
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/670B99448DD911F1843D5C1C5311F970.roa
File: 670B99448DD911F1843D5C1C5311F970.roa (raw, json)
Hash identifier: 7mgCpKMqeBXQIoSnmIOvCGihzUbiwKzPjz5fyITalUE=
Subject key identifier: 1E:BC:3B:56:8C:41:93:2A:C6:EB:4C:62:9B:7C:F3:0D:46:27:A3:BB
Certificate issuer: /CN=A919FBF3/serialNumber=B913347E6B9D77A91BB07482AE45CD74116B022D
Certificate serial: 85
Authority key identifier: B9:13:34:7E:6B:9D:77:A9:1B:B0:74:82:AE:45:CD:74:11:6B:02:2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/670B99448DD911F1843D5C1C5311F970.roa
Signing time: Sat 01 Aug 2026 18:47:10 +0000
ROA not before: Sat 01 Aug 2026 18:47:10 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 152648
IP address blocks: 2402:3ea0:f000::/36 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.crl
rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 07:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FBF3, serialNumber=B913347E6B9D77A91BB07482AE45CD74116B022D
Validity
Not Before: Aug 1 18:47:10 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6a6e3f2e-8928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:64:2c:9f:ae:fc:33:8c:99:b0:7f:6f:37:a5:
09:bf:2f:34:1b:df:0d:7f:af:97:46:e4:00:b4:c1:
69:fe:36:d8:ab:2e:37:20:f2:de:e1:d9:18:a6:0a:
15:66:e4:e6:36:49:69:3e:ca:0b:8e:a5:a3:17:55:
0b:fe:d1:a5:89:71:94:a5:8d:f0:53:2d:e7:5f:bd:
8c:d7:a5:ba:43:de:82:3d:ee:f4:4a:d5:c1:9f:eb:
26:d6:6e:75:df:37:5d:02:7d:f9:7c:d2:ef:50:8e:
f5:b5:83:ce:e0:c0:86:60:4a:1f:38:db:9e:ab:e1:
57:e2:4d:af:f8:bd:da:1f:53:c6:58:47:b6:bb:cf:
ad:f9:52:54:32:e6:6c:2a:f0:da:5e:f9:87:34:5b:
bd:3a:08:01:5e:43:5d:8a:09:8d:5b:77:2c:df:ae:
19:8d:7a:30:f5:b9:e5:1e:01:62:08:73:6c:20:3d:
ac:2c:50:f8:b1:ad:94:d0:8d:13:ad:bd:ae:74:26:
d1:55:48:97:5d:93:9f:65:cd:a5:37:0c:2d:b8:43:
02:14:6e:20:13:dd:05:71:91:11:d8:34:13:4d:92:
ac:50:05:d8:9d:f2:0d:42:54:60:32:3e:29:8a:8e:
ad:b0:3f:57:0d:fb:84:a0:ec:cd:b4:ea:95:fd:00:
a7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BC:3B:56:8C:41:93:2A:C6:EB:4C:62:9B:7C:F3:0D:46:27:A3:BB
X509v3 Authority Key Identifier:
keyid:B9:13:34:7E:6B:9D:77:A9:1B:B0:74:82:AE:45:CD:74:11:6B:02:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/670B99448DD911F1843D5C1C5311F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:3ea0:f000::/36
Signature Algorithm: sha256WithRSAEncryption
41:f1:9d:8c:36:31:af:d0:73:a8:15:e9:3b:7e:d2:b7:05:6b:
2e:aa:37:7a:79:b2:f7:7b:17:a7:d3:7d:16:16:9d:79:b6:bc:
c0:7b:51:3c:6b:b5:a0:fa:88:65:08:3d:34:4e:22:b4:b5:50:
3a:44:32:0f:59:cd:ff:ea:30:7f:63:c1:2e:d0:ce:55:00:9b:
23:2e:4c:f2:61:91:03:4b:54:9d:b6:c1:ae:6f:75:0b:09:45:
b8:9e:a8:04:7f:ab:e2:71:bb:0c:15:be:7b:3c:b9:f7:43:bd:
0d:9d:c0:d4:45:d0:31:c1:1d:6e:fc:e9:bd:ac:4c:74:91:04:
a7:01:99:e6:6c:84:ea:e1:c4:1f:f1:fe:34:51:e4:7d:69:25:
f5:f5:46:76:52:1e:88:10:de:69:dc:fc:34:72:d8:bd:3d:b7:
21:b7:82:ec:bf:fa:08:58:ed:f7:15:ff:08:e0:bb:12:5d:f5:
6c:50:0e:33:78:3e:08:a7:42:22:43:88:2d:ad:20:ce:4b:5b:
2d:a9:ab:11:77:a4:df:55:ac:c7:34:90:e1:a5:58:f1:1f:4b:
ed:83:7d:3c:97:3f:e9:53:61:f2:20:b3:7c:43:2f:4f:61:a5:
47:37:49:ec:e4:5e:5c:87:9c:88:27:a5:6b:1d:36:79:73:f8:
f9:3e:09:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:34:37 2026 by rpki-client