
$ rpki-client -vvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/9CA607DA3C8411F0BDA85229C4F9AE02.roa
File: 9CA607DA3C8411F0BDA85229C4F9AE02.roa (raw, json)
Hash identifier: 8NZ1UhuGARERdVr4xn3hECAnbMmlyrhbSiHPEdlyKGo=
Subject key identifier: 33:36:3C:47:A1:90:7A:61:E0:17:CB:C9:9F:34:B1:3C:A8:07:79:5D
Certificate issuer: /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
Certificate serial: 0298
Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/9CA607DA3C8411F0BDA85229C4F9AE02.roa
Signing time: Thu 23 Apr 2026 02:34:32 +0000
ROA not before: Thu 23 Apr 2026 02:34:32 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 150785
IP address blocks: 2400:e3e0:c000::/36 maxlen: 36
2400:e3e0:e000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl
rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:17:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 664 (0x298)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919BE9A, serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
Validity
Not Before: Apr 23 02:34:32 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69e98537-f042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:31:28:ac:1f:2f:27:04:3e:f9:45:85:36:
a3:56:43:8a:8d:67:bd:4a:be:42:e8:76:3d:db:d9:
f2:a6:2c:d8:ba:31:f5:80:73:81:34:a6:68:3a:b1:
af:66:51:e1:e5:56:04:7b:b9:50:be:fc:8a:22:f0:
3b:3e:bc:35:37:3c:ae:56:72:44:bb:75:9d:0e:d5:
0b:3b:bd:50:03:e0:60:32:35:b0:2a:a9:ee:5b:8c:
17:e4:f7:c1:c7:b2:17:4c:25:fb:72:dd:65:f4:2d:
ea:98:87:3c:b1:f9:fb:1b:69:fb:64:98:31:3a:fe:
db:4f:b9:94:df:25:8e:de:92:44:58:83:65:11:4a:
f9:8f:70:14:47:b7:3f:9c:24:c5:8a:5c:79:6f:51:
8e:07:82:3b:3e:4b:97:43:3c:9f:4e:3c:cb:1d:ce:
9a:bd:1e:10:ae:93:4e:37:25:4e:37:c4:45:9e:61:
e0:54:80:05:ac:bf:cf:3e:a4:a7:d0:36:80:6a:fd:
b6:ec:9a:de:2f:d4:20:cd:4d:98:b4:6b:6b:5b:ca:
35:34:d7:b1:47:3b:ff:2c:88:11:bb:da:93:1c:f1:
85:da:1c:55:26:8f:0d:6e:e6:fe:52:2c:9f:42:0d:
55:8b:f6:32:d6:92:93:21:4e:58:a3:3e:14:3d:3f:
a9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:36:3C:47:A1:90:7A:61:E0:17:CB:C9:9F:34:B1:3C:A8:07:79:5D
X509v3 Authority Key Identifier:
keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/9CA607DA3C8411F0BDA85229C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:e3e0:c000::/36
2400:e3e0:e000::/36
Signature Algorithm: sha256WithRSAEncryption
c7:4d:3b:8f:60:e9:72:d8:71:0c:71:92:58:7b:4c:6d:7a:46:
1f:c6:71:7e:39:b4:21:6f:d6:a4:70:83:8c:1a:f4:45:51:88:
ae:a3:5f:cc:11:42:4d:43:26:29:3b:19:9d:b2:a8:c9:88:8f:
de:a1:af:e6:c1:f4:ad:5a:b2:f5:b0:60:72:59:c8:e5:47:38:
9e:45:55:18:3e:2d:d0:f5:69:c8:af:ac:8c:50:6f:85:3c:8d:
a5:df:34:1f:38:f2:bc:fa:5b:55:8f:2d:73:6d:fe:03:6e:a3:
01:c9:19:3f:f7:59:af:dd:81:00:1f:af:3c:6e:8b:82:eb:17:
c6:de:7c:49:a8:58:44:8f:5f:b5:d9:7d:d1:ed:3a:63:69:bb:
20:bc:c6:b8:9c:ed:30:c5:60:a7:b7:86:16:86:d4:6b:54:b4:
26:0f:27:0e:b4:f2:7a:35:91:58:41:78:aa:05:ba:b8:f0:a3:
7f:d9:68:9b:1a:fa:33:23:f8:de:88:26:39:ee:1d:f3:59:72:
6e:88:72:06:c5:5f:97:4b:1d:3c:51:1a:8b:a5:9a:91:fd:cf:
22:ad:fa:1f:d2:61:29:66:51:78:9f:9b:a9:3e:20:ee:7f:e6:
67:5d:74:c4:86:2f:a8:9b:ac:f0:df:37:6a:1e:ec:50:dd:9d:
34:9a:a9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:15:57 2026 by rpki-client