
$ rpki-client -vvf rpki.apnic.net/member_repository/A914559B/1A20F38C859F11F1985CA89058A30FBC/D489D6B08B0A11F1970B76AD7111F970.roa
File: D489D6B08B0A11F1970B76AD7111F970.roa (raw, json)
Hash identifier: 9Ppc1mRRtKBrkWqx5LqIShwW8EVj+gT0/gEvcpBWmNk=
Subject key identifier: B8:12:B8:3E:1D:39:E4:1B:4B:AC:D2:F3:A6:54:F0:6B:A4:06:FD:25
Certificate issuer: /CN=A914559B/serialNumber=EB744DA4D575D67FFF8988C9D5623E53740CA3B7
Certificate serial: 0D
Authority key identifier: EB:74:4D:A4:D5:75:D6:7F:FF:89:88:C9:D5:62:3E:53:74:0C:A3:B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63RNpNV11n__iYjJ1WI-U3QMo7c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914559B/1A20F38C859F11F1985CA89058A30FBC/D489D6B08B0A11F1970B76AD7111F970.roa
Signing time: Wed 29 Jul 2026 05:03:26 +0000
ROA not before: Wed 29 Jul 2026 05:03:26 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 154749
IP address blocks: 2402:69e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914559B/1A20F38C859F11F1985CA89058A30FBC/63RNpNV11n__iYjJ1WI-U3QMo7c.crl
rsync://rpki.apnic.net/member_repository/A914559B/1A20F38C859F11F1985CA89058A30FBC/63RNpNV11n__iYjJ1WI-U3QMo7c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63RNpNV11n__iYjJ1WI-U3QMo7c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914559B, serialNumber=EB744DA4D575D67FFF8988C9D5623E53740CA3B7
Validity
Not Before: Jul 29 05:03:26 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a69899e-1479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0a:09:10:38:9e:44:c1:ca:52:3a:1f:fd:1e:
6a:61:59:07:a4:75:ff:f5:fc:1e:dc:f5:43:aa:59:
6e:fe:22:a7:9e:6d:97:97:8b:b0:d4:33:68:92:15:
66:67:9f:82:18:46:b6:65:2b:2c:b5:6b:c3:06:ce:
8a:20:ae:fd:4b:3e:97:fd:99:38:27:0b:62:bd:e1:
06:ac:ea:0a:ab:c8:f9:0a:71:46:54:dc:8c:09:0f:
81:e6:6d:38:8c:01:80:3a:7f:db:3d:1d:73:d4:09:
02:1c:e4:80:f5:38:7a:33:32:b5:ae:16:f7:ee:01:
49:76:4f:e4:46:4b:a7:72:c3:5b:b4:d5:f3:49:c8:
ae:fc:d4:db:40:df:98:ca:5a:0f:27:42:4f:db:0c:
a2:12:58:9c:1d:4a:0d:ac:3b:c6:92:68:ec:c1:54:
78:e8:3c:80:78:6c:e4:85:08:9a:06:7f:90:f3:14:
aa:b1:35:4a:9f:68:d0:0b:61:a6:0f:45:48:92:b2:
a8:bf:09:1f:6c:2f:69:5a:42:c2:f1:ce:e1:e5:30:
19:94:b1:db:bf:b4:61:61:9d:bb:e2:be:4b:dd:e1:
7e:72:15:9b:e3:41:dc:7e:e2:dd:c2:e0:a9:30:83:
0d:87:27:74:48:66:23:58:17:f0:ea:06:4d:ec:01:
63:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:12:B8:3E:1D:39:E4:1B:4B:AC:D2:F3:A6:54:F0:6B:A4:06:FD:25
X509v3 Authority Key Identifier:
keyid:EB:74:4D:A4:D5:75:D6:7F:FF:89:88:C9:D5:62:3E:53:74:0C:A3:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914559B/1A20F38C859F11F1985CA89058A30FBC/63RNpNV11n__iYjJ1WI-U3QMo7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63RNpNV11n__iYjJ1WI-U3QMo7c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914559B/1A20F38C859F11F1985CA89058A30FBC/D489D6B08B0A11F1970B76AD7111F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:69e0::/32
Signature Algorithm: sha256WithRSAEncryption
da:ee:84:87:25:3c:da:46:48:06:2b:9d:f3:b6:34:eb:74:b8:
b0:61:25:75:57:10:1f:6e:93:6e:46:af:27:6a:03:6f:36:2e:
2d:5c:f7:d6:63:33:07:f0:92:5b:02:ff:1b:01:90:4c:64:b6:
ce:1e:01:ae:a1:9e:70:73:da:16:f9:08:27:06:4a:2d:d3:36:
8b:cd:08:d9:a8:07:4b:a7:38:cd:cb:9d:16:41:e4:9e:0e:01:
a5:3a:2e:e1:6e:1c:1b:81:98:32:5f:d3:57:8e:6d:2b:d8:2e:
8f:79:ad:e9:73:78:d2:4f:3f:0e:42:81:19:d2:be:b6:f3:37:
a4:7a:de:ad:94:00:b6:eb:3e:1a:78:c6:a2:80:0a:19:58:52:
04:9b:fd:79:7d:f2:31:d2:3f:cb:47:c1:9b:ab:53:15:74:76:
73:2a:d2:eb:bf:5b:36:a9:b4:ba:10:39:28:0f:2f:f4:69:c1:
0a:2b:ad:d1:5f:94:38:36:f6:c4:cb:6d:92:1e:f2:30:12:0d:
3a:98:69:c0:ff:2a:36:28:78:4c:77:f3:84:42:94:7c:d8:a4:
7c:f8:81:9e:4e:cf:d7:28:94:0c:86:af:b1:86:37:9e:95:10:
fb:dd:77:bd:1e:8b:c0:82:83:0b:d6:77:4c:4d:94:92:93:53:
ff:10:f5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:37:10 2026 by rpki-client