
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/8B7FA748C5F911EE8D0FDF82C4F9AE02.roa
File: 8B7FA748C5F911EE8D0FDF82C4F9AE02.roa (raw, json)
Hash identifier: GLrzVbO/eZPffRoT3cGz+iLpJergigCKe+VSGEBiwVc=
Subject key identifier: 2B:75:99:31:89:56:56:D9:F2:A4:B6:AA:CE:20:96:99:D5:D3:CD:D3
Certificate issuer: /CN=A913B018/serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98
Certificate serial: 0188
Authority key identifier: CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/8B7FA748C5F911EE8D0FDF82C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:07:29 +0000
ROA not before: Mon 09 Feb 2026 04:23:25 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 152297
IP address blocks: 2401:70a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl
rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:40:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392 (0x188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B018, serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98
Validity
Not Before: Feb 9 04:23:25 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a43a11-056b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:63:3a:0a:a8:50:12:e4:38:14:36:74:8c:bc:
5c:0e:14:4d:92:89:39:c8:83:20:fe:31:52:2c:36:
74:1b:95:f4:ac:6c:25:64:25:ee:b4:e7:5f:f8:1c:
8f:c2:f7:a0:bb:4d:2b:d2:51:1c:24:74:e6:60:bb:
cb:ef:5c:97:5d:8a:4a:0c:8c:d2:b1:55:3f:6c:a9:
6f:3c:cd:8f:82:d9:fb:5c:cf:2f:cc:b3:13:e7:9e:
a9:10:0a:7d:6c:fd:59:53:5f:7b:16:80:0e:cf:4b:
fb:77:29:26:f3:a7:41:a4:d5:62:1e:2f:22:e9:86:
41:67:8d:e9:21:30:1b:a8:7b:2b:2d:f1:41:e2:8e:
eb:1c:6c:06:0b:f6:7f:ec:04:0a:09:32:20:a1:f7:
42:a5:78:9e:be:34:97:e1:f6:30:71:da:e0:e2:b5:
1f:91:f1:32:b4:76:5e:ed:7d:5b:66:0d:21:de:56:
51:3e:c7:da:ee:2f:ec:a4:8a:2f:8e:d5:da:2e:70:
49:70:df:f9:4f:f3:4c:cf:ea:ab:ae:b4:cd:fd:3e:
50:05:53:44:d9:5b:01:e4:46:a3:e8:36:69:4c:b6:
ed:47:af:3c:d5:cb:31:ad:66:09:e9:d9:cf:ba:21:
36:33:a4:b2:e3:7f:de:39:6d:20:0f:a2:25:96:a0:
bc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:75:99:31:89:56:56:D9:F2:A4:B6:AA:CE:20:96:99:D5:D3:CD:D3
X509v3 Authority Key Identifier:
keyid:CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/8B7FA748C5F911EE8D0FDF82C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:70a0::/32
Signature Algorithm: sha256WithRSAEncryption
73:cf:b2:7c:28:72:62:5d:9d:c7:3f:78:d2:3f:77:0e:a0:61:
82:8b:9f:88:36:ee:84:00:e1:f8:5a:34:2c:64:69:a3:0d:c9:
fe:94:d3:b0:27:09:b4:aa:4a:8a:ad:34:5a:15:7f:5f:a9:2b:
ff:fe:0b:80:fa:01:e5:0c:fd:f7:5d:4f:d7:2f:ed:8b:97:ab:
4b:ce:ce:01:a2:92:71:85:e7:48:5e:75:f6:cb:c1:f3:b5:9a:
e5:b5:b5:a7:19:ec:85:ee:8a:8c:38:d4:5d:ca:06:ab:f3:cf:
38:ad:48:ba:86:91:b5:81:b2:48:3a:99:40:44:3d:69:c0:da:
af:ec:02:5f:09:95:f1:3f:61:1a:ab:a8:27:56:e2:e9:c5:64:
77:0f:65:94:24:d1:41:3f:c5:d6:05:53:ec:0e:7c:73:aa:3f:
c9:ba:ac:63:6c:05:c2:b1:a4:4d:ed:c1:27:ac:60:c9:28:e0:
90:c9:60:67:8d:bb:cc:ef:55:87:9c:c9:2d:f2:6f:ef:8a:30:
35:58:12:2e:a3:81:c8:ac:5c:f7:42:17:86:ec:6a:dc:6c:f2:
81:0a:2b:9a:44:96:c9:6f:db:7d:24:2e:8b:5c:a4:02:d6:4a:
b5:ad:2b:89:2f:94:df:18:0a:54:5b:b6:0b:ab:c8:88:6d:fe:
05:ae:d0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:24:25 2026 by rpki-client