
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/B6E9F4E89E0411F192F8ACA34A11F970.roa
File: B6E9F4E89E0411F192F8ACA34A11F970.roa (raw, json)
Hash identifier: i+mz8RKuF8p3hv1YLSt70vMBBM5Cu/pBQuz04gTb5ec=
Subject key identifier: 82:59:99:B4:A7:FD:0C:01:25:84:DE:EE:8B:12:66:E6:66:39:9A:FC
Certificate issuer: /CN=A9122796/serialNumber=2397A9D5983683626BAD2C147FB7D33C49BDC6BB
Certificate serial: 02
Authority key identifier: 23:97:A9:D5:98:36:83:62:6B:AD:2C:14:7F:B7:D3:3C:49:BD:C6:BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/B6E9F4E89E0411F192F8ACA34A11F970.roa
Signing time: Sat 22 Aug 2026 08:37:31 +0000
ROA not before: Sat 22 Aug 2026 08:37:31 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 132367
IP address blocks: 2402:6ca0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.crl
rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 09:37:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122796, serialNumber=2397A9D5983683626BAD2C147FB7D33C49BDC6BB
Validity
Not Before: Aug 22 08:37:31 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a895fcb-81d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ec:99:77:d1:03:17:ff:7c:62:38:3a:7a:60:
62:88:05:21:2d:d3:ee:4b:63:94:60:ec:4d:82:14:
6e:5c:9b:35:1d:2e:9f:40:9d:a9:6e:be:2f:0d:76:
48:5d:a3:0b:08:27:6f:35:a0:0d:18:76:af:32:b0:
34:48:03:92:49:0b:23:5e:6b:8f:a9:2d:fd:01:c4:
cb:3e:7f:c1:7b:6d:90:b5:f1:88:63:ed:12:66:9f:
fc:d9:f3:c8:1d:42:22:87:0c:1f:97:3f:22:79:65:
cc:91:a3:27:9a:d5:cf:17:73:f7:01:4d:01:f2:3b:
dd:6e:5a:91:91:74:67:4e:18:2c:49:bf:da:d7:6e:
e6:a1:7b:69:34:0e:b0:8b:cf:42:29:51:ec:5e:1e:
33:75:f2:f0:d9:0f:41:4c:2d:17:44:4d:c0:7f:d6:
be:6f:6a:a8:dd:2b:0a:a6:8b:19:e7:54:c5:05:06:
08:af:42:f3:71:6d:49:4d:45:17:57:9c:64:0f:6d:
22:ec:aa:47:49:12:70:2f:cf:36:34:84:b3:0d:b7:
88:57:47:21:ba:9d:40:29:54:94:3e:7c:76:25:08:
7d:cf:1e:75:bd:3b:0b:b9:49:89:34:23:68:b2:ad:
d6:8e:93:2f:c7:f2:92:82:35:6c:b0:f8:32:c1:43:
95:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:59:99:B4:A7:FD:0C:01:25:84:DE:EE:8B:12:66:E6:66:39:9A:FC
X509v3 Authority Key Identifier:
keyid:23:97:A9:D5:98:36:83:62:6B:AD:2C:14:7F:B7:D3:3C:49:BD:C6:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/B6E9F4E89E0411F192F8ACA34A11F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:6ca0::/32
Signature Algorithm: sha256WithRSAEncryption
49:03:fc:a6:78:d0:c3:8c:53:d8:5c:2a:4d:03:d1:d9:48:72:
9b:76:d6:7f:63:eb:49:8c:f2:36:ef:8a:d0:7d:66:8c:a9:97:
60:13:ce:6a:05:c6:d5:bb:87:14:d7:82:c4:f5:f4:4f:a9:79:
16:35:28:24:32:5b:d5:4c:3b:a4:48:ff:87:80:8c:18:75:46:
62:bf:b1:22:b9:40:47:2c:d2:18:aa:18:66:b5:ee:ca:15:c9:
bf:70:65:bf:63:b2:da:41:67:5f:1c:27:7f:7a:5e:62:8d:20:
02:89:8e:05:28:00:5b:26:1b:32:dc:01:40:af:e1:85:f9:d6:
9a:14:9b:b8:84:83:b6:5b:d0:99:15:43:4d:0f:cc:a1:1d:3f:
16:e7:27:bf:1f:7b:e6:1a:ee:f0:72:20:11:2b:c5:26:59:b1:
54:4e:25:3c:fa:3c:30:03:32:64:5c:96:04:a7:e3:39:53:5c:
5e:6e:53:c3:8c:99:d0:d8:47:f4:f1:47:df:04:32:98:c6:b8:
10:2c:93:5b:b2:96:35:9b:e6:25:48:cb:ac:f3:ea:fa:42:ce:
96:fe:de:75:5c:aa:d3:8a:81:b0:df:9f:05:97:f6:25:ec:19:
87:7d:2e:aa:6e:44:76:f8:0f:77:e6:04:a2:89:79:41:d8:60:
a6:1d:b4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:20:23 2026 by rpki-client