
$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/5258D3D4BCE011EFAB38225AC4F9AE02.roa
File: 5258D3D4BCE011EFAB38225AC4F9AE02.roa (raw, json)
Hash identifier: bk/7/6niDOy4Wgez/WOfJOA9hAaC3ZIe5csnBCnmc2c=
Subject key identifier: D1:3E:BB:08:17:26:15:12:E4:0C:AF:C0:B0:ED:92:BA:9A:91:CE:EC
Certificate issuer: /CN=A911647C/serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003
Certificate serial: 0ABD
Authority key identifier: 73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/5258D3D4BCE011EFAB38225AC4F9AE02.roa
Signing time: Fri 26 Jun 2026 20:23:55 +0000
ROA not before: Fri 26 Jun 2026 20:23:55 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 9269
IP address blocks: 138.19.0.0/16 maxlen: 24
165.84.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl
rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:58:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2749 (0xabd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911647C, serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003
Validity
Not Before: Jun 26 20:23:55 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a3edfda-b228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a9:76:48:b8:23:23:6c:95:a8:ce:4f:c3:c9:
97:6a:b8:15:e2:24:ef:f9:ff:6e:d9:93:13:8c:a6:
02:e5:6d:0b:c3:a2:ea:1c:b1:01:4b:f3:0c:a1:f1:
2a:3a:04:e8:94:ec:64:1d:9d:ca:e5:64:c6:ed:9d:
a8:c6:46:df:ec:50:54:9a:3b:c2:22:cb:3d:47:9c:
25:86:94:35:ec:4f:93:a2:09:dc:22:77:de:47:9d:
82:76:5b:dc:39:98:71:67:c4:14:2e:15:4b:64:2b:
45:66:ae:9b:8c:f3:c6:d3:f9:89:57:79:73:c5:5f:
88:25:05:ee:d1:49:ac:0b:90:e8:e9:4d:75:45:c8:
67:4b:82:00:84:fe:14:98:97:d3:ad:cd:c0:a3:43:
b7:20:cf:c7:54:14:a8:39:75:c9:f8:19:f1:94:a6:
5e:8c:01:8b:02:06:8f:e2:ed:71:ab:2b:53:8a:0d:
f3:28:4f:a4:fb:5c:b2:7f:62:f6:42:07:a5:3d:12:
fe:fe:03:ae:84:1a:71:84:6a:21:da:19:8a:c3:aa:
b9:24:f2:08:5e:48:08:41:f7:83:18:0a:44:5f:da:
0a:fa:ea:06:0f:4c:68:0d:57:6d:ef:d6:a4:f4:e0:
7c:e2:85:14:90:f6:3d:f8:ab:c2:7f:9b:57:16:0b:
34:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3E:BB:08:17:26:15:12:E4:0C:AF:C0:B0:ED:92:BA:9A:91:CE:EC
X509v3 Authority Key Identifier:
keyid:73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/5258D3D4BCE011EFAB38225AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
138.19.0.0/16
165.84.128.0/18
Signature Algorithm: sha256WithRSAEncryption
44:ae:72:f4:f7:fd:8d:2d:12:9d:4b:e2:b4:c9:d7:3b:17:63:
7c:1d:0b:b4:41:7c:2c:49:30:5a:d0:06:83:29:44:35:fb:fd:
60:b9:fb:50:14:26:5d:a2:d2:b1:d6:71:82:13:78:06:54:6e:
21:35:d3:63:1c:50:7a:3c:90:12:56:dc:b2:a5:5d:b8:cd:0d:
7b:41:b6:90:ac:0b:d5:78:cd:b3:5b:03:13:28:e1:31:38:09:
0a:de:88:f7:31:1a:cc:09:71:6a:1b:39:b1:82:b4:81:ef:cf:
86:c7:71:7b:66:22:db:9d:28:83:73:a9:40:28:c5:58:a7:2a:
ba:5d:0a:db:6d:6e:55:10:bd:3d:6c:90:68:3c:d6:79:16:08:
11:7f:7e:e7:1f:d1:7d:ff:76:68:1e:2d:e3:ca:60:5d:ac:5b:
97:8f:30:66:3c:14:3b:b4:48:d6:0f:de:04:a6:f0:b3:6a:c3:
df:9d:fb:21:32:87:52:67:cd:08:ef:0d:ae:1c:36:81:82:89:
b4:c9:c2:6e:c4:13:32:09:a6:8f:21:09:03:ff:34:76:0d:25:
b4:eb:f1:03:45:49:07:d5:54:03:65:2f:f2:1a:45:a7:01:9f:
e0:c9:1f:45:25:31:74:e5:a3:49:17:02:19:0e:bc:da:6f:5b:
6b:6f:ae:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:17:58 2026 by rpki-client