
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141292/03931D4A6C4D11F1A8AAF10C6647A888/AE3AF652985611F19F9DCE754C11F970.roa
File: AE3AF652985611F19F9DCE754C11F970.roa (raw, json)
Hash identifier: jFbrBBBTbOxx4u9Zm1gwWIVaCSiZ62l036MMVRa+NCs=
Subject key identifier: C8:F4:BB:E4:9D:A9:E8:94:BB:FF:20:94:A0:F1:3E:25:57:32:52:DC
Certificate issuer: /CN=A9141292/serialNumber=B3A25C6354700E5AEBA64F51BAE5E1C8527CC25E
Certificate serial: 20
Authority key identifier: B3:A2:5C:63:54:70:0E:5A:EB:A6:4F:51:BA:E5:E1:C8:52:7C:C2:5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s6JcY1RwDlrrpk9RuuXhyFJ8wl4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141292/03931D4A6C4D11F1A8AAF10C6647A888/AE3AF652985611F19F9DCE754C11F970.roa
Signing time: Sat 15 Aug 2026 03:09:08 +0000
ROA not before: Sat 15 Aug 2026 03:09:08 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 154726
IP address blocks: 2402:6ea0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141292/03931D4A6C4D11F1A8AAF10C6647A888/s6JcY1RwDlrrpk9RuuXhyFJ8wl4.crl
rsync://rpki.apnic.net/member_repository/A9141292/03931D4A6C4D11F1A8AAF10C6647A888/s6JcY1RwDlrrpk9RuuXhyFJ8wl4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s6JcY1RwDlrrpk9RuuXhyFJ8wl4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:37:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141292, serialNumber=B3A25C6354700E5AEBA64F51BAE5E1C8527CC25E
Validity
Not Before: Aug 15 03:09:08 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a7fd854-c494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ee:7a:fc:5f:f8:8d:ae:54:c3:28:ff:ad:8d:
63:14:ad:f4:5e:e1:48:66:46:53:37:be:d2:dc:0c:
ae:1a:c5:44:66:a9:52:e9:d1:da:e9:6e:04:66:92:
dc:27:ce:f3:b9:c6:04:14:1f:93:6b:2d:fd:76:d0:
be:cb:7d:ac:bc:37:83:4a:f8:2d:50:d1:eb:8e:8f:
72:15:14:17:cb:c9:d3:20:f4:9c:c2:95:a7:32:28:
d0:68:9d:17:d5:bc:54:d3:70:d3:ca:99:64:3b:84:
02:d7:7e:95:11:3e:c0:eb:b6:31:b7:75:4d:01:df:
65:8c:7b:3f:c4:bd:d7:40:56:64:5b:e3:0a:b9:42:
55:ad:de:d6:2b:ab:b6:05:1a:e5:a5:ca:88:4a:fd:
e7:c0:c8:a1:78:12:29:17:87:39:82:23:c6:37:d6:
27:22:8c:d8:0c:2f:20:d4:56:ce:dc:3a:77:49:4c:
f1:5b:47:eb:95:fe:8a:47:6f:de:3f:51:c7:bc:ae:
bd:bf:ad:45:88:3e:d9:7e:0f:68:d1:0c:c2:07:4f:
f4:21:81:29:f5:e7:f3:ad:b4:75:a9:e6:d1:a6:b5:
46:68:5d:08:51:c1:48:43:f1:20:66:cf:ec:72:6b:
a7:7e:7c:c0:fa:3d:9c:de:63:6c:7d:72:d2:a2:8c:
d2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F4:BB:E4:9D:A9:E8:94:BB:FF:20:94:A0:F1:3E:25:57:32:52:DC
X509v3 Authority Key Identifier:
keyid:B3:A2:5C:63:54:70:0E:5A:EB:A6:4F:51:BA:E5:E1:C8:52:7C:C2:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141292/03931D4A6C4D11F1A8AAF10C6647A888/s6JcY1RwDlrrpk9RuuXhyFJ8wl4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s6JcY1RwDlrrpk9RuuXhyFJ8wl4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141292/03931D4A6C4D11F1A8AAF10C6647A888/AE3AF652985611F19F9DCE754C11F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:6ea0::/32
Signature Algorithm: sha256WithRSAEncryption
40:be:0f:30:0c:95:04:1b:aa:ba:74:c9:c1:12:d4:17:9f:ed:
8f:a8:48:fd:57:41:9d:65:63:3e:8f:34:6d:19:79:ee:42:22:
ec:8f:9e:c3:d3:24:25:f1:8a:74:8b:8d:39:f0:96:7d:a8:7e:
e4:84:4e:3a:ac:93:cc:99:c9:fb:90:53:49:28:ed:29:a8:40:
ab:6f:09:9a:f9:60:94:f0:a6:c8:3c:cc:2f:5c:bf:d2:7d:e0:
a4:7e:72:09:98:d6:50:1f:3e:a4:c2:bf:cf:c7:45:65:10:f5:
43:bd:67:f9:3f:f6:b9:fa:d1:8c:b2:c6:bd:f5:1f:30:52:fd:
42:42:49:5e:a3:3d:4e:44:d8:96:f1:51:3b:db:39:5c:92:36:
c4:eb:29:b8:8a:ce:e9:50:d2:a6:de:6d:31:1d:87:8a:1b:d7:
d8:8c:64:4a:b1:d9:9a:d1:f7:3b:97:46:60:5a:bc:e0:ba:e0:
2e:ea:03:46:ab:50:7e:6c:53:ff:f1:09:72:c7:3a:dc:cd:90:
c0:34:9f:18:58:d3:03:1b:3b:bb:b0:7f:4a:b4:ea:26:ca:68:
8a:94:d4:a9:af:de:94:5b:a3:31:2f:e5:b0:5d:ec:9c:3c:3e:
a6:1c:a0:34:66:dc:52:f5:bc:19:84:11:3e:dc:b2:f4:5f:1d:
7e:0a:63:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:37:08 2026 by rpki-client