
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/BC213E3C70AF11EF9C9B2C0EC4F9AE02.roa
File: BC213E3C70AF11EF9C9B2C0EC4F9AE02.roa (raw, json)
Hash identifier: i6ZlnAPU3uWxh5AMrqKrLRC7uPLe5azEThc7wGn+rD4=
Subject key identifier: B5:4F:79:9D:66:E9:81:89:AE:FE:A2:4E:64:6B:36:AA:19:26:90:D5
Certificate issuer: /CN=A9144391/serialNumber=53E7CE943533F8D3C05649F294682A26F814F15F
Certificate serial: 0120
Authority key identifier: 53:E7:CE:94:35:33:F8:D3:C0:56:49:F2:94:68:2A:26:F8:14:F1:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-fOlDUz-NPAVknylGgqJvgU8V8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/BC213E3C70AF11EF9C9B2C0EC4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:05:49 +0000
ROA not before: Wed 09 Jul 2025 07:13:48 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 153053
IP address blocks: 2401:ae60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.crl
rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-fOlDUz-NPAVknylGgqJvgU8V8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:56:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288 (0x120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144391, serialNumber=53E7CE943533F8D3C05649F294682A26F814F15F
Validity
Not Before: Jul 9 07:13:48 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a5993d-1592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:bf:45:4b:1d:88:5a:46:c8:97:69:b4:c7:1b:
d3:27:07:94:4c:e3:e3:1b:79:7d:e3:dc:c2:1a:14:
67:b0:3a:07:95:60:c1:20:0a:a1:84:c2:c4:48:f5:
b6:cc:bc:7e:0f:8a:1a:4d:7e:d3:16:af:a2:99:d0:
06:53:2d:74:5c:8d:11:99:d6:41:23:e3:19:8f:d7:
33:76:d0:36:c2:1f:8f:c1:3a:44:2d:88:74:dd:5f:
1c:ec:c3:18:9c:0a:05:d4:10:7c:a0:25:db:58:37:
30:54:f6:9d:c8:fd:86:5c:af:c9:6d:d3:c9:bf:64:
65:ce:ec:13:45:3d:8a:55:82:08:85:85:a3:b5:e7:
d3:53:fb:7d:39:28:bf:64:c9:1b:1e:8b:1c:62:2e:
ed:1f:f1:f5:c9:7e:78:ae:62:3e:e0:ef:36:f9:65:
4b:a8:7d:25:8b:cc:9b:54:84:fc:fb:6c:77:71:1b:
3a:5b:7e:45:73:dd:fe:2a:f7:84:9c:64:03:d8:29:
d8:09:c5:49:41:b2:17:34:8d:81:0b:03:93:71:b7:
57:4f:02:00:93:e2:77:08:60:40:af:6c:3e:15:7e:
75:7b:cb:99:3b:e8:42:4e:dc:a5:c2:05:21:f4:72:
be:69:9d:f7:ea:ac:99:4d:99:2f:b0:f5:91:5f:df:
29:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4F:79:9D:66:E9:81:89:AE:FE:A2:4E:64:6B:36:AA:19:26:90:D5
X509v3 Authority Key Identifier:
keyid:53:E7:CE:94:35:33:F8:D3:C0:56:49:F2:94:68:2A:26:F8:14:F1:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-fOlDUz-NPAVknylGgqJvgU8V8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/BC213E3C70AF11EF9C9B2C0EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:ae60::/32
Signature Algorithm: sha256WithRSAEncryption
43:17:81:61:b8:1b:5f:e7:da:6e:cd:30:02:21:48:f6:65:81:
39:76:70:3a:a5:96:42:5b:ab:d0:e4:23:91:e0:de:39:e1:ca:
12:e5:37:38:00:37:45:02:50:70:f1:d0:d6:65:5d:95:27:3f:
00:4d:f0:eb:69:39:0e:0e:5d:d8:6a:76:9d:2b:0d:9a:7e:9d:
c1:6e:2b:b1:84:60:3f:17:21:b8:dc:cc:1a:e1:d2:1f:9e:1e:
c2:22:3d:7e:fb:b5:f9:67:b9:f7:11:06:bc:a9:34:35:9e:3b:
a4:1f:cf:b6:51:8e:a7:2f:40:48:a3:15:0b:4f:84:88:77:45:
67:4a:ab:ac:f9:24:2f:63:41:2d:13:2b:4f:a3:b5:91:d5:4a:
d8:45:e6:3c:5a:f7:2e:ad:95:ad:ae:b0:10:31:4a:52:e6:57:
d1:57:7c:16:7b:19:e7:30:7c:94:27:50:39:f2:78:6b:f7:e5:
71:de:25:7e:e8:fb:6b:a7:3b:e5:31:ef:1c:b4:59:92:ae:05:
d5:93:c5:23:c2:fd:5f:c3:e3:49:bd:c9:95:b5:9f:5c:5e:a2:
eb:d3:20:d7:23:e9:54:04:75:64:89:a7:2f:8e:76:54:f1:d0:
75:92:c5:c7:51:d9:52:07:b1:ae:ad:0a:9c:86:af:49:b8:fd:
1c:78:5d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:21:56 2026 by rpki-client