
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110DC8/47A94BA89C0411F18BC4D3006B11F970/F96522F49C0411F184BE8A406B11F970.roa
File: F96522F49C0411F184BE8A406B11F970.roa (raw, json)
Hash identifier: 1xZyMigiR+pu00j4Ut3plcNYpqKsQ/wvCvsS9i+0vRM=
Subject key identifier: 22:CC:9E:E7:3A:61:2F:E8:4B:E9:DE:2A:F6:96:86:7F:23:CE:28:28
Certificate issuer: /CN=A9110DC8/serialNumber=C9001409B924733A4EDF015A52DCD413CC49B850
Certificate serial: 02
Authority key identifier: C9:00:14:09:B9:24:73:3A:4E:DF:01:5A:52:DC:D4:13:CC:49:B8:50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQAUCbkkczpO3wFaUtzUE8xJuFA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110DC8/47A94BA89C0411F18BC4D3006B11F970/F96522F49C0411F184BE8A406B11F970.roa
Signing time: Wed 19 Aug 2026 19:34:20 +0000
ROA not before: Wed 19 Aug 2026 19:34:20 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 154805
IP address blocks: 2001:df7:54c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110DC8/47A94BA89C0411F18BC4D3006B11F970/yQAUCbkkczpO3wFaUtzUE8xJuFA.crl
rsync://rpki.apnic.net/member_repository/A9110DC8/47A94BA89C0411F18BC4D3006B11F970/yQAUCbkkczpO3wFaUtzUE8xJuFA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQAUCbkkczpO3wFaUtzUE8xJuFA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 09:36:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110DC8, serialNumber=C9001409B924733A4EDF015A52DCD413CC49B850
Validity
Not Before: Aug 19 19:34:20 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a86053c-8eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:75:f3:06:80:32:57:16:2e:4b:29:b7:91:ba:
e4:f9:ce:d4:f6:b4:90:3d:4c:2d:57:ef:62:bd:4a:
91:43:16:67:02:21:5c:7d:18:d0:a3:43:da:c9:b9:
77:88:3d:2e:82:d8:86:38:0b:00:f8:43:9d:fe:2b:
f0:45:59:78:a2:28:71:02:4e:d2:08:68:10:30:98:
9d:38:d9:1c:9b:c9:18:e5:67:5d:76:56:75:2e:58:
8e:e7:8c:fe:41:20:78:8a:60:ce:4f:a5:00:3d:63:
80:d6:ed:53:fc:4c:65:28:f9:0c:4a:4a:31:a8:4d:
39:36:d1:85:97:b4:df:6b:c2:16:4f:fc:4c:45:10:
eb:11:98:95:34:69:22:72:71:97:90:72:c7:ef:1c:
41:a0:39:e5:5a:59:2e:7a:da:24:29:e1:40:56:78:
ab:22:bc:44:2d:d9:aa:20:34:5c:4f:a0:99:0b:59:
fe:92:18:87:d3:4f:a4:1e:95:b0:73:00:db:8e:14:
f2:b8:4d:47:01:78:f6:1f:51:4e:6b:06:ae:15:a9:
68:7f:ab:46:08:35:94:c9:30:4f:6a:6a:60:75:0a:
a3:c7:06:34:3e:ad:a0:5a:f6:e7:ac:0b:fc:5e:7f:
da:88:be:14:c4:30:3d:d1:ea:d5:96:76:48:4c:a4:
a4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CC:9E:E7:3A:61:2F:E8:4B:E9:DE:2A:F6:96:86:7F:23:CE:28:28
X509v3 Authority Key Identifier:
keyid:C9:00:14:09:B9:24:73:3A:4E:DF:01:5A:52:DC:D4:13:CC:49:B8:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110DC8/47A94BA89C0411F18BC4D3006B11F970/yQAUCbkkczpO3wFaUtzUE8xJuFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQAUCbkkczpO3wFaUtzUE8xJuFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110DC8/47A94BA89C0411F18BC4D3006B11F970/F96522F49C0411F184BE8A406B11F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:54c0::/48
Signature Algorithm: sha256WithRSAEncryption
2e:3b:ba:e3:c3:17:e5:bb:6a:93:c5:81:cb:6e:3c:4e:64:ef:
86:bf:c5:75:a5:34:01:9d:f1:ad:62:37:f8:53:99:7b:71:45:
92:ba:0c:9e:44:bd:86:6c:6d:28:f6:30:9e:ed:17:85:a6:ba:
d1:ba:ac:80:f2:6a:9c:e4:6e:57:71:2b:01:81:3f:40:e2:30:
23:16:6c:6d:14:f6:a3:b8:de:9d:8e:a7:c9:5d:40:f9:75:8b:
70:d8:57:ef:e2:a0:e0:3f:50:c8:7c:29:36:d1:1c:90:ea:2a:
ac:c1:a6:ef:89:a5:13:e8:1a:45:51:29:45:05:d1:d8:e9:d4:
22:02:4f:c1:9b:49:e1:d9:46:15:cd:b8:a5:f1:42:90:a7:b4:
e1:56:14:0e:30:ec:d1:74:ad:69:bb:a5:7a:c2:67:59:87:72:
2d:c2:be:f9:38:29:4b:d8:7f:5d:ba:26:f9:4f:d5:19:43:ab:
6f:a9:8f:fc:d6:26:ab:6e:4a:39:0e:b9:65:8b:23:8e:9d:11:
99:09:da:77:5c:52:9f:2e:96:7f:f2:fa:99:44:86:45:f8:c8:
23:64:b3:82:8e:3b:7f:4a:39:29:4c:f6:54:78:81:c7:6c:a1:
9c:ae:eb:9d:91:c0:76:88:af:d5:02:0b:ee:e4:0e:7d:d0:48:
9f:3a:3d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:13:53 2026 by rpki-client