:A4:27:D9:2B:27:7B:EA:DD:9F:4C:B9:EA:DB:55
X509v3 Authority Key Identifier:
keyid:9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/FB405D86900E11EAA43BB21FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:e401::/32
Signature Algorithm: sha256WithRSAEncryption
83:2c:90:cc:4a:28:c2:33:3c:08:2c:48:e7:51:fc:34:20:7f:
54:06:04:c0:17:0d:39:be:31:cc:a4:f6:20:d7:e0:ee:a5:62:
d4:7c:d7:16:cd:8f:d8:1e:b8:e9:f1:8a:54:50:0e:88:31:e5:
06:97:e9:52:08:0c:3c:09:42:e7:7f:65:5f:15:e1:87:0b:61:
c6:2c:39:6d:19:fa:0a:80:cf:7e:34:c4:ce:bb:2d:75:a9:1e:
eb:fc:b7:cc:aa:7f:84:2a:7c:78:2c:10:d7:32:61:11:37:d6:
8e:8d:a9:df:b5:56:70:b1:a4:6d:ce:4a:0c:67:0c:8f:b2:08:
4b:a7:b0:bc:2b:17:81:b3:35:8f:e1:af:6e:a6:cb:90:de:53:
4a:2e:bc:c1:b8:e6:eb:c1:d9:24:db:5e:81:c4:ca:61:a8:97:
c1:35:e7:1a:ef:cc:42:47:b0:2e:04:66:5b:9e:7d:ea:0e:f3:
1b:4b:ed:28:36:30:26:08:a4:40:04:6f:de:e0:41:42:98:8d:
1e:90:ea:04:dc:c0:f7:22:bc:b6:f1:6b:77:cc:1f:10:cd:e8:
72:11:d7:bd:1f:57:d1:33:a0:96:67:a3:67:9c:04:4a:7f:a6:
fb:15:69:6b:82:75:99:e9:6d:29:10:e5:06:5e:4d:1b:d4:18:
08:0f:aa:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:33:07 2026 by rpki-client