
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/F943257E12F511EDA9E7C939C4F9AE02.roa
File: F943257E12F511EDA9E7C939C4F9AE02.roa (raw, json)
Hash identifier: /qXHBT4MA1qmjnYwgB6pugXd54FZZQ+3x08eX/UUmSg=
Subject key identifier: C7:4A:DD:1C:77:FC:84:FF:57:29:AB:95:BC:8E:FF:DE:85:F6:C5:5A
Certificate issuer: /CN=A919C19A/serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E
Certificate serial: 0505
Authority key identifier: D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/F943257E12F511EDA9E7C939C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:08:25 +0000
ROA not before: Fri 12 Dec 2025 23:19:51 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 141439
IP address blocks: 2001:df5:7f80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl
rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 23:28:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1285 (0x505)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C19A, serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E
Validity
Not Before: Dec 12 23:19:51 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a46479-8681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5e:26:17:89:93:63:ce:3a:b2:98:44:ea:f9:
52:7f:34:4e:8c:52:58:04:ee:4e:5b:00:5b:1d:4d:
cc:71:94:ab:be:c0:30:d2:6d:da:a2:bb:31:b4:5a:
17:c1:c1:14:bd:8f:2e:b0:08:4b:57:cc:8f:c1:6f:
f2:82:3d:d1:cc:9f:46:af:1d:88:64:fc:aa:6f:0d:
b7:86:0f:87:fb:49:f1:38:85:c4:07:63:29:15:1f:
ce:9c:25:3e:84:3b:8b:73:e7:01:26:bf:99:d0:aa:
46:83:f0:dc:93:ef:02:0b:97:6f:ef:e7:e5:46:fb:
75:d5:f6:4c:4b:2a:18:e4:d4:06:1a:be:ca:6d:88:
88:00:a0:c3:29:c9:60:9e:72:32:e6:79:90:a3:56:
07:39:f1:99:bf:67:43:57:94:61:b2:79:8f:bd:fb:
3d:e0:29:61:8d:9d:ad:2c:64:a8:fb:12:eb:e9:43:
ad:55:f5:57:33:a8:42:a2:6f:58:bd:6e:cd:62:ed:
82:62:52:37:59:d5:eb:8c:a8:75:60:79:9b:f6:a2:
eb:0c:19:72:6b:ab:6d:e2:76:e4:b0:cd:e7:a6:0e:
1c:ef:80:ed:f9:8f:0d:92:a6:f0:51:71:d5:92:1d:
c8:49:5d:e5:0f:9e:71:c3:5e:91:da:ab:ed:16:58:
93:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4A:DD:1C:77:FC:84:FF:57:29:AB:95:BC:8E:FF:DE:85:F6:C5:5A
X509v3 Authority Key Identifier:
keyid:D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/F943257E12F511EDA9E7C939C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:7f80::/48
Signature Algorithm: sha256WithRSAEncryption
2a:e6:d0:27:64:b4:d1:09:cf:c9:3c:c1:40:1d:cd:b4:25:25:
96:47:93:c9:90:a0:2d:e4:59:9d:16:b2:4a:90:dd:7b:d4:8c:
b0:9f:0c:6a:6e:11:f3:77:8a:e5:2b:f0:1c:ee:ba:a6:a7:24:
77:7e:30:76:76:60:af:2c:22:87:4c:16:6c:d7:32:c8:50:07:
6c:1d:5d:98:6b:69:86:ab:27:1e:6c:7f:39:5d:00:e5:c1:41:
d2:37:9c:e8:24:ed:17:e0:95:b5:f0:2a:b6:1d:be:7c:a4:84:
a4:a6:37:ed:5b:26:11:1b:60:5a:35:bf:e7:58:11:cf:2c:bf:
d3:5a:54:5f:e4:11:8d:95:a7:c5:55:1e:b4:e2:24:0a:a4:2d:
f1:a7:2d:4c:d7:e8:b8:86:72:49:83:fb:f9:7f:56:0c:3c:3c:
6d:81:9d:2e:1a:d9:a3:06:07:9a:9b:fd:da:ca:79:03:f5:ff:
f0:eb:c3:77:ef:68:f5:77:c1:b4:15:18:2a:21:b9:75:25:04:
09:28:47:65:ca:15:5a:08:81:4a:c0:4a:09:40:79:26:c9:07:
1f:a3:86:2c:31:0f:2b:24:3c:d8:64:63:f4:8c:29:e7:57:e1:
6a:3d:c4:9e:f6:79:60:97:b5:bb:00:5d:d3:ee:a2:07:29:d7:
35:79:21:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:42 2026 by rpki-client