
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/C8171E8EC04D11F081466417C4F9AE02.roa
File: C8171E8EC04D11F081466417C4F9AE02.roa (raw, json)
Hash identifier: F2rHWA0aG3jOYck+BArfetJHmQYT8RWz4zDyWgQQ0/Q=
Subject key identifier: A3:56:FD:DA:AD:9D:E6:34:94:CA:C0:20:6B:42:69:94:B3:E5:47:2E
Certificate issuer: /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E
Certificate serial: E4
Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/C8171E8EC04D11F081466417C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:14:17 +0000
ROA not before: Fri 13 Feb 2026 06:25:42 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 149014
IP address blocks: 2404:de80:0:26::/64 maxlen: 64
2404:de80:c00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl
rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Mar 2026 06:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E
Validity
Not Before: Feb 13 06:25:42 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a481f9-06f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:aa:8b:57:97:29:c3:f1:7c:00:88:c8:0e:cb:
b2:85:25:84:e4:23:d0:15:5f:aa:30:69:1b:8f:77:
72:ab:e0:a9:63:e8:ec:e6:a6:3b:13:97:97:de:c9:
b3:b7:51:a8:5f:7f:5d:dd:a2:54:36:fa:8f:a8:99:
f8:87:8c:d4:0a:17:a3:2a:f7:4f:5d:3a:b2:47:31:
3d:db:0c:82:b7:cc:67:7d:da:df:2a:5c:80:0f:96:
b7:46:44:64:21:ca:b8:35:d1:88:79:50:9c:dc:1f:
10:24:4c:f1:6a:24:48:b6:26:dd:2e:21:12:04:7d:
3e:81:cd:41:7e:12:cf:d6:be:62:82:13:14:c7:ed:
5f:1c:a5:cc:ce:c0:96:6f:3a:6c:2d:c4:dc:18:bc:
7f:82:89:f2:aa:9f:ee:8b:51:b3:3e:f6:bf:6d:48:
74:24:29:5f:78:dc:ac:cb:83:6d:ce:2f:20:72:76:
6f:88:fd:cd:fe:b0:97:98:e5:3b:20:98:ac:6e:ac:
e0:f5:c8:0b:6a:0e:d1:15:6d:9a:f1:30:2f:e7:1a:
ee:74:d4:98:b4:c1:ea:c2:2e:dd:29:19:ed:73:58:
b2:14:2e:67:fc:8d:41:bd:a3:31:1f:16:04:0b:5c:
79:dd:e9:90:7a:21:a2:29:9b:17:ad:7a:b2:b1:c1:
71:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:56:FD:DA:AD:9D:E6:34:94:CA:C0:20:6B:42:69:94:B3:E5:47:2E
X509v3 Authority Key Identifier:
keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/C8171E8EC04D11F081466417C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2404:de80:0:26::/64
2404:de80:c00::/40
Signature Algorithm: sha256WithRSAEncryption
38:6f:a7:53:b0:62:9b:b3:58:6d:63:45:b2:5a:33:17:d2:89:
9f:6e:f8:02:b0:4f:79:06:ab:c7:d3:1e:c2:0d:c5:22:fa:34:
4a:09:9d:78:07:6a:2b:51:c8:37:16:0d:78:00:3f:d8:5c:f0:
69:2c:40:d2:36:c0:86:b7:3e:8d:48:eb:77:b0:a6:b9:e7:0f:
97:68:95:83:89:cd:88:c2:75:1c:09:21:a9:96:68:5d:9a:74:
67:79:40:1b:cd:76:6e:be:9f:36:c2:17:f9:6c:de:64:1b:44:
63:50:8e:2c:46:eb:27:fa:34:ff:d3:7b:fb:8c:86:b6:e3:3c:
c0:9c:5c:8f:83:3b:16:9c:d6:15:a4:19:c8:24:bd:12:89:e9:
a9:70:8c:a0:b3:4b:95:d5:fe:fb:d3:c3:ed:8f:aa:2e:db:da:
a6:47:68:4e:1c:4d:ae:5e:a9:ab:30:a5:1c:7b:d4:21:e4:87:
96:16:4e:0c:21:0d:40:45:76:37:7e:84:68:c1:af:77:29:49:
45:d7:bd:c0:32:b4:fc:8b:cb:73:8d:cf:f9:a4:e4:1f:63:a9:
2b:b8:17:61:87:13:79:1b:86:e7:cf:e9:39:0a:b2:e3:08:e4:
ca:84:0e:d0:a3:06:30:97:86:7b:ca:8d:9a:05:bf:c9:8a:18:
b3:53:c7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 09:56:27 2026 by rpki-client