
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CE24A9DE739411EEB8BAE858C4F9AE02.roa
File: CE24A9DE739411EEB8BAE858C4F9AE02.roa (raw, json)
Hash identifier: 4ahWqxQvl8elCs1UptFAhORYOkZcTrsAbGkMLik0CTE=
Subject key identifier: 17:68:D9:F1:2C:63:3A:EC:30:64:78:5A:3F:13:5F:E6:9F:B1:91:F5
Certificate issuer: /CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Certificate serial: 0228
Authority key identifier: 62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CE24A9DE739411EEB8BAE858C4F9AE02.roa
Signing time: Mon 31 Aug 2026 03:51:50 +0000
ROA not before: Mon 31 Aug 2026 03:51:50 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 7718
IP address blocks: 2401:3900::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 03:51:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 552 (0x228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126996, serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Validity
Not Before: Aug 31 03:51:50 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a94fa55-6971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:df:ec:9a:54:35:11:08:88:65:39:4a:9e:f9:
48:1e:9f:b2:d3:c3:7b:00:98:3e:63:1a:32:65:b2:
20:00:c3:e3:aa:c8:39:8d:b4:f2:74:16:78:e9:f6:
32:b2:e5:c6:4b:4a:34:a7:7b:2e:6f:fb:e8:65:12:
e1:71:c1:24:20:38:f9:9c:02:e3:cf:39:ee:79:8b:
d3:2e:40:77:ca:0a:71:a9:1e:de:44:44:d9:8f:2a:
12:62:f8:ee:c6:ab:61:70:72:c5:ce:24:b6:ca:f8:
f7:df:ee:d2:2f:22:f3:eb:ed:69:b0:a3:07:96:24:
24:64:9d:c2:30:22:1c:d1:fd:6e:0d:01:9b:45:5c:
c1:6f:1b:a5:3c:6e:4e:3c:4a:4b:4a:10:02:7b:bf:
64:8e:12:3a:f4:ba:cf:26:c2:44:27:58:87:f0:93:
ed:e4:7a:20:82:57:29:0c:c7:7a:e6:dc:5c:72:19:
9f:34:fe:c7:0a:b7:fb:fc:97:1b:36:b5:c7:d5:3d:
38:e4:e4:81:a2:9c:00:0d:d9:38:2a:b3:b1:21:5f:
91:21:c6:b5:c9:13:3c:9f:84:a3:6e:28:f7:d1:ea:
7f:79:b2:da:78:ee:45:0b:17:7d:f4:57:9a:35:4f:
33:a1:46:79:5b:c2:d7:a1:0b:41:43:c4:f4:ec:34:
51:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:68:D9:F1:2C:63:3A:EC:30:64:78:5A:3F:13:5F:E6:9F:B1:91:F5
X509v3 Authority Key Identifier:
keyid:62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CE24A9DE739411EEB8BAE858C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:3900::/32
Signature Algorithm: sha256WithRSAEncryption
5a:d9:38:33:6e:08:8c:71:24:d7:f6:d2:72:7e:c4:31:67:0c:
cf:c1:ab:31:b6:5d:fd:f4:d5:80:a2:02:86:11:61:8f:01:a0:
e7:02:9e:e8:f2:45:e2:53:ea:b0:21:4d:5b:05:0d:f7:fb:af:
4d:b2:15:1d:bd:88:47:15:f1:b6:76:2e:a5:f0:2e:95:09:a9:
7d:bc:28:19:b7:0b:3b:c5:1e:c1:77:2d:c3:1d:49:a7:7b:1f:
c2:6b:5f:8f:f5:21:2d:96:2f:33:b2:52:0d:68:1b:40:27:12:
7e:94:62:0c:b6:b2:cc:d2:ea:40:da:52:2b:08:96:f3:61:3b:
e8:8f:90:4d:ad:33:b2:97:6c:75:2b:42:67:6a:11:0e:cc:67:
58:19:3e:cb:77:ba:4e:23:2b:e5:fe:0b:b6:13:8c:6f:7c:85:
8a:b9:f0:bb:e7:57:84:54:42:9b:64:97:06:ac:29:aa:03:8c:
ed:5a:5e:48:8b:6e:78:43:bc:de:5a:ee:43:ca:c4:f6:10:ce:
ed:c1:f1:cc:57:db:17:36:80:f3:e5:a4:3b:db:7e:27:47:85:
e3:c5:1b:1f:8f:17:b0:e5:e2:1f:86:8c:92:9d:b7:47:b5:70:
27:09:7a:f1:1f:a0:99:08:06:d8:4d:45:0f:f8:80:95:e4:af:
3a:a5:4a:93
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjY5OTYxMTAvBgNVBAUTKDYyODNCRTlCMzFEMjkwMzZCOTY3QkZGN0I3RTcxQkFE
RDUyOUE2NEUwHhcNMjYwODMxMDM1MTUwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk0ZmE1NS02OTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt9/smlQ1EQiIZTlKnvlIHp+y08N7AJg+YxoyZbIgAMPjqsg5jbTydBZ46fYy
suXGS0o0p3sub/voZRLhccEkIDj5nALjzznueYvTLkB3ygpxqR7eRETZjyoSYvju
xqthcHLFziS2yvj33+7SLyLz6+1psKMHliQkZJ3CMCIc0f1uDQGbRVzBbxulPG5O
PEpLShACe79kjhI69LrPJsJEJ1iH8JPt5HogglcpDMd65txcchmfNP7HCrf7/Jcb
NrXH1T045OSBopwADdk4KrOxIV+RIca1yRM8n4Sjbij30ep/ebLaeO5FCxd99Fea
NU8zoUZ5W8LXoQtBQ8T07DRR0QIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFBdo2fEs
YzrsMGR4Wj8TX+afsZH1MB8GA1UdIwQYMBaAFGKDvpsx0pA2uWe/97fnG63VKaZO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjk5Ni8xMjMxRkM2ODcz
OTQxMUVFQTE3MDM4NERDNEY5QUUwMi9Zb08tbXpIU2tEYTVaN18zdC1jYnJkVXBw
azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lvTy1tekhTa0RhNVo3XzN0LWNicmRVcHBrNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjY5OTYvMTIzMUZDNjg3Mzk0MTFFRUExNzAzODREQzRGOUFFMDIvQ0UyNEE5REU3
Mzk0MTFFRUI4QkFFODU4QzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJAE5ADANBgkqhkiG9w0BAQsFAAOCAQEAWtk4M24IjHEk1/bScn7E
MWcMz8GrMbZd/fTVgKIChhFhjwGg5wKe6PJF4lPqsCFNWwUN9/uvTbIVHb2IRxXx
tnYupfAulQmpfbwoGbcLO8UewXctwx1Jp3sfwmtfj/UhLZYvM7JSDWgbQCcSfpRi
DLayzNLqQNpSKwiW82E76I+QTa0zspdsdStCZ2oRDsxnWBk+y3e6TiMr5f4LthOM
b3yFirnwu+dXhFRCm2SXBqwpqgOM7VpeSItueEO83lruQ8rE9hDO7cHxzFfbFzaA
8+WkO9t+J0eF48UbH48XsOXiH4aMkp23R7VwJwl68R+gmQgG2E1FD/iAleSvOqVK
kw==
-----END CERTIFICATE-----
Generated at Mon Aug 31 13:36:43 2026 by rpki-client