
$ rpki-client -vvf rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/955C204027D911F183CCD80FA7833773.roa
File: 955C204027D911F183CCD80FA7833773.roa (raw, json)
Hash identifier: c6JUDw7tq3Ict9tWMfIj9zis/6zIdlmfIPXyLf2HU9E=
Subject key identifier: 13:97:57:B8:F7:6D:8C:D5:CA:A1:1B:35:3F:9E:55:6B:B5:2E:3B:4A
Certificate issuer: /CN=A916537A/serialNumber=56A7321BFC8C3EC2E99160FA333B4F54C182946A
Certificate serial: 23
Authority key identifier: 56:A7:32:1B:FC:8C:3E:C2:E9:91:60:FA:33:3B:4F:54:C1:82:94:6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqcyG_yMPsLpkWD6MztPVMGClGo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/955C204027D911F183CCD80FA7833773.roa
Signing time: Tue 19 May 2026 09:42:04 +0000
ROA not before: Tue 19 May 2026 09:42:04 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 38809
IP address blocks: 2400:b300::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.crl
rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqcyG_yMPsLpkWD6MztPVMGClGo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 09:42:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916537A, serialNumber=56A7321BFC8C3EC2E99160FA333B4F54C182946A
Validity
Not Before: May 19 09:42:04 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a0c306b-3ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fb:ba:4c:7c:89:7a:07:48:ce:fa:a6:5f:8a:
7b:b7:0b:cb:09:9e:00:d4:31:8d:49:26:6d:fa:24:
da:1d:a2:c2:76:92:f0:66:5e:3b:47:9a:27:01:a3:
2b:07:81:71:07:37:2a:51:15:b5:d0:b9:bf:53:71:
14:df:7c:27:8b:95:dc:0b:a5:36:ac:1e:16:2e:af:
4a:95:6f:04:1c:9e:a3:33:0f:25:b4:1c:c1:32:b5:
4b:78:d3:c3:b2:56:66:b6:a6:be:50:12:4b:36:ff:
a6:b7:a3:ee:1f:82:f7:ba:73:bc:d5:a2:c0:88:80:
80:85:3a:ab:86:4f:8a:48:03:5c:37:11:29:17:13:
44:17:a5:5e:77:48:4d:6e:11:37:d6:7f:58:0b:8c:
0c:7e:0f:4a:24:29:4d:ab:fb:c8:bd:da:59:1d:84:
12:8a:76:35:79:2c:bf:e4:d8:ff:bd:6e:08:c7:6f:
a1:a4:73:87:c4:d1:5c:34:aa:9e:b0:18:00:cd:59:
f8:f5:d1:f9:b1:e6:35:36:8e:9c:a2:eb:c7:71:b4:
0d:c4:99:b1:8e:0e:a3:4e:96:be:bc:59:66:09:c1:
b8:0e:4a:91:d4:80:7e:70:b2:d1:d9:4f:8d:20:9f:
40:df:d6:04:08:fa:13:94:32:a2:ba:2e:aa:3b:e3:
2d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:97:57:B8:F7:6D:8C:D5:CA:A1:1B:35:3F:9E:55:6B:B5:2E:3B:4A
X509v3 Authority Key Identifier:
keyid:56:A7:32:1B:FC:8C:3E:C2:E9:91:60:FA:33:3B:4F:54:C1:82:94:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqcyG_yMPsLpkWD6MztPVMGClGo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/955C204027D911F183CCD80FA7833773.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:b300::/32
Signature Algorithm: sha256WithRSAEncryption
32:d7:d7:a7:96:8b:1c:db:df:cf:64:40:1d:a4:c5:f7:e3:f6:
5d:38:a4:08:87:f8:e9:03:4a:e1:38:0f:5e:5a:8e:4f:a4:a7:
71:7d:fd:9f:8f:8c:1a:ca:40:73:d5:2f:78:34:87:39:8f:56:
f4:9e:bc:b9:39:98:37:3b:f6:d1:48:1b:ac:7b:d4:ca:d7:8e:
ff:9f:4b:2a:62:bc:2f:8c:2f:e5:6d:8c:29:c7:35:a4:01:62:
de:07:95:18:c4:4a:56:26:1c:2d:4b:b0:e0:d0:32:c1:42:d7:
e0:7e:b6:97:f2:fc:10:47:27:f5:21:5d:f2:b6:31:ac:f1:5d:
3c:7f:b0:4f:19:00:9c:f1:ed:43:52:8b:3a:14:86:d6:bf:be:
a7:c2:5f:93:47:dd:79:c5:bc:b7:65:a8:b1:c1:53:88:ba:dd:
96:98:39:6d:fd:da:f4:ed:35:99:f0:7b:f3:6a:6b:b4:cd:fe:
5e:8f:42:01:52:28:68:6d:01:4a:59:53:e8:a9:21:07:22:fb:
61:95:1a:e4:bc:0d:c9:7d:ec:7e:97:a5:ab:be:fd:a1:39:05:
3b:e0:dc:ee:9b:59:fe:10:df:23:cd:bf:93:19:87:5f:44:3d:
5d:1c:4d:95:3f:ce:b1:ad:85:80:8e:9c:3d:15:73:36:36:0d:
38:6e:c2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:54:55 2026 by rpki-client