
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/8D6973CE77C311EE90D4BD46C4F9AE02.roa
File: 8D6973CE77C311EE90D4BD46C4F9AE02.roa (raw, json)
Hash identifier: tYLxo7jbuVluJdA3j6VUBn1vuF7ypNJl6KNhTxT5YiQ=
Subject key identifier: 8E:EB:33:85:56:2A:A8:86:2D:3C:AA:28:3E:C5:35:7C:D2:06:A6:8E
Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial: 36A0
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/8D6973CE77C311EE90D4BD46C4F9AE02.roa
Signing time: Wed 30 Sep 2026 16:17:05 +0000
ROA not before: Wed 30 Sep 2026 16:17:05 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 142502
IP address blocks: 2405:8a00:ffff::/48 maxlen: 48
2409:e:e1::/48 maxlen: 48
2409:e:e2::/48 maxlen: 48
2409:e:e3::/48 maxlen: 48
2409:e:e5::/48 maxlen: 48
2409:e:e7::/48 maxlen: 48
2409:e:e9::/48 maxlen: 48
2409:e:ef::/48 maxlen: 48
2409:f:f2::/48 maxlen: 48
2409:f:f4::/48 maxlen: 48
240a:eabc:abce::/48 maxlen: 48
240a:eabc:abcf::/48 maxlen: 48
240a:eabc:dabc::/48 maxlen: 48
240a:eabc:dabd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 15:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13984 (0x36a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Validity
Not Before: Sep 30 16:17:05 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abd3601-75d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8c:15:8f:cf:8d:95:fd:ea:56:53:f0:93:af:
a3:06:46:f8:90:53:70:46:ff:f0:7f:00:f4:8f:91:
3e:ba:03:42:d3:b4:5b:d0:31:5c:d5:11:0f:a6:1f:
5b:be:46:92:7b:6b:e9:26:19:81:f9:30:fe:9e:19:
bc:70:57:02:51:00:3b:97:08:31:e6:5c:c5:5b:92:
e3:da:f6:e1:0e:9b:97:eb:68:bc:fa:80:2d:2f:d2:
0d:2f:84:df:c3:91:78:18:0d:ad:db:f8:30:53:37:
fe:88:21:4b:ae:e7:bd:59:c7:97:22:6c:50:7e:da:
cf:5e:8c:97:a1:af:2f:65:30:f1:c8:0c:8c:92:88:
e2:dc:4a:7d:b5:42:3f:66:20:90:a6:af:78:11:8e:
75:03:29:48:61:7a:67:a9:45:da:2a:ed:0a:8f:84:
45:3c:9d:89:ca:a8:95:86:d2:5a:70:79:37:75:f5:
46:c8:a3:08:ec:fd:31:8c:cf:ab:ba:c0:a5:d7:1d:
af:c2:27:15:2c:3f:60:bb:f2:77:87:c6:66:24:86:
8a:90:f9:50:98:b4:44:4b:4b:7e:d9:cd:63:81:9a:
ab:33:38:73:6d:21:1b:b6:06:76:42:4a:fc:30:7b:
ab:c8:c2:a4:0f:c8:28:c3:5c:df:41:20:62:5e:67:
15:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EB:33:85:56:2A:A8:86:2D:3C:AA:28:3E:C5:35:7C:D2:06:A6:8E
X509v3 Authority Key Identifier:
keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/8D6973CE77C311EE90D4BD46C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:8a00:ffff::/48
2409:e:e1::-2409:e:e3:ffff:ffff:ffff:ffff:ffff
2409:e:e5::/48
2409:e:e7::/48
2409:e:e9::/48
2409:e:ef::/48
2409:f:f2::/48
2409:f:f4::/48
240a:eabc:abce::/47
240a:eabc:dabc::/47
Signature Algorithm: sha256WithRSAEncryption
d7:98:05:cd:54:96:98:0f:eb:85:64:1f:ad:1d:e7:af:0f:48:
aa:76:9b:bb:59:df:c0:6b:4f:1b:8c:00:2e:a8:42:ba:ef:10:
52:57:e8:e0:e5:b0:bc:81:12:4d:f2:5b:0f:e6:be:bc:4a:d1:
ff:e7:d7:a2:8f:a1:f4:52:3b:7c:25:01:5d:6f:24:09:f6:ee:
38:58:d4:6c:0d:a4:3a:cc:81:74:83:b5:54:0e:ce:5a:35:b7:
83:34:10:1f:bb:9b:58:e7:91:76:8c:5e:7a:69:aa:d0:a4:f3:
a8:08:96:a7:16:76:37:2d:f9:5b:2b:41:11:6b:2d:8e:2b:6c:
3e:24:a7:84:2d:16:ea:95:eb:fb:48:3c:7a:1a:91:f1:ad:68:
fe:aa:9d:06:36:3a:b7:60:0e:61:07:22:2c:7f:f5:dd:74:61:
80:0a:bd:ce:1f:2d:a7:4f:ae:c2:e8:c0:52:16:9e:db:c7:c6:
2d:66:27:95:11:f5:e1:15:22:f2:1a:df:4e:b7:fa:37:00:cf:
59:35:65:b5:be:ef:b5:fb:e9:de:e3:4c:38:6e:6a:70:84:ad:
82:bc:97:43:36:08:f1:68:ae:c4:c5:89:ef:73:09:f6:1a:ae:
29:51:91:6f:ef:ff:f2:cc:55:0d:18:c1:56:85:7a:53:53:d5:
59:fc:5d:1f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 25 14:24:10 2026 by rpki-client