
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/84B1619E8C4511F1A27F4BE95411F970.roa
File: 84B1619E8C4511F1A27F4BE95411F970.roa (raw, json)
Hash identifier: LCE4wuv/NAVwLN79rU8e9m63wNL34AoQs4Gj2EvZjig=
Subject key identifier: 68:82:6C:A6:D0:18:A4:E1:E7:63:9F:30:32:CA:D9:30:05:EE:4A:0E
Certificate issuer: /CN=A911BDA9/serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA
Certificate serial: 0186
Authority key identifier: B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/84B1619E8C4511F1A27F4BE95411F970.roa
Signing time: Thu 30 Jul 2026 18:36:03 +0000
ROA not before: Thu 30 Jul 2026 18:36:03 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 17644
IP address blocks: 2001:df4:13c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl
rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 01 Sep 2026 04:23:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390 (0x186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BDA9, serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA
Validity
Not Before: Jul 30 18:36:03 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a6b9993-7cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:14:1f:59:40:f8:ed:f9:04:88:f1:b2:63:5b:
a6:91:15:32:15:d9:9f:24:40:3f:6b:77:29:e7:8d:
de:f0:54:8c:ac:31:47:ac:98:90:14:d4:4b:27:3f:
d4:e0:c7:89:f6:5b:39:86:3f:18:f8:23:76:2a:23:
00:f7:12:17:31:e7:2b:18:ff:2e:ad:5a:b9:71:79:
a0:c7:8e:4d:d1:a0:c0:f6:c5:10:57:24:2c:de:ed:
f3:37:22:c2:cd:39:ae:f8:a2:15:0a:68:3f:b6:2e:
ae:cb:b1:be:d3:af:c4:48:f4:3c:07:ac:ee:50:20:
39:73:2a:4c:bc:bb:1d:b3:0c:c8:af:e0:40:e6:cd:
3c:e8:e6:07:a7:c2:09:ce:de:38:dc:98:37:35:41:
51:90:da:e6:26:61:0a:53:dd:4f:0b:26:71:7d:09:
3c:50:02:f7:68:e4:39:eb:67:4b:d2:37:f4:5c:de:
df:f3:62:e5:72:34:c8:f1:9b:25:21:e1:75:fb:6c:
3d:cc:15:62:b5:e1:f2:49:b4:c5:c2:90:b4:4b:ba:
ce:fa:ea:57:41:ac:51:f7:69:1b:3c:99:79:86:79:
11:d1:75:99:1c:49:1f:ce:91:f4:77:ed:2c:52:36:
60:f0:bb:11:d7:90:21:09:73:20:9c:b5:f7:6b:20:
a8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:82:6C:A6:D0:18:A4:E1:E7:63:9F:30:32:CA:D9:30:05:EE:4A:0E
X509v3 Authority Key Identifier:
keyid:B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/84B1619E8C4511F1A27F4BE95411F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:13c1::/48
Signature Algorithm: sha256WithRSAEncryption
bb:90:fc:55:f0:42:a1:f8:15:8b:d7:d8:a3:3b:49:8e:cc:b0:
59:42:b7:32:b4:fc:56:c7:b1:45:63:8d:9b:2b:bb:24:b6:cf:
6d:d6:ec:73:fe:b3:1f:87:90:df:aa:71:78:a3:32:21:9f:af:
2c:9e:7d:c1:eb:e6:7e:ab:7b:21:0c:d4:66:b5:fe:1b:65:46:
cd:7e:19:8c:c7:ee:6d:ee:6b:b2:97:10:eb:aa:8a:d8:d2:35:
44:36:2b:19:d6:6b:51:55:81:04:63:d8:a5:21:e0:a5:ad:19:
22:18:f5:3b:41:c3:9b:ac:9d:35:84:7a:7f:27:f6:77:f3:74:
61:f6:49:f8:a6:fc:65:00:eb:0b:ef:ab:8d:0e:a4:61:13:25:
e0:fb:4d:91:eb:84:c8:0f:8a:3b:89:b0:dc:6c:e8:01:0f:b7:
48:af:d5:fd:9f:d7:55:60:b9:b7:e0:be:3e:92:da:1d:14:1f:
21:63:35:a4:15:99:b7:af:17:8d:87:9b:b7:85:82:c9:39:55:
94:36:d2:e3:63:a2:dd:e8:0c:c6:6f:51:c2:ad:86:85:c4:b6:
5b:68:7e:92:35:cf:32:a2:42:7f:06:b2:2b:97:b5:45:97:28:
e1:44:8a:c0:28:2d:3d:15:66:a4:df:26:c3:d7:41:a4:9f:50:
26:f9:8a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:28:05 2026 by rpki-client