
$ rpki-client -vvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/610B51267AE711EFACC0CA34C4F9AE02.roa
File: 610B51267AE711EFACC0CA34C4F9AE02.roa (raw, json)
Hash identifier: 68/9HvszJlWJG1Klncq6NQbI3jNLsgAJ7+57XU9yuJw=
Subject key identifier: BB:9C:07:41:C8:64:1F:08:B3:EA:B1:B9:8C:1C:54:BF:40:E3:65:55
Certificate issuer: /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
Certificate serial: 0299
Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/610B51267AE711EFACC0CA34C4F9AE02.roa
Signing time: Thu 23 Apr 2026 02:34:33 +0000
ROA not before: Thu 23 Apr 2026 02:34:33 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 151331
IP address blocks: 2400:e3e0:aa00::/40 maxlen: 48
2400:e3e0:ab00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl
rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:17:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 665 (0x299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919BE9A, serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
Validity
Not Before: Apr 23 02:34:33 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69e98539-a30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c2:83:6e:30:b1:dd:7e:a2:dc:c8:4c:a0:2e:
0e:33:c0:f2:48:d6:8a:38:45:1f:09:ee:01:8e:4e:
cf:71:f8:d8:0c:9e:7b:09:57:41:89:4a:74:06:f7:
f6:4b:0d:9e:98:16:6a:48:1e:69:92:ee:b4:79:8a:
5a:59:ca:67:b1:93:bc:23:a3:84:95:12:3a:58:5d:
bd:b5:c3:53:52:62:76:ea:e1:e7:95:2f:37:54:63:
f3:de:f1:02:82:d4:7b:4b:2b:f1:c6:7f:12:6b:8a:
0e:45:21:74:0d:f6:66:5f:93:02:32:26:f2:0a:04:
fb:b1:a7:56:b1:ad:cc:ad:19:28:5c:3a:59:c2:fc:
9c:3d:f1:a9:68:20:2b:8a:b7:d3:a6:1e:90:06:ad:
a8:a7:00:fa:b1:8f:1e:75:fe:89:56:c8:be:75:82:
d6:ec:c6:f0:e3:b6:4f:a4:5a:17:f9:66:c8:e1:86:
d7:a4:47:0d:63:4e:6a:5b:cb:51:7d:92:c4:b6:dc:
d4:c1:aa:da:2f:b2:30:56:7c:ea:2b:02:02:2d:8b:
5f:2f:9b:c7:9f:40:83:e4:8a:c6:85:f9:69:ed:8b:
21:4a:f4:0a:c4:59:c6:3b:67:5b:c8:e1:55:af:81:
2f:81:30:2c:66:69:ce:8a:b7:00:e2:aa:4c:34:3b:
3a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9C:07:41:C8:64:1F:08:B3:EA:B1:B9:8C:1C:54:BF:40:E3:65:55
X509v3 Authority Key Identifier:
keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/610B51267AE711EFACC0CA34C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:e3e0:aa00::/39
Signature Algorithm: sha256WithRSAEncryption
47:3a:47:1b:2c:86:47:ff:2c:91:e1:1a:4e:6d:35:38:95:69:
7f:58:fc:f4:9c:17:75:b2:4e:35:6e:5a:c5:64:27:12:b8:e6:
90:70:5a:90:89:98:d8:8c:8f:e2:16:c9:55:e8:9a:1a:72:90:
8c:ed:55:ec:2a:0f:35:fd:50:ce:59:17:5e:d6:e0:24:51:99:
54:72:e8:6a:21:76:f4:3c:75:a7:6c:ed:a5:d1:0a:80:b3:5f:
f0:fb:16:3b:b5:41:cb:ed:e3:6b:c8:c5:ff:17:10:e1:b5:7b:
88:8b:7a:e3:be:c6:07:82:c6:85:28:28:68:bc:0a:a0:ae:50:
e9:ad:72:f7:56:c4:9f:69:af:7d:50:0d:a1:9d:c5:18:dc:6b:
ce:16:f6:5d:31:dd:7a:b6:97:60:1a:5c:8a:80:e3:83:27:49:
7b:3e:12:25:47:c5:a5:33:ed:df:6f:01:fc:cd:22:5f:24:1d:
fe:92:e1:28:2e:95:02:e8:37:64:ea:10:60:0c:85:42:b0:8f:
80:d4:2d:11:ad:f5:e9:cf:5a:d1:d9:cc:34:4c:26:b3:51:db:
d9:24:cb:27:ed:53:13:2f:25:10:fd:f9:d6:40:88:44:ea:d1:
0d:92:59:5f:60:9b:c0:1a:e3:6e:c5:b4:72:6d:b7:ea:b6:4b:
87:3a:16:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:22:54 2026 by rpki-client