
$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/95B5855C18CE11EFBCD58454C4F9AE02.roa
File: 95B5855C18CE11EFBCD58454C4F9AE02.roa (raw, json)
Hash identifier: GltJ8ldfOd4MALKW5R9sn4CvSE9nA9cuV/EopB0f2fc=
Subject key identifier: D1:F4:77:75:7C:39:71:78:B7:DB:CB:7C:CB:53:5B:21:67:88:A7:8A
Certificate issuer: /CN=A911647C/serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003
Certificate serial: 0ABC
Authority key identifier: 73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/95B5855C18CE11EFBCD58454C4F9AE02.roa
Signing time: Fri 26 Jun 2026 20:23:53 +0000
ROA not before: Fri 26 Jun 2026 20:23:53 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 10103
IP address blocks: 138.19.0.0/16 maxlen: 24
165.84.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl
rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:58:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2748 (0xabc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911647C, serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003
Validity
Not Before: Jun 26 20:23:53 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a3edfd9-40f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4b:5f:47:52:ca:09:03:b2:05:2e:4d:57:60:
a0:93:18:f3:1e:38:2e:b7:86:0d:b8:37:86:6f:42:
e7:82:62:8e:70:28:3f:7f:18:30:53:ed:2c:1e:c3:
b6:c4:50:02:4b:41:e7:ea:aa:ee:e0:16:85:39:29:
24:e4:d1:29:51:61:37:be:59:17:25:e0:63:a7:3c:
bb:27:7e:63:4d:44:f5:c1:85:74:4a:13:8f:78:bc:
50:17:28:38:d6:94:a5:2a:d3:fd:03:66:69:2c:2c:
48:55:77:89:ed:b4:4b:99:0b:57:03:22:79:7f:0d:
56:e0:40:0c:87:8b:95:e7:96:5b:c0:1d:1c:00:97:
59:55:45:90:4a:c3:10:e7:9f:4e:d6:bf:60:eb:95:
5d:76:d2:47:5b:08:e0:ae:e8:19:1f:ec:96:2f:2d:
c6:69:7e:86:02:b3:98:b4:9c:82:ce:f3:70:2d:1a:
f9:e6:cf:4a:93:52:24:2f:f8:9a:b4:ce:40:b2:ac:
06:4f:61:6d:9c:c5:4b:e1:eb:d7:98:41:80:5c:98:
f5:2d:e9:c4:ac:54:3a:7d:fa:8c:23:bb:50:cf:b6:
1c:8e:10:b3:7a:7c:31:f5:7b:13:28:b0:8f:27:b1:
97:3d:30:66:26:c1:2e:7c:8f:2c:bd:8c:f4:b2:97:
6b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F4:77:75:7C:39:71:78:B7:DB:CB:7C:CB:53:5B:21:67:88:A7:8A
X509v3 Authority Key Identifier:
keyid:73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/95B5855C18CE11EFBCD58454C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
138.19.0.0/16
165.84.128.0/18
Signature Algorithm: sha256WithRSAEncryption
2d:99:e3:64:2f:99:6a:fa:02:fa:3e:66:8a:20:be:0f:e2:95:
d3:fd:ff:13:87:b4:9c:77:3a:97:52:9a:d7:d6:da:8d:98:08:
a5:ba:51:97:af:8b:94:b4:32:df:e2:83:96:3a:f5:a4:68:fe:
f0:52:4a:0c:29:a6:4c:e9:c4:91:bf:b0:3a:80:7d:cc:70:a1:
e3:3d:7e:09:4b:3c:08:87:1c:67:3b:2a:89:7b:77:78:69:7f:
e5:cb:2a:67:f8:53:4b:82:06:bf:b6:f5:4d:5f:f8:86:55:a1:
21:00:93:77:1c:d5:b9:1e:15:cc:da:d5:36:3a:0d:a9:48:6a:
a2:33:c6:f3:db:55:80:62:61:65:ea:9b:59:ac:5d:ff:af:e0:
95:a4:6d:22:f5:71:cf:57:78:35:a4:78:49:13:ac:c8:a8:fe:
99:43:be:d1:ec:19:b3:ca:35:0f:71:4d:83:a9:60:80:7d:39:
c4:39:ee:57:65:1e:65:b1:6c:4d:6a:f3:c8:fd:39:89:cd:4e:
8c:61:ed:af:5b:78:a6:af:1e:09:ac:fc:4d:e2:13:98:5c:37:
6e:a0:a3:d9:b8:f4:99:25:f1:30:a4:61:bf:74:2e:e6:ef:53:
e3:ed:07:de:7c:ba:49:11:9b:98:fe:dc:70:b2:2e:8f:5a:8a:
93:c0:f6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:42:40 2026 by rpki-client