
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/C52139068F5211F1B6983DE74611F970.roa
File: C52139068F5211F1B6983DE74611F970.roa (raw, json)
Hash identifier: qT74l92aOGYUjibF7+g12VL2jQfSJigV+bofZ+YyvR0=
Subject key identifier: 09:8C:5E:58:64:66:03:A2:68:B8:1E:12:7E:4E:CA:6C:35:B1:D5:49
Certificate issuer: /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Certificate serial: 14B4
Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/C52139068F5211F1B6983DE74611F970.roa
Signing time: Mon 03 Aug 2026 15:48:28 +0000
ROA not before: Mon 03 Aug 2026 15:48:28 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 135542
IP address blocks: 2402:f5c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl
rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 16:51:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5300 (0x14b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Validity
Not Before: Aug 3 15:48:28 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a70b84c-a979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b5:89:b5:30:e8:e2:6b:f7:a4:c7:9d:14:06:
5d:28:97:fa:8d:31:af:b1:ff:8a:cc:cd:5c:74:ff:
7a:41:88:3e:f8:36:5c:ce:aa:f4:c2:4b:8d:ae:fb:
5a:a0:17:46:5c:e7:fc:b6:66:75:0a:e2:28:16:f4:
24:5a:09:64:0a:46:29:23:86:10:63:6e:cd:b5:08:
a5:b3:8c:f3:15:6d:1d:65:e4:a6:f5:4b:b9:08:f8:
ce:ea:c2:91:d6:c3:53:88:40:2b:c4:0c:d1:f1:00:
f4:7e:d5:61:16:ed:59:49:1e:ab:53:9a:4b:d2:ab:
80:66:2f:92:1a:93:1c:e7:2b:fd:1e:f3:11:4d:54:
27:be:81:cf:ca:be:c5:64:86:14:f4:2c:03:fa:57:
e5:46:c8:35:46:3b:57:c6:f6:1e:7f:63:6b:49:50:
07:5e:5d:9d:85:72:9f:b8:67:d6:03:9d:6c:53:bc:
6f:4f:b9:fb:7f:25:d1:a2:ca:f8:65:eb:c7:13:cb:
c8:00:cd:4f:17:ae:ae:92:d7:29:9e:18:f2:08:53:
1b:20:fb:01:e3:c1:a8:d2:dc:a7:cc:cd:bf:53:b8:
56:5f:6a:a3:b5:ff:f4:66:81:7e:1e:e5:f7:e5:87:
1c:b9:55:c5:2a:c7:f3:f0:7d:5d:95:43:a7:9b:4c:
6f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8C:5E:58:64:66:03:A2:68:B8:1E:12:7E:4E:CA:6C:35:B1:D5:49
X509v3 Authority Key Identifier:
keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/C52139068F5211F1B6983DE74611F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:f5c0::/32
Signature Algorithm: sha256WithRSAEncryption
1e:1f:3e:f4:42:cc:ca:6e:8b:a0:ac:98:e4:d5:11:63:4a:6f:
56:9e:32:03:7b:40:fd:f7:ac:6c:67:e0:9e:ca:65:52:77:23:
89:e4:56:13:64:71:3a:21:45:a2:cb:33:81:f6:07:b3:c2:e0:
e7:f6:fc:5c:f6:5b:bb:17:94:7c:63:e5:c3:82:ad:55:60:fc:
a1:63:11:df:57:e3:d8:a7:3e:a8:de:4e:96:7d:81:22:f5:5f:
e6:ea:a0:f8:0d:1c:f1:e5:e7:28:af:e5:b6:58:54:bd:c6:e0:
26:b1:7f:e6:c0:e3:41:c6:99:16:6b:b5:6f:b4:20:34:d7:dc:
d2:d7:b0:f7:57:34:f0:e0:25:73:2d:4d:93:da:66:5e:bb:aa:
fd:a2:eb:72:41:e1:2a:f7:b9:4a:99:16:55:03:47:a2:f4:34:
ba:cf:58:97:49:13:55:b7:b9:0d:d0:9b:0b:6c:20:db:bd:c8:
02:16:ed:c4:ae:0e:21:9a:5b:17:cf:35:3f:a9:0b:74:15:ea:
ea:51:17:12:3c:89:b1:4a:75:a2:6c:f7:73:f2:7a:29:ef:ec:
31:15:77:d9:bc:cb:08:3d:3b:a0:14:12:e4:f4:8a:e2:45:2e:
c4:af:7e:40:ba:95:b4:0b:66:94:79:72:45:33:7d:4f:20:d6:
de:9b:74:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 11:28:19 2026 by rpki-client