
$ rpki-client -vvf rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/D2FF8C06A92711F08CEB6934C4F9AE02.roa
File: D2FF8C06A92711F08CEB6934C4F9AE02.roa (raw, json)
Hash identifier: KRsNH66T+IbVfJVXh4HXcfnfG/XP7iz+CZYJM0ybrSQ=
Subject key identifier: 2E:E0:59:B8:4F:2A:29:21:46:75:78:4F:1C:71:F3:BA:87:EB:86:35
Certificate issuer: /CN=A913AF6A/serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
Certificate serial: 019F
Authority key identifier: 4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/D2FF8C06A92711F08CEB6934C4F9AE02.roa
Signing time: Mon 02 Mar 2026 11:28:07 +0000
ROA not before: Mon 05 Jan 2026 03:22:46 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 152305
IP address blocks: 157.10.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl
rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 03:56:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 415 (0x19f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AF6A, serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
Validity
Not Before: Jan 5 03:22:46 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a57447-a14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5e:aa:fb:c8:f3:18:38:c6:13:dd:e1:af:84:
74:93:f0:54:a3:6b:9e:c5:99:30:b3:d1:25:b5:00:
54:41:17:7c:7b:46:5d:2e:9b:57:2a:95:65:a8:4d:
25:e4:f4:77:0c:36:7b:76:4b:01:54:65:20:ce:e5:
3b:4d:83:72:84:42:4a:44:94:8a:9c:42:82:b1:8d:
90:1f:45:c4:de:8e:1f:64:d3:09:2f:a8:6e:7f:b3:
40:5a:6d:89:f6:ca:61:f5:63:ca:9c:f5:6b:99:28:
46:7d:19:70:38:36:2e:32:1a:e8:99:1d:5d:5b:24:
e2:00:50:f8:cb:cc:34:98:7a:52:ed:cc:c0:8a:9e:
1d:a8:b4:11:5f:1d:17:d8:0b:89:fa:ed:e2:17:87:
c8:c3:02:e3:0b:92:55:4f:00:b3:e0:6e:e7:14:f6:
f2:2e:73:f5:62:78:43:5f:69:aa:8d:63:d8:e0:17:
56:93:b9:7d:fc:ef:b3:88:61:a7:f5:4a:90:24:76:
a2:03:59:e3:2b:29:59:08:9e:04:a5:de:38:fb:3b:
0b:39:07:64:fc:35:dd:d0:13:1d:e6:bc:b2:ab:1a:
c5:5b:c0:e9:00:c6:78:93:35:3b:d6:92:b0:8d:26:
a6:cf:2a:4e:c8:0e:db:4d:a9:d5:65:38:4e:de:59:
4f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E0:59:B8:4F:2A:29:21:46:75:78:4F:1C:71:F3:BA:87:EB:86:35
X509v3 Authority Key Identifier:
keyid:4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/D2FF8C06A92711F08CEB6934C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.10.82.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:3c:e3:31:9f:d4:6b:b1:63:33:29:6e:b9:e0:bf:76:cc:4f:
db:9a:30:04:84:da:12:e9:54:4f:43:a5:8e:bd:cc:34:68:dc:
15:16:9e:12:6d:f8:b5:9b:aa:e5:dc:6b:1f:be:18:d7:6d:9e:
50:63:0b:d4:76:23:4e:86:f6:ed:20:f7:0f:75:bc:d0:33:82:
14:2f:a8:ec:f5:fb:89:fd:6b:96:eb:08:f1:d2:a0:90:37:8e:
9d:69:ac:f6:f9:7d:4c:e1:bb:33:9d:c6:43:3a:4f:e8:6f:66:
e2:b8:de:ed:d4:7b:24:4a:9c:a2:fb:14:b6:be:7d:7d:d0:61:
83:e4:97:f7:2c:a6:b6:eb:b6:0c:2b:04:32:49:c2:c0:17:8e:
82:2d:fe:c1:74:77:53:04:4f:88:66:43:c9:31:9b:75:12:89:
94:52:78:07:a6:97:cb:36:15:9c:a5:d3:5f:36:5a:bf:a3:b0:
f7:57:fd:b3:9d:9d:c2:fd:7e:d2:52:95:12:2e:f3:b8:87:81:
8f:91:a3:43:fc:b5:4b:50:87:40:a9:db:0d:df:65:5b:fb:3d:
24:22:c0:c2:79:a1:73:9b:b1:4b:f0:ec:08:ef:ac:9e:69:49:
df:fc:0d:e4:b4:ac:2f:22:f0:fe:ce:fb:63:69:58:2f:e7:25:
fc:83:1a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 09:47:22 2026 by rpki-client