
$ rpki-client -vvf rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/E437E9AA1D2B11F1A78643DA153D8C67.roa
File: E437E9AA1D2B11F1A78643DA153D8C67.roa (raw, json)
Hash identifier: RhXXKNC+YYqsWGihres6AD8woRBHOi1Rql/obsHUIrE=
Subject key identifier: 7A:29:7F:11:B3:7E:B3:C7:B1:9A:78:2C:39:DF:76:4F:87:A9:89:9C
Certificate issuer: /CN=A913284A/serialNumber=A100863FF7AE4B4CE38AD98B7CCC37B2E56F4909
Certificate serial: 02
Authority key identifier: A1:00:86:3F:F7:AE:4B:4C:E3:8A:D9:8B:7C:CC:37:B2:E5:6F:49:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/E437E9AA1D2B11F1A78643DA153D8C67.roa
Signing time: Wed 11 Mar 2026 09:22:57 +0000
ROA not before: Wed 11 Mar 2026 09:22:57 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 132467
IP address blocks: 163.128.24.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.crl
rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:20:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913284A, serialNumber=A100863FF7AE4B4CE38AD98B7CCC37B2E56F4909
Validity
Not Before: Mar 11 09:22:57 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69b13471-299a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ac:b2:c7:91:77:53:76:2f:fd:2a:05:ad:57:
df:ed:73:62:ef:f3:48:8b:13:a7:30:e1:39:46:aa:
56:4b:53:59:79:72:38:5c:f5:f8:24:7a:8f:ed:ef:
81:54:77:13:e9:e6:5c:10:e6:b4:a9:0c:a4:85:31:
d8:48:b5:45:9c:5c:1e:5d:7b:a3:74:51:3e:bd:a1:
7a:59:ff:3f:4b:e3:ad:86:94:6b:53:35:09:c4:84:
41:88:a2:7e:96:70:ae:e0:7a:39:bf:fa:db:d4:11:
08:b8:f4:07:49:3c:0a:59:41:11:2b:ca:e8:a4:e1:
86:b8:fb:56:bb:08:a7:f8:69:54:50:f4:32:2d:47:
1e:b6:13:97:51:d4:2d:0c:85:fe:a9:b5:19:17:c6:
fc:72:83:9c:20:6c:a5:47:91:10:19:72:f0:a9:f1:
e6:f1:39:18:d2:9c:12:34:c3:12:07:65:b0:74:e4:
3e:1e:3a:fe:3e:c4:01:d0:b0:73:41:a3:aa:39:65:
99:4d:04:7e:2d:ab:cb:67:50:f4:42:69:85:39:30:
7e:e0:82:10:df:59:ef:3b:2f:9f:b5:6e:01:a0:cd:
8e:ec:6c:24:63:e3:de:87:47:0b:62:0f:e8:e8:32:
05:02:40:f4:e0:80:ca:92:26:4e:70:ea:a4:29:60:
cc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:29:7F:11:B3:7E:B3:C7:B1:9A:78:2C:39:DF:76:4F:87:A9:89:9C
X509v3 Authority Key Identifier:
keyid:A1:00:86:3F:F7:AE:4B:4C:E3:8A:D9:8B:7C:CC:37:B2:E5:6F:49:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/E437E9AA1D2B11F1A78643DA153D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
163.128.24.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:1a:f6:0d:0a:a6:e8:1b:b2:b3:75:77:f7:7c:b3:82:01:0b:
af:ef:b4:16:38:31:32:cd:82:28:20:28:71:52:58:1f:9b:d4:
e1:a4:97:cc:d5:42:a5:48:d9:02:5e:8e:99:c0:5b:95:9a:af:
96:35:cb:bd:fd:75:94:1f:aa:3b:65:8b:97:b2:1a:4c:e3:34:
e2:4b:52:23:bf:6a:60:18:f9:a5:88:fd:06:1c:ea:1d:42:6c:
00:74:a3:bd:61:c6:86:b7:f2:69:e7:94:47:9d:2f:14:b9:50:
85:15:b4:6a:eb:6c:76:d7:46:4b:ed:2d:86:c8:9d:b1:62:03:
04:4d:a4:07:3a:04:18:1a:6f:55:97:fb:0e:3a:a3:07:99:7a:
02:93:ca:96:02:b8:08:d0:63:8d:4c:0b:9b:28:4c:b5:2d:71:
d4:f0:ce:c9:05:e0:d1:7a:04:86:9a:f0:af:32:a1:9b:0f:2b:
c9:91:2c:6a:1c:cc:d1:0f:2b:62:df:89:c5:4e:b9:46:ee:06:
de:69:97:3d:f5:78:78:aa:17:77:37:9a:1e:78:7b:57:0f:f4:
58:90:e9:d7:66:a3:a8:9e:22:0b:f4:88:2a:9c:0c:25:af:01:
24:e3:33:d8:5e:4a:85:9c:e5:5b:52:2e:57:b8:56:44:c4:1c:
4b:f9:e3:fe
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:42:18 2026 by rpki-client