
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/3B20943EBF4C11F19F9374173411F970.roa
File: 3B20943EBF4C11F19F9374173411F970.roa (raw, json)
Hash identifier: aC8bHcyP9aqR8iC8IHDCN3sGwe+o/h+TKAeNgGVNKWQ=
Subject key identifier: 78:99:11:DD:19:E9:52:85:DC:08:6D:9F:6C:8B:D2:2B:58:7F:08:3F
Certificate issuer: /CN=A913284A/serialNumber=A100863FF7AE4B4CE38AD98B7CCC37B2E56F4909
Certificate serial: 7A
Authority key identifier: A1:00:86:3F:F7:AE:4B:4C:E3:8A:D9:8B:7C:CC:37:B2:E5:6F:49:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/3B20943EBF4C11F19F9374173411F970.roa
Signing time: Sat 03 Oct 2026 17:02:36 +0000
ROA not before: Sat 03 Oct 2026 17:02:36 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 138482
IP address blocks: 163.128.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.crl
rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 08:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913284A, serialNumber=A100863FF7AE4B4CE38AD98B7CCC37B2E56F4909
Validity
Not Before: Oct 3 17:02:36 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6ac1352b-c665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d2:5d:65:54:d8:8f:af:51:dc:fe:9f:6d:b0:
2f:ac:06:b5:c3:9b:c7:b7:f0:99:66:19:df:95:8e:
76:f0:72:82:62:f3:63:ea:47:93:4f:63:8e:26:0f:
a7:16:e3:dd:f2:31:7a:25:0e:b6:67:6b:a4:92:bf:
70:68:67:bf:4e:fa:85:94:d0:1f:43:7d:15:5f:44:
da:d8:e8:b9:dc:54:71:d3:b1:e4:2d:9b:bb:94:72:
11:c6:1b:27:04:d4:fd:79:14:84:5e:1d:5c:82:27:
10:c3:bb:a6:95:fb:67:9e:03:22:24:38:f1:c9:0f:
88:52:d1:57:bc:3a:2e:91:ba:1b:27:41:e1:c9:fd:
f5:fd:71:ab:fd:85:e0:74:be:69:41:ac:7c:01:08:
1c:19:d2:9e:69:b0:0f:6d:0b:31:25:30:73:96:b6:
4c:c4:be:45:32:7c:e6:d2:16:c6:e7:a9:e9:10:d9:
25:91:7d:ed:eb:d0:e9:5c:e4:58:25:09:24:86:23:
f8:93:df:e9:d7:45:c7:89:7d:d1:13:eb:90:23:e7:
3b:77:83:a8:bd:f1:7c:46:16:67:66:5b:93:d4:23:
8f:0d:17:b9:89:25:48:0b:43:d8:14:7e:bd:97:a2:
15:9a:4a:7f:f4:9e:7e:c7:c7:75:9a:d9:ff:a8:ed:
9d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:99:11:DD:19:E9:52:85:DC:08:6D:9F:6C:8B:D2:2B:58:7F:08:3F
X509v3 Authority Key Identifier:
keyid:A1:00:86:3F:F7:AE:4B:4C:E3:8A:D9:8B:7C:CC:37:B2:E5:6F:49:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/3B20943EBF4C11F19F9374173411F970.roa
sbgp-ipAddrBlock: critical
IPv4:
163.128.24.0/24
Signature Algorithm: sha256WithRSAEncryption
07:5d:f8:99:a7:ad:18:08:62:fd:fc:49:91:7f:ce:8d:e9:1f:
a2:79:a8:fd:60:a9:8d:13:74:6d:4e:14:a6:24:02:bd:94:c1:
bf:09:d6:e4:6f:dc:72:fe:5e:8c:d4:92:4e:01:a2:d2:1d:0d:
6a:ce:3e:1c:0f:5f:a8:f3:d2:b5:63:76:c6:64:41:61:66:ce:
d6:f6:cf:d2:27:2c:91:43:15:bc:01:3b:34:3b:44:33:a0:15:
07:8f:63:cf:a0:87:a9:e5:c7:1e:43:e4:4d:42:e5:ef:ce:53:
e5:d0:f0:49:3f:46:80:aa:54:bf:77:75:50:0b:86:c2:de:73:
b9:10:43:ee:95:3c:c7:37:fb:cd:4c:43:88:0f:0e:7a:1c:ff:
ee:69:c7:2d:a4:f8:4a:bb:ca:c6:c0:3f:e5:c3:3d:35:86:00:
c4:3a:31:c9:18:f3:b3:48:c9:d2:b8:47:64:6f:a4:a6:b3:9d:
42:64:9d:ce:73:a9:67:15:9d:6f:11:16:2a:72:94:70:93:c6:
4c:2f:2c:b6:58:0f:3b:38:e6:70:0b:78:fe:c6:72:b0:5a:47:
da:eb:b8:07:2f:a8:1f:68:69:28:6a:0b:8d:d3:8d:66:05:2c:
9b:88:3a:09:84:46:b6:60:48:76:df:c5:09:7f:09:ae:00:0d:
41:55:4a:de
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 10 10:58:06 2026 by rpki-client