
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/5D313B1C31DA11EEBE28A546C4F9AE02.roa
File: 5D313B1C31DA11EEBE28A546C4F9AE02.roa (raw, json)
Hash identifier: 0AY62NK98rk5TGBieSIptVBTxWIVtw7dVGDsaIJvGI8=
Subject key identifier: D6:A5:E9:F7:48:50:90:EC:49:26:FF:A5:8F:66:42:E2:1E:E9:BA:0B
Certificate issuer: /CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
Certificate serial: 01FA
Authority key identifier: 76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/5D313B1C31DA11EEBE28A546C4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:42:58 +0000
ROA not before: Wed 05 Nov 2025 03:47:40 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 55891
IP address blocks: 2405:4cc1:100::/40 maxlen: 40
2405:4cc1:200::/40 maxlen: 40
2405:4cc1:300::/40 maxlen: 40
2405:4cc1:500::/40 maxlen: 40
2405:4cc1:600::/40 maxlen: 40
2405:4cc1:700::/40 maxlen: 40
2405:4cc1:800::/40 maxlen: 40
2405:4cc1:900::/40 maxlen: 40
2405:4cc1:b00::/40 maxlen: 40
2405:4cc1:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl
rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 506 (0x1fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148AC0, serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
Validity
Not Before: Nov 5 03:47:40 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a585d2-28e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c4:93:39:6a:f4:b1:28:dc:8e:4a:d5:0a:80:
25:68:ce:27:e4:81:56:2e:21:99:c7:07:bd:89:24:
b3:c5:7e:e3:72:ce:ec:be:6b:bd:a0:94:09:4b:9f:
be:60:1b:a8:91:6f:cc:f2:75:cc:47:03:a7:9f:c3:
1b:19:ff:50:8e:11:82:a3:fb:e2:5b:68:79:a0:dc:
8c:7f:15:5d:7c:8b:74:a5:85:a8:57:26:b7:1c:85:
5e:d5:af:52:48:5c:18:a5:ff:01:e6:5f:e5:b8:98:
52:bf:24:90:8f:19:5c:a9:80:2e:76:20:ec:b4:fd:
77:41:4c:eb:12:28:28:1b:f5:b1:94:f5:69:07:bf:
73:06:67:70:0c:3d:6c:e2:44:31:18:95:a6:2a:3d:
6b:4f:46:4d:f8:a2:25:8e:d0:f7:98:5f:81:a0:f8:
26:05:7c:83:07:58:3b:b1:dc:57:12:75:ba:56:41:
ea:72:e0:ce:38:46:74:44:10:63:0a:64:f7:b7:a7:
3a:b5:84:1c:61:4f:a8:da:86:72:09:ea:43:14:00:
11:1c:d9:bd:61:79:85:83:c2:d4:3e:dd:84:57:92:
2c:4a:ce:27:87:ca:41:54:09:cb:09:60:f4:fc:53:
f3:8e:4b:34:5c:06:30:f1:75:23:5c:4c:9d:d6:7c:
ad:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A5:E9:F7:48:50:90:EC:49:26:FF:A5:8F:66:42:E2:1E:E9:BA:0B
X509v3 Authority Key Identifier:
keyid:76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/5D313B1C31DA11EEBE28A546C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:4cc1:100::-2405:4cc1:3ff:ffff:ffff:ffff:ffff:ffff
2405:4cc1:500::-2405:4cc1:9ff:ffff:ffff:ffff:ffff:ffff
2405:4cc1:b00::/40
2405:4cc1:1000::/40
Signature Algorithm: sha256WithRSAEncryption
0e:70:0b:4d:c7:6f:ce:aa:a8:81:02:ac:f0:2f:ef:cc:02:38:
bf:51:b4:c6:a5:a7:39:ff:95:39:ad:2a:8f:8f:93:b6:58:69:
06:0f:d6:f4:33:30:d2:66:5c:f3:ef:bb:e3:b8:d0:06:ef:7c:
48:97:96:5b:ef:fb:2c:06:73:22:69:f8:5f:92:7d:ae:59:03:
83:ff:7b:2e:a4:f4:b1:b5:71:b1:b4:85:fc:2c:5d:c9:71:e4:
23:89:6a:33:4c:db:2d:81:a1:0b:87:1f:d5:ae:f3:b0:f9:3e:
18:f3:0c:00:ae:f3:38:ff:7e:16:07:9e:d4:7a:0f:67:f4:ae:
cb:c7:a0:a5:36:8e:ea:9e:b1:d5:5b:32:15:08:79:b9:2f:54:
aa:c8:c0:5b:a8:de:39:d5:a7:93:0a:25:21:5b:59:35:6f:99:
3e:e5:5d:e6:95:d5:10:f7:32:a5:d1:56:b2:67:05:0b:01:d0:
c7:fe:80:17:7c:c0:bf:59:ab:70:b8:93:42:b6:de:d7:b7:80:
1d:89:26:f2:c2:d6:fe:ce:e5:68:bf:5f:e5:90:b7:b2:e4:fe:
66:df:59:4f:a4:c7:f0:b1:cd:e0:95:a3:2b:b1:8a:40:e2:f6:
0a:74:6b:ec:f3:a5:04:df:dd:3d:85:5b:d1:6d:36:d5:81:bc:
25:23:95:40
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:56:52 2026 by rpki-client