
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/A2696B18D16C11EA8886BE5DC4F9AE02.roa
File: A2696B18D16C11EA8886BE5DC4F9AE02.roa (raw, json)
Hash identifier: GCPP3Zkeb88CMAM4ecp19R2oGr0s67YLKK0lItldtcI=
Subject key identifier: 2F:37:61:EE:EF:37:E1:5D:51:BA:D9:00:C8:8B:BB:6F:7D:E7:15:D1
Certificate issuer: /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
Certificate serial: 7E89
Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/A2696B18D16C11EA8886BE5DC4F9AE02.roa
Signing time: Wed 02 Sep 2026 17:33:10 +0000
ROA not before: Wed 02 Sep 2026 17:33:10 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 140945
IP address blocks: 2402:f00:2800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl
rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 16:52:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32393 (0x7e89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913900D, serialNumber=C603786D55A904124E7592EED2899EF578921100
Validity
Not Before: Sep 2 17:33:10 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a985dd6-0f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f0:a7:45:ab:2b:6e:00:ba:aa:03:11:7b:d2:
4f:58:90:eb:29:96:d1:89:d9:1f:9f:59:19:1d:e0:
5a:07:2a:66:d0:63:a1:11:98:81:fb:7d:f5:db:ec:
6c:9f:9f:a4:3d:64:f0:7c:15:79:6d:e0:59:a1:a4:
ff:22:54:ac:62:e8:18:3a:9c:fb:14:94:aa:db:2e:
be:96:9f:24:fe:55:3f:ab:36:b2:4a:8a:22:78:c5:
3c:84:33:21:1e:3c:67:be:47:08:40:71:0c:f3:37:
9d:be:4d:b7:d5:41:eb:fc:eb:19:4a:1e:93:02:17:
3c:25:e6:95:b3:88:ba:f7:b7:3d:2e:a1:0f:59:b8:
90:19:5f:24:03:c7:e5:57:e1:9b:b7:c6:2a:ab:c8:
da:8a:ff:b4:46:41:68:6c:09:e8:fb:63:18:4a:ec:
92:84:5b:7d:7c:c3:50:be:7e:7f:98:71:84:f5:34:
f5:af:37:89:d8:d2:bb:6a:4e:9b:65:64:f1:b1:9c:
64:55:3d:8a:e4:fe:66:d3:93:3e:e5:16:3d:9c:47:
8b:e7:60:94:60:92:42:6a:c7:47:ce:5e:5d:b6:ca:
d9:7d:02:d5:84:42:aa:84:f2:99:3e:5b:df:12:ea:
8f:17:61:2e:31:e0:bd:4f:5a:a4:d7:b9:64:74:7e:
1a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:37:61:EE:EF:37:E1:5D:51:BA:D9:00:C8:8B:BB:6F:7D:E7:15:D1
X509v3 Authority Key Identifier:
keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/A2696B18D16C11EA8886BE5DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:f00:2800::/38
Signature Algorithm: sha256WithRSAEncryption
11:1a:99:62:98:0e:1f:94:8b:93:63:27:66:1d:c1:bc:b2:d8:
b8:c9:fb:a1:4e:b4:b8:64:c7:d9:a8:7a:b7:98:ea:f4:53:47:
76:a2:0d:ce:48:86:2f:07:0a:6b:a7:a7:c0:3d:d8:cb:8c:2c:
0e:79:13:99:ee:44:01:74:c5:a9:fc:f1:ee:3d:cf:b9:ab:98:
18:1e:40:54:f2:3a:28:a0:3f:db:9a:ed:43:18:61:7f:f0:f3:
06:14:6d:3c:6d:fe:78:21:b6:96:e9:ee:0a:09:aa:90:ec:5e:
98:44:eb:ff:18:9b:25:b5:05:f5:0f:86:9e:13:70:15:c1:9b:
a3:61:f1:ae:99:d8:72:74:57:36:38:75:39:2d:c2:2d:bb:11:
c9:78:3b:fe:24:09:c6:56:56:43:e9:ec:40:a7:bc:62:ef:7d:
c1:6f:b8:47:1d:3a:b2:56:25:d2:6d:a4:99:b1:75:0e:cc:83:
72:e5:b7:00:58:7f:4b:46:4b:a4:27:52:4c:9b:f1:76:03:9c:
5a:1b:57:e9:41:b0:b3:55:3b:db:5a:8a:9a:a9:97:7e:87:b2:
5c:ec:69:53:59:ec:a0:e0:99:2f:41:7f:b6:9a:e0:4e:98:2c:
ae:4d:9d:4b:94:1e:21:77:78:05:f3:09:2e:0b:d3:93:8d:9c:
2e:ed:8e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:42:07 2026 by rpki-client