
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/5A8744D8143411EEAB1A5D73C4F9AE02.roa
File: 5A8744D8143411EEAB1A5D73C4F9AE02.roa (raw, json)
Hash identifier: yfibStgl4mXerGufqCVOrviIGUB8px5dSSyzGRYwGIo=
Subject key identifier: DA:AD:A1:AA:DB:54:98:90:77:B4:37:F4:8B:8F:87:C2:F4:4E:1F:A1
Certificate issuer: /CN=A916D36A/serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
Certificate serial: 195B
Authority key identifier: FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/5A8744D8143411EEAB1A5D73C4F9AE02.roa
Signing time: Sun 30 Aug 2026 16:32:42 +0000
ROA not before: Sun 30 Aug 2026 16:32:42 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 38481
IP address blocks: 2407:e500:8::/47 maxlen: 47
2407:e500:a::/47 maxlen: 47
2407:e500:20::/47 maxlen: 47
2407:e500:30::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl
rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Sep 2026 16:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6491 (0x195b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D36A, serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
Validity
Not Before: Aug 30 16:32:42 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a945b29-8761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:25:57:94:55:98:86:ff:84:80:d1:c1:20:
e9:bc:9f:89:52:d1:f2:ae:0a:37:65:59:b9:a9:f8:
b0:79:27:4e:3a:07:df:18:93:95:9b:89:00:30:12:
ef:07:84:dc:e1:6a:35:24:bb:b8:fc:73:8f:ee:10:
d8:f8:22:dc:61:5f:4a:7f:94:82:4f:f5:64:88:4d:
f5:40:93:3b:6e:17:8a:c8:a6:53:2a:7c:cf:a4:67:
51:59:ac:03:26:d4:df:96:13:f0:b4:03:64:f3:51:
32:77:c3:e8:4e:b7:53:90:6b:bb:38:f2:b2:28:59:
bf:cb:e6:75:e9:bd:79:e8:e9:b4:56:e4:00:06:aa:
ac:82:66:bf:f7:64:6a:f3:a8:77:11:80:21:8a:06:
82:40:9b:bb:81:0c:fb:39:11:e2:d3:cc:61:83:54:
84:8f:d1:ce:34:65:44:20:af:e4:5f:1c:56:a0:3c:
31:1e:b0:bb:7f:a8:ea:eb:e1:d8:41:89:dc:ea:12:
6b:50:42:0d:5b:48:ac:57:bf:09:88:d9:46:c5:c5:
01:ef:cb:05:e9:34:33:87:6d:a6:2e:a1:cb:cc:70:
ff:de:91:ab:7f:ae:d1:3e:cf:92:9f:8a:c0:36:9d:
1e:07:dc:bc:a2:dc:eb:fb:1a:9a:c7:11:99:b7:0f:
1e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AD:A1:AA:DB:54:98:90:77:B4:37:F4:8B:8F:87:C2:F4:4E:1F:A1
X509v3 Authority Key Identifier:
keyid:FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/5A8744D8143411EEAB1A5D73C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2407:e500:8::/46
2407:e500:20::/47
2407:e500:30::/47
Signature Algorithm: sha256WithRSAEncryption
4e:09:f1:39:4f:79:84:9a:36:c3:c8:6a:97:c3:e7:ff:6e:da:
9e:ea:ba:69:34:2f:eb:c7:af:c5:fb:14:d1:80:52:37:d8:39:
d8:72:51:ab:9a:af:51:c6:8a:3b:c0:47:21:2c:db:f9:85:5f:
09:07:c9:7a:b3:55:d1:2b:de:8a:55:41:4f:e4:73:18:0b:72:
e4:af:3a:72:5c:16:d3:1a:70:48:45:4b:3c:5b:97:cd:33:98:
a3:31:67:61:d7:c4:0b:74:1f:d1:7a:7e:f1:e5:21:6d:79:8b:
db:d8:cf:76:39:b3:85:c6:69:56:69:21:b5:42:ff:28:6a:3c:
16:af:11:8b:49:8a:40:27:3a:46:7e:8c:7f:64:7c:d6:39:8a:
69:d3:d8:58:b6:90:50:b8:74:e6:22:a9:41:d0:ae:e2:50:10:
00:a9:66:b3:9a:09:ea:c0:5c:a9:51:99:bc:b8:5c:d6:6e:fe:
04:e5:f6:37:32:51:cb:a1:87:47:4e:f2:8e:d6:4f:72:b7:8b:
7e:cd:9e:5f:95:f1:d3:82:ae:88:22:c9:28:cd:59:59:f3:68:
b0:09:54:60:34:0a:80:01:c9:66:a4:f0:1c:8d:f8:14:28:cf:
1b:31:f2:88:a7:e2:b6:c8:63:a5:ab:58:e0:4f:64:b7:9f:55:
7b:35:b2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:49:12 2026 by rpki-client