
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/BFF3C17CD23A11EB8E7BA35DC4F9AE02.roa
File: BFF3C17CD23A11EB8E7BA35DC4F9AE02.roa (raw, json)
Hash identifier: sAHUpll1wERzRUhYLElWk5j/ikn2NwO+2ZHNAkpXjyI=
Subject key identifier: BF:34:46:74:2C:C9:84:BD:8D:CB:88:71:DD:F0:29:D6:3D:66:9B:64
Certificate issuer: /CN=A918036A/serialNumber=57840FB441D2B34C8EE699D264712B4A5E0FED8D
Certificate serial: 113E
Authority key identifier: 57:84:0F:B4:41:D2:B3:4C:8E:E6:99:D2:64:71:2B:4A:5E:0F:ED:8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4QPtEHSs0yO5pnSZHErSl4P7Y0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/BFF3C17CD23A11EB8E7BA35DC4F9AE02.roa
Signing time: Thu 24 Sep 2026 17:34:32 +0000
ROA not before: Thu 24 Sep 2026 17:34:32 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 134707
IP address blocks: 2406:a240::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.crl
rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4QPtEHSs0yO5pnSZHErSl4P7Y0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 17:34:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4414 (0x113e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918036A, serialNumber=57840FB441D2B34C8EE699D264712B4A5E0FED8D
Validity
Not Before: Sep 24 17:34:32 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ab55f28-1969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1d:63:5e:c8:75:47:87:00:91:9d:28:a0:93:
84:6a:6c:51:da:ac:12:e0:e1:ff:79:e4:76:ae:59:
6c:09:a4:0b:27:4f:c5:64:a1:c3:13:c9:62:95:73:
e1:e2:1e:2b:f4:0e:5e:b2:83:e6:bb:c0:fb:3b:f0:
e3:ae:9f:7b:b0:c5:00:36:cf:54:f5:e4:03:f9:7f:
6c:d8:1b:1b:8a:73:b3:39:a9:a8:c9:bf:03:61:37:
8e:0d:79:03:f6:f8:95:3b:74:0a:8c:50:9f:38:50:
c2:34:87:74:0f:ea:26:83:2b:47:7c:81:0a:c7:4b:
00:e6:0d:97:f6:ae:b0:77:12:93:fa:82:7e:8d:eb:
cb:da:06:c8:82:07:8e:2b:0f:56:6a:5a:10:19:0e:
83:10:6d:cd:fe:cc:89:54:66:03:2d:b2:e9:a2:66:
86:b4:f0:fb:7d:c1:c9:ed:8d:56:70:86:cc:b2:a8:
12:c0:e4:40:8f:50:65:c5:af:0d:52:24:05:85:f3:
ba:6a:32:0a:07:01:17:4a:fd:37:90:52:86:c8:3a:
c6:15:d4:14:ec:a0:86:c0:34:75:9d:41:b8:ec:42:
16:24:65:de:12:52:4f:f5:55:7e:fb:42:db:0a:22:
a8:1a:d5:43:c3:65:10:ae:48:fb:18:14:73:e5:88:
af:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:34:46:74:2C:C9:84:BD:8D:CB:88:71:DD:F0:29:D6:3D:66:9B:64
X509v3 Authority Key Identifier:
keyid:57:84:0F:B4:41:D2:B3:4C:8E:E6:99:D2:64:71:2B:4A:5E:0F:ED:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4QPtEHSs0yO5pnSZHErSl4P7Y0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/BFF3C17CD23A11EB8E7BA35DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:a240::/32
Signature Algorithm: sha256WithRSAEncryption
5e:a9:85:4d:76:2c:9a:75:22:ef:9b:70:0d:a1:2f:c8:05:38:
08:d8:38:03:34:61:14:69:55:86:57:58:c8:34:89:3a:3f:7a:
18:1e:62:37:5e:39:40:d2:d2:d5:82:f4:45:b7:f9:82:50:53:
36:c9:3c:11:a4:e4:44:25:68:05:c0:73:10:35:0a:71:0a:07:
e0:fa:7c:90:a0:c5:b0:f1:bf:b9:97:83:fe:55:2e:74:cf:b8:
d4:32:2a:7e:2a:85:5b:b5:98:87:cb:b2:87:e0:66:26:54:1b:
79:52:b3:60:29:3e:13:9e:fc:e3:4c:6a:fc:73:6b:44:28:22:
67:8c:4a:c1:ba:92:74:86:fb:a9:73:92:c0:77:15:ce:2c:b8:
95:6e:ca:6e:8c:7b:52:9c:47:17:bd:15:1d:bc:5a:e5:55:de:
17:4c:64:21:91:55:f8:f4:3f:83:3b:db:35:46:3b:95:88:6c:
56:00:72:2d:40:1a:c7:d4:41:c3:c1:dc:87:d5:c1:1a:c7:b9:
a7:25:c2:f7:85:3a:49:27:42:0f:e3:47:2e:1d:9b:86:1a:57:
46:12:a3:88:f8:28:56:0f:c3:89:2c:9e:9e:73:30:a3:ca:33:
a2:52:fe:fa:cf:f9:73:bf:7f:17:2d:d0:04:0b:18:1e:2f:43:
0e:14:c4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:15:09 2026 by rpki-client