
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/E1AB1F92430F11EAA60DB885C4F9AE02.roa
File: E1AB1F92430F11EAA60DB885C4F9AE02.roa (raw, json)
Hash identifier: OCv24/16TkkF7CfAW+nV2T28WIs19rHh0mty8R6qkAI=
Subject key identifier: 51:35:92:D4:51:37:EC:D1:5E:54:57:F1:A4:69:68:48:72:D4:D0:6A
Certificate issuer: /CN=A914247C/serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC
Certificate serial: 0C08
Authority key identifier: 84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/E1AB1F92430F11EAA60DB885C4F9AE02.roa
Signing time: Mon 14 Sep 2026 19:38:25 +0000
ROA not before: Mon 14 Sep 2026 19:38:25 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 24014
IP address blocks: 2001:df3:c600::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl
rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 18:51:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3080 (0xc08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914247C, serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC
Validity
Not Before: Sep 14 19:38:25 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6aa84d31-c6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:97:31:ea:4a:b1:5c:f4:b1:82:fa:7f:60:b2:
13:bf:ef:81:59:ce:1b:51:1d:f3:34:f5:f0:bd:97:
fa:01:cb:ea:76:4a:b6:8f:2d:bb:0f:a1:49:6a:37:
df:ba:59:79:df:a2:08:db:3c:4b:1d:e0:06:f4:21:
bc:ea:3e:2a:9a:1e:b8:8e:a0:e8:63:14:1e:42:06:
87:b3:6c:2c:04:30:db:17:f9:4c:76:26:c5:20:ff:
4a:29:27:83:de:4b:33:3d:1d:67:6d:85:d3:6b:af:
a7:32:9a:cb:b6:91:5b:bc:5d:1e:0c:9e:e9:89:b5:
e4:7e:a0:1b:f6:74:ea:19:f1:f6:94:05:05:90:47:
de:28:80:40:3b:a9:51:b4:e7:79:44:5b:f6:0a:59:
6d:8c:49:e7:5e:eb:e8:bd:14:8d:ec:9b:70:50:3f:
96:90:07:4b:5b:52:6b:16:a2:56:7c:8f:4a:c0:69:
7c:6f:c6:3d:7d:f4:49:13:92:4b:52:82:f7:81:d8:
ad:6c:91:9a:0c:23:90:cb:be:f3:c4:33:b2:5d:0d:
d8:03:d3:40:82:1c:82:6e:4e:42:42:30:04:fc:10:
12:2a:af:70:1e:76:2d:93:c5:86:3e:bf:45:fa:d0:
d8:e7:99:36:5c:1f:77:ac:39:a1:6c:ce:99:d7:eb:
4b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:35:92:D4:51:37:EC:D1:5E:54:57:F1:A4:69:68:48:72:D4:D0:6A
X509v3 Authority Key Identifier:
keyid:84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/E1AB1F92430F11EAA60DB885C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:c600::/48
Signature Algorithm: sha256WithRSAEncryption
97:f7:02:8d:4b:01:10:f2:d6:4f:6f:f5:7f:a3:ea:6c:36:96:
47:90:6d:13:dc:f8:cf:56:9f:50:a1:fd:08:b5:23:c9:bf:54:
2a:19:36:14:26:39:fd:8b:89:ce:fc:b3:70:be:1a:3e:3b:ca:
2e:5e:35:29:05:f6:5e:46:5d:02:5c:82:b8:c8:8e:0c:bf:b0:
ad:b2:aa:39:22:bc:b1:db:06:a6:73:bf:cb:9e:0f:bd:90:b5:
11:fb:57:48:1e:94:fa:4a:81:2b:d4:cf:bc:90:75:cd:25:84:
03:3b:c6:7c:a8:23:74:e8:f3:8c:d4:1e:be:d6:32:c2:9d:b9:
8e:6d:6b:ef:76:f9:a9:a1:da:1c:15:e7:95:d8:c3:75:c7:41:
3e:00:23:36:bb:97:a8:39:73:62:12:f6:00:0f:28:ba:9e:72:
29:00:86:e4:be:a6:26:6d:ab:df:90:f5:f6:ea:25:ef:9c:88:
a5:db:dc:2a:e7:bd:b9:34:43:23:96:a3:34:db:28:6c:c0:e1:
91:3d:00:4d:65:1b:db:27:15:52:2f:e6:2c:01:9f:6e:0f:c8:
41:75:c6:ce:7f:5b:03:27:56:87:42:88:22:fe:8e:f9:0b:27:
3b:35:6f:a1:8f:3e:81:b2:7f:29:69:a6:56:22:dd:7e:7e:74:
4e:de:68:e1
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICDAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI0N0MxMTAvBgNVBAUTKDg0RkFCMEQ2ODRGQUFGMTY5NTBBQUNBMzhFNkQ2NTNB
Q0NGMjU4QkMwHhcNMjYwOTE0MTkzODI1WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWE4NGQzMS1jNmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArZcx6kqxXPSxgvp/YLITv++BWc4bUR3zNPXwvZf6Acvqdkq2jy27D6FJajff
ull536II2zxLHeAG9CG86j4qmh64jqDoYxQeQgaHs2wsBDDbF/lMdibFIP9KKSeD
3kszPR1nbYXTa6+nMprLtpFbvF0eDJ7pibXkfqAb9nTqGfH2lAUFkEfeKIBAO6lR
tOd5RFv2ClltjEnnXuvovRSN7JtwUD+WkAdLW1JrFqJWfI9KwGl8b8Y9ffRJE5JL
UoL3gditbJGaDCOQy77zxDOyXQ3YA9NAghyCbk5CQjAE/BASKq9wHnYtk8WGPr9F
+tDY55k2XB93rDmhbM6Z1+tLmQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFFE1ktRR
N+zRXlRX8aRpaEhy1NBqMB8GA1UdIwQYMBaAFIT6sNaE+q8WlQqso45tZTrM8li8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ3Qy85MEY2MzJEQTQz
MEExMUVBODU4Q0RDNzZDNEY5QUUwMi9oUHF3MW9UNnJ4YVZDcXlqam0xbE9zenlX
THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hQcXcxb1Q2cnhhVkNxeWpqbTFsT3N6eVdMdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDI0N0MvOTBGNjMyREE0MzBBMTFFQTg1OENEQzc2QzRGOUFFMDIvRTFBQjFGOTI0
MzBGMTFFQUE2MERCODg1QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN88YAMA0GCSqGSIb3DQEBCwUAA4IBAQCX9wKNSwEQ8tZPb/V/
o+psNpZHkG0T3PjPVp9Qof0ItSPJv1QqGTYUJjn9i4nO/LNwvho+O8ouXjUpBfZe
Rl0CXIK4yI4Mv7Ctsqo5Iryx2wamc7/Lng+9kLUR+1dIHpT6SoEr1M+8kHXNJYQD
O8Z8qCN06POM1B6+1jLCnbmObWvvdvmpodocFeeV2MN1x0E+ACM2u5eoOXNiEvYA
Dyi6nnIpAIbkvqYmbavfkPX26iXvnIil29wq5725NEMjlqM02yhswOGRPQBNZRvb
JxVSL+YsAZ9uD8hBdcbOf1sDJ1aHQogi/o75Cyc7NW+hjz6Bsn8paaZWIt1+fnRO
3mjh
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:39:54 2026 by rpki-client