
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E42C/F4D58642001011F1892C277E406F56BC/67EF6B884F7711F18EA103B5CB833773.roa
File: 67EF6B884F7711F18EA103B5CB833773.roa (raw, json)
Hash identifier: G2UOolvq/gZ9z9XsLR2HIozRubsLI6hPWHMWyTfxV20=
Subject key identifier: B6:32:F3:DD:CB:C5:BB:67:31:9F:71:69:1F:16:1E:2C:8F:F0:D9:3E
Certificate issuer: /CN=A913E42C/serialNumber=BFBA6DAB43E5B83C7B3E01B228180680FAD8305B
Certificate serial: 38
Authority key identifier: BF:BA:6D:AB:43:E5:B8:3C:7B:3E:01:B2:28:18:06:80:FA:D8:30:5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7ptq0PluDx7PgGyKBgGgPrYMFs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E42C/F4D58642001011F1892C277E406F56BC/67EF6B884F7711F18EA103B5CB833773.roa
Signing time: Thu 14 May 2026 09:29:29 +0000
ROA not before: Thu 14 May 2026 09:29:29 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 134186
IP address blocks: 2001:df6:a940::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E42C/F4D58642001011F1892C277E406F56BC/v7ptq0PluDx7PgGyKBgGgPrYMFs.crl
rsync://rpki.apnic.net/member_repository/A913E42C/F4D58642001011F1892C277E406F56BC/v7ptq0PluDx7PgGyKBgGgPrYMFs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7ptq0PluDx7PgGyKBgGgPrYMFs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 May 2026 08:43:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E42C, serialNumber=BFBA6DAB43E5B83C7B3E01B228180680FAD8305B
Validity
Not Before: May 14 09:29:29 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a0595f9-b597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:d7:72:32:a5:18:3c:e4:44:35:4d:0e:d5:
e2:9e:6e:e5:06:10:7c:ff:f7:d5:04:67:94:48:2d:
0f:c3:57:98:67:71:0b:f5:af:e4:9c:a4:a9:23:ea:
ca:3d:7b:a9:2e:ee:f3:53:f2:d5:75:df:7b:c4:e2:
4d:f3:dd:90:17:df:71:03:7c:32:b0:06:ed:2b:8e:
63:08:09:92:a4:db:d6:20:f7:69:4e:36:aa:15:11:
26:bd:d2:88:7b:65:83:e1:68:09:05:43:da:c6:cf:
1b:0a:07:c6:6d:f0:70:2d:b7:78:26:3a:d6:2d:f4:
67:2a:e7:53:e2:8f:e7:f8:e3:5a:3a:74:97:60:23:
d1:04:22:9c:ab:01:45:ae:7d:38:94:07:cc:47:2a:
5e:77:88:41:fd:d5:7a:c2:a7:13:40:65:27:b6:65:
17:9a:ba:e3:a1:7c:7f:52:b2:70:62:31:f0:a7:7f:
05:df:54:0f:aa:e6:71:7d:71:6e:e6:73:e7:b2:71:
4e:41:24:a8:a3:ab:02:1c:c8:41:41:ca:9d:b7:4e:
49:67:73:60:80:cb:dc:c7:d5:2e:c8:a6:0f:4d:20:
0a:b9:d7:f1:4f:0d:ea:c3:82:ec:5a:8d:02:06:1a:
29:4f:1f:05:4b:8f:e1:14:6e:fe:2e:b2:7d:a2:20:
1f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:32:F3:DD:CB:C5:BB:67:31:9F:71:69:1F:16:1E:2C:8F:F0:D9:3E
X509v3 Authority Key Identifier:
keyid:BF:BA:6D:AB:43:E5:B8:3C:7B:3E:01:B2:28:18:06:80:FA:D8:30:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E42C/F4D58642001011F1892C277E406F56BC/v7ptq0PluDx7PgGyKBgGgPrYMFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7ptq0PluDx7PgGyKBgGgPrYMFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E42C/F4D58642001011F1892C277E406F56BC/67EF6B884F7711F18EA103B5CB833773.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:a940::/48
Signature Algorithm: sha256WithRSAEncryption
88:0c:13:c8:b9:f2:dc:ed:53:fa:70:2a:ba:73:ef:38:1f:d3:
19:83:a4:33:3b:92:2b:ea:1b:15:54:01:63:fd:13:6d:94:f3:
0a:1d:ae:ca:29:4a:b5:a3:4c:4b:4e:6c:7a:b2:18:c6:74:bc:
9a:3e:cb:1a:c1:b1:c7:cd:01:ad:51:85:e6:d1:eb:90:fa:c7:
26:af:c2:31:6f:16:b0:ed:5b:f7:03:0c:c2:e4:bf:d5:40:eb:
7a:3f:af:67:e2:2c:70:fb:4d:f5:5f:8d:fd:ac:d1:4f:3c:02:
5f:97:15:8d:36:35:18:2c:d3:5f:45:88:f5:4b:b1:94:c9:b5:
a1:34:31:31:90:b6:80:16:86:87:b8:c3:96:76:e7:47:63:24:
d7:20:f6:6c:e9:5d:20:a2:b9:e7:ac:bc:6e:b1:6a:47:f5:f9:
aa:c0:9b:10:dd:f3:10:9f:cf:e6:74:3c:3e:8c:d3:9b:50:39:
fd:a8:15:cc:bf:5b:69:3d:ee:60:7d:65:91:40:40:0b:b4:ce:
1c:3a:c2:d1:2a:85:09:f1:3e:dd:d4:2a:aa:e2:d9:54:1f:aa:
a6:ee:71:eb:f6:db:fd:d7:6f:b9:01:2d:50:c2:a8:6d:d5:07:
d3:ba:12:b1:de:05:a5:a9:be:7c:be:c1:6e:af:32:85:d2:05:
14:1f:ae:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 20:03:13 2026 by rpki-client