
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/B283BDAACF7C11F084EB1044C4F9AE02.roa
File: B283BDAACF7C11F084EB1044C4F9AE02.roa (raw, json)
Hash identifier: qM1jpngbGtLR2m4oUSpuCPTJ9nzvkY0kh4taVmX3HNk=
Subject key identifier: 7C:25:70:40:06:E1:1A:24:0E:08:2C:2E:B3:6D:C8:1E:01:DF:3C:4C
Certificate issuer: /CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
Certificate serial: 04B2
Authority key identifier: 60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/B283BDAACF7C11F084EB1044C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:58:10 +0000
ROA not before: Tue 02 Dec 2025 12:44:53 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 141039
IP address blocks: 2407:e8c0:10::/48 maxlen: 48
2407:e8c0:14::/48 maxlen: 48
2407:e8c0:15::/48 maxlen: 48
2407:e8c0:16::/48 maxlen: 48
2407:e8c0:17::/48 maxlen: 48
2407:e8c0:18::/48 maxlen: 48
2407:e8c0:19::/48 maxlen: 48
2407:e8c0:1a::/48 maxlen: 48
2407:e8c0:1b::/48 maxlen: 48
2407:e8c0:1c::/48 maxlen: 48
2407:e8c0:1d::/48 maxlen: 48
2407:e8c0:1e::/48 maxlen: 48
2407:e8c0:4000::/40 maxlen: 40
2407:e8c0:4100::/40 maxlen: 40
2407:e8c0:4200::/40 maxlen: 40
2407:e8c0:4300::/40 maxlen: 40
2407:e8c0:4400::/40 maxlen: 40
2407:e8c0:4500::/40 maxlen: 40
2407:e8c0:4600::/40 maxlen: 40
2407:e8c0:4700::/40 maxlen: 40
2407:e8c0:4800::/40 maxlen: 40
2407:e8c0:4900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl
rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 23:46:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1202 (0x4b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162EE1, serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
Validity
Not Before: Dec 2 12:44:53 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a47e32-2bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1e:2d:78:74:d9:d5:04:03:36:5c:04:73:de:
c4:13:7f:52:1a:16:86:03:36:f2:5a:70:44:f9:2a:
ea:14:2f:da:a8:ad:fe:d5:b3:e9:44:f6:a3:4d:f1:
ea:26:2e:17:e1:cb:25:4e:96:24:84:24:38:c7:1f:
b9:8e:a8:1a:a0:e4:e9:b7:0f:c7:4d:76:0b:b9:2f:
dd:5c:0e:b0:8e:36:cb:eb:65:0c:f2:3c:76:82:81:
b5:3c:88:a8:3c:0e:15:64:e4:fe:d4:fd:cc:7f:09:
bd:b6:09:d1:9f:9d:16:29:07:2a:c6:dc:50:73:25:
1d:ea:16:64:2b:48:6c:17:87:8d:bc:bb:03:d7:7c:
de:e4:88:1a:8f:c9:32:34:4c:f0:b6:7a:61:d4:4f:
13:df:85:d5:5e:d6:ec:89:7f:85:ab:d3:12:c6:0a:
64:16:3f:0d:7c:71:df:ae:c6:54:2f:07:32:ee:b4:
bb:a1:91:34:f1:63:75:da:90:70:78:97:e3:3d:2f:
67:7f:70:a3:ee:77:a4:12:3c:25:c3:7e:8f:95:27:
03:56:48:8f:23:3f:5e:68:15:d4:0e:64:5b:70:06:
a4:6e:33:d3:a7:f6:44:9d:ad:5e:d7:59:ff:b5:b9:
d8:f0:02:f2:91:4f:47:38:30:9a:ea:a0:77:a6:ed:
a1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:25:70:40:06:E1:1A:24:0E:08:2C:2E:B3:6D:C8:1E:01:DF:3C:4C
X509v3 Authority Key Identifier:
keyid:60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/B283BDAACF7C11F084EB1044C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2407:e8c0:10::/48
2407:e8c0:14::-2407:e8c0:1e:ffff:ffff:ffff:ffff:ffff
2407:e8c0:4000::-2407:e8c0:49ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
44:50:66:3e:7f:94:ec:c9:dc:25:73:2d:e6:1f:46:c7:4a:51:
b7:0d:43:73:08:51:0b:17:f6:1d:a2:ea:00:d7:10:19:91:d9:
7e:a0:46:6c:da:c9:7d:5e:78:ce:d2:30:d6:cc:6e:75:91:45:
63:29:01:0a:59:a9:d6:30:59:e9:84:0f:18:1c:88:c4:da:ee:
57:13:d9:6d:3a:d7:f6:ed:41:89:47:6c:97:f0:ce:4a:05:61:
00:5f:2f:6d:3b:7a:1a:39:4a:9a:65:87:54:6d:ef:62:9d:e5:
9c:4c:97:cc:e3:24:3e:3e:8d:bc:61:1a:c0:2c:87:68:2a:5d:
cd:4e:a3:b0:80:a0:18:af:2d:0f:26:ab:c4:57:6f:37:40:0b:
06:f6:f7:92:9f:7e:dd:ad:2c:7e:f7:3c:56:01:d7:b8:b4:c5:
49:68:22:17:53:37:2b:21:27:f1:ff:11:74:c9:56:b8:82:a6:
10:fa:d8:cc:e9:5d:b0:03:f1:ff:d8:df:ae:b8:40:83:09:ef:
4b:fb:ba:91:74:2a:81:5b:29:c9:89:f3:43:63:e9:88:ac:2a:
d3:57:fd:c9:1d:34:36:54:f6:bc:ee:8c:46:78:5f:2f:1d:b2:
53:1b:ec:99:c3:32:85:b4:60:2a:08:65:20:dc:cb:59:6e:d4:
5b:65:0a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 19:30:45 2026 by rpki-client