
$ rpki-client -vvf rpki.apnic.net/member_repository/A914559B/1A20F38C859F11F1985CA89058A30FBC/D413AF14859F11F1B8D8F1D758A30FBC.roa
File: D413AF14859F11F1B8D8F1D758A30FBC.roa (raw, json)
Hash identifier: bUt0jeYiXYqrA9tFGhrXE5Kg8YJQgwxM+PDpPRCL7fg=
Subject key identifier: A1:08:B5:68:9B:F0:9E:CB:A0:E3:B4:10:23:38:DB:BA:AE:C7:1D:F1
Certificate issuer: /CN=A914559B/serialNumber=EB744DA4D575D67FFF8988C9D5623E53740CA3B7
Certificate serial: 02
Authority key identifier: EB:74:4D:A4:D5:75:D6:7F:FF:89:88:C9:D5:62:3E:53:74:0C:A3:B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63RNpNV11n__iYjJ1WI-U3QMo7c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914559B/1A20F38C859F11F1985CA89058A30FBC/D413AF14859F11F1B8D8F1D758A30FBC.roa
Signing time: Wed 22 Jul 2026 07:34:53 +0000
ROA not before: Wed 22 Jul 2026 07:34:53 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 154749
IP address blocks: 2001:df7:2d40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914559B/1A20F38C859F11F1985CA89058A30FBC/63RNpNV11n__iYjJ1WI-U3QMo7c.crl
rsync://rpki.apnic.net/member_repository/A914559B/1A20F38C859F11F1985CA89058A30FBC/63RNpNV11n__iYjJ1WI-U3QMo7c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63RNpNV11n__iYjJ1WI-U3QMo7c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914559B, serialNumber=EB744DA4D575D67FFF8988C9D5623E53740CA3B7
Validity
Not Before: Jul 22 07:34:53 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a60729d-ec55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:49:40:1e:c1:ff:af:ac:79:f4:b0:e5:42:89:
ca:7e:e7:00:be:c4:93:15:6d:af:3a:55:44:39:b6:
93:f9:4a:ff:08:9f:b2:53:0e:ce:9b:cd:08:d6:94:
56:29:73:da:b0:f4:0a:ec:a3:a5:29:b2:0d:47:20:
86:92:20:23:47:8c:4f:cf:1e:c6:b2:a1:2e:83:c9:
e6:6f:80:bc:6c:07:8d:01:15:91:84:36:3f:47:a3:
7d:a7:8e:96:74:2c:76:ca:f2:69:97:0d:88:67:1d:
24:73:3b:06:c7:34:77:5b:24:52:39:9a:b8:b8:e5:
a6:9d:33:a0:c4:4b:1d:ac:25:50:c9:1f:d0:a3:d4:
36:b1:1d:a0:94:4f:bb:fb:d7:4b:f7:8d:0b:68:b8:
e4:cf:0b:ee:8a:f4:ad:6d:f3:08:92:e3:ae:ce:3c:
19:99:a8:ac:2e:45:2c:dd:81:45:eb:43:1d:c5:49:
f4:cb:7c:78:85:78:d7:22:d6:12:6a:73:bf:67:8e:
76:85:03:7c:b0:82:88:46:78:e4:8d:d2:b9:33:f3:
b4:c4:26:c4:83:0c:62:a3:ab:dc:a9:6a:9c:af:19:
28:72:71:7c:0d:75:32:41:be:2b:24:a6:ee:67:36:
9e:29:bb:e2:87:32:af:e2:5a:72:fa:d2:28:6a:c6:
9f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:08:B5:68:9B:F0:9E:CB:A0:E3:B4:10:23:38:DB:BA:AE:C7:1D:F1
X509v3 Authority Key Identifier:
keyid:EB:74:4D:A4:D5:75:D6:7F:FF:89:88:C9:D5:62:3E:53:74:0C:A3:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914559B/1A20F38C859F11F1985CA89058A30FBC/63RNpNV11n__iYjJ1WI-U3QMo7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63RNpNV11n__iYjJ1WI-U3QMo7c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914559B/1A20F38C859F11F1985CA89058A30FBC/D413AF14859F11F1B8D8F1D758A30FBC.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:2d40::/48
Signature Algorithm: sha256WithRSAEncryption
da:87:82:ea:14:cc:88:f9:e9:e6:2b:be:d2:4d:d3:4b:37:47:
bb:c5:be:02:88:95:83:a6:33:35:38:62:6a:8e:5d:c7:89:08:
a8:04:ff:41:e1:59:7b:17:77:ee:35:7a:7a:80:1e:79:07:e6:
eb:05:68:b5:3c:f9:2a:02:a2:63:c3:81:06:6c:30:13:f9:92:
9a:02:2c:82:54:55:06:ed:61:14:da:26:27:57:7f:70:1a:87:
e4:91:ab:7a:ab:c5:b4:96:5c:dc:d6:d5:bc:b8:d8:04:f7:f1:
61:c4:c0:54:8f:a8:47:6d:9a:05:44:e9:da:ca:b6:72:3f:ea:
60:bc:2f:fd:d3:44:08:5a:32:e5:32:93:80:38:f1:9c:4a:c5:
58:04:4c:4d:10:5f:b2:ec:3a:c3:69:51:45:49:62:b6:55:5d:
e1:2b:2e:eb:bd:62:e3:d1:18:44:3a:1d:8c:ef:f5:80:6e:2e:
9d:99:97:de:3b:c5:21:44:d6:8a:ca:c0:6a:c1:5a:b7:9a:2a:
53:75:2d:d7:1c:39:fd:96:6c:75:75:87:64:ab:b5:1a:bc:43:
08:69:a5:1b:f3:80:2e:25:6d:13:f2:55:7d:b4:66:ca:93:2e:
53:c2:ea:1f:ff:0b:54:14:e2:ea:69:de:76:b7:2c:72:48:8d:
23:15:29:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 04:22:48 2026 by rpki-client