
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/F490AE2431D811ECA3C4CE3EC4F9AE02.roa
File: F490AE2431D811ECA3C4CE3EC4F9AE02.roa (raw, json)
Hash identifier: y/RhPkVawSLf+7/JutT935tMP9izv7b3n4uLlLkmRJw=
Subject key identifier: E3:75:77:0F:5B:48:E8:8E:A3:A0:0D:79:6D:46:06:7F:31:F0:1A:62
Certificate issuer: /CN=A9115C2E/serialNumber=D299BCA39C993DB80D1137B999B221846ACF556B
Certificate serial: 0566
Authority key identifier: D2:99:BC:A3:9C:99:3D:B8:0D:11:37:B9:99:B2:21:84:6A:CF:55:6B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/F490AE2431D811ECA3C4CE3EC4F9AE02.roa
Signing time: Wed 04 Mar 2026 19:26:14 +0000
ROA not before: Wed 04 Mar 2026 19:26:14 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 45267
IP address blocks: 64.246.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.crl
rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 19:22:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1382 (0x566)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115C2E, serialNumber=D299BCA39C993DB80D1137B999B221846ACF556B
Validity
Not Before: Mar 4 19:26:14 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a88756-38da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:05:dd:fb:cd:03:39:72:6c:0b:0e:9a:73:67:
45:77:58:11:b2:3c:6f:4f:32:52:02:cf:36:4d:67:
dc:91:42:e8:1f:8a:ff:96:03:4d:6c:18:d8:52:4c:
13:57:ce:21:1e:44:05:38:5f:b0:e0:9a:1c:11:34:
b6:2a:5e:61:30:ea:75:aa:39:aa:a6:bd:07:ae:42:
f7:8f:ce:4f:8c:5d:3b:0f:68:c9:9f:5c:fb:36:54:
7b:7e:0b:cb:d7:8f:2a:be:e5:9e:9b:b6:3e:16:7a:
e7:36:b2:76:03:c8:e9:de:a4:76:a9:57:78:b9:df:
bd:7a:89:4d:a5:18:c6:83:22:86:6b:84:52:8b:af:
b8:88:9b:ba:b2:a6:41:c2:ce:f9:56:cd:62:4a:7a:
1c:62:c0:a4:98:cc:a8:33:b1:03:5f:89:9d:08:dd:
ef:01:44:b7:c3:96:52:97:9b:f9:22:10:23:5c:c3:
4a:68:e5:55:6b:d3:80:d2:12:45:c2:e5:7e:27:0c:
e5:a8:fe:61:97:e0:29:9b:1d:03:aa:9b:c7:00:ba:
37:57:b9:8b:b0:83:99:30:22:46:07:7b:7c:42:ad:
04:44:49:92:49:f7:2b:de:68:cd:5e:5f:6c:09:e7:
eb:41:79:eb:b1:6f:b4:6e:14:b3:1d:f3:a3:b8:21:
28:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:75:77:0F:5B:48:E8:8E:A3:A0:0D:79:6D:46:06:7F:31:F0:1A:62
X509v3 Authority Key Identifier:
keyid:D2:99:BC:A3:9C:99:3D:B8:0D:11:37:B9:99:B2:21:84:6A:CF:55:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/F490AE2431D811ECA3C4CE3EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
64.246.80.0/20
Signature Algorithm: sha256WithRSAEncryption
94:06:26:e2:ed:45:f6:e2:50:65:ee:49:81:e1:a2:0c:18:aa:
3e:ba:0e:01:c2:f9:35:39:5b:b2:28:52:c5:ce:ea:02:07:20:
7f:fa:f6:05:fd:fa:34:55:01:d3:d7:4b:5a:a3:af:ca:69:58:
d4:5e:82:f5:14:7c:12:6d:43:14:8a:e6:d4:84:b6:1d:dc:f9:
36:94:19:ad:4e:98:8a:5b:60:6c:f6:8a:f3:70:5a:96:45:72:
e9:d2:37:d4:da:13:cd:1b:a4:92:7b:0f:00:65:4f:6f:b3:00:
47:1c:1a:8e:74:b0:9b:63:10:75:df:0f:1e:96:b7:ca:a1:a2:
23:7c:c1:9f:fd:a3:a6:db:7c:5c:66:41:69:14:de:a7:8f:9f:
30:f8:95:5c:8a:aa:ee:15:c6:e6:e4:14:f4:ab:48:92:36:e8:
60:f8:18:f5:5d:13:fb:27:67:77:5a:f6:b1:1c:b1:0e:57:f2:
7f:b4:d3:b1:99:07:5a:4c:9d:5d:ca:b8:81:8b:2d:12:75:73:
57:c4:b7:fb:06:a5:51:e3:0f:e9:26:7e:8f:e7:6d:20:b2:71:
2c:aa:39:a4:f7:1b:c0:f8:93:a0:e6:8b:6e:ef:52:97:b4:aa:
db:f6:ca:22:cf:70:6f:1e:1b:ff:61:61:17:d7:01:14:96:e6:
2a:6d:19:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:06:07 2026 by rpki-client