
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/9FC2AD1A7B0811F1BE7AA8BE81A30FBC.roa
File: 9FC2AD1A7B0811F1BE7AA8BE81A30FBC.roa (raw, json)
Hash identifier: dvCtuuZOukYSqlh4ugbWrxgCAoJu1f7EJvhUOlYHnJ0=
Subject key identifier: 86:04:87:E3:0A:84:5B:89:07:83:E8:48:1C:4C:00:89:8E:41:16:BA
Certificate issuer: /CN=A912E87E/serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D
Certificate serial: 0148
Authority key identifier: CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/9FC2AD1A7B0811F1BE7AA8BE81A30FBC.roa
Signing time: Wed 08 Jul 2026 20:07:20 +0000
ROA not before: Wed 08 Jul 2026 20:07:20 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 17644
IP address blocks: 2001:df4:8441::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl
rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 16 Jul 2026 07:19:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E87E, serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D
Validity
Not Before: Jul 8 20:07:20 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6a4eadf7-a624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6f:fb:39:0c:6d:70:c7:89:38:60:68:5f:5f:
ef:1b:bb:aa:b0:e9:95:95:12:02:bc:43:4c:73:5e:
ff:40:e4:5d:8c:0c:05:8d:27:89:ae:b5:4e:90:47:
c5:5e:05:ee:93:bb:91:1c:fd:eb:c8:2e:cf:6a:18:
7c:8b:1b:02:0e:f7:6b:97:a5:c8:3b:9b:65:ca:7c:
3c:94:ca:eb:83:90:60:71:b3:6d:59:41:d3:78:56:
6d:e9:9e:97:ad:81:d5:16:c9:76:d3:68:a9:9f:89:
74:3e:44:60:7a:13:75:db:90:ac:74:80:a1:87:27:
de:ab:20:86:20:eb:6f:ca:0d:d6:5b:75:70:9e:41:
0e:5d:8b:4d:3b:ce:d8:12:ed:0f:b8:a3:bb:80:6c:
49:f9:90:fe:07:16:ff:a1:db:d2:0a:9b:85:70:f9:
24:89:60:db:2c:88:9c:f4:ff:ae:32:e6:bf:55:c4:
0c:36:52:ef:b9:72:72:e2:ad:22:51:55:55:7b:82:
aa:bb:43:5b:28:26:64:4a:5f:a0:89:f2:a4:46:ac:
50:dd:d7:9a:85:4c:e3:77:98:b6:ff:bb:06:b7:b9:
f7:07:69:9d:e5:61:98:f8:0a:e3:a3:9c:a8:35:9f:
dd:f6:70:8b:ac:18:04:0b:da:64:21:b6:9d:2a:f9:
cc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:04:87:E3:0A:84:5B:89:07:83:E8:48:1C:4C:00:89:8E:41:16:BA
X509v3 Authority Key Identifier:
keyid:CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/9FC2AD1A7B0811F1BE7AA8BE81A30FBC.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:8441::/48
Signature Algorithm: sha256WithRSAEncryption
a0:f5:1e:92:1d:68:b7:ae:96:25:b4:ca:97:a0:b4:1f:e9:60:
23:d5:2a:9b:d8:a6:db:f3:06:8e:b4:9c:8d:3a:12:a4:71:62:
7b:e4:d4:ee:a7:d1:27:2f:99:5c:a7:ce:7f:84:13:f5:ca:13:
8e:99:ca:84:42:89:10:36:5c:60:20:4f:35:f0:70:53:de:bc:
9e:36:74:6a:a9:e9:05:66:14:03:39:f1:1e:42:e8:1f:f7:5a:
31:53:71:64:ef:3c:ef:b0:a4:32:ec:c3:12:36:f2:df:94:70:
32:b5:08:13:54:d0:35:ce:7d:f5:cd:f1:08:95:8f:f0:55:fb:
c8:ed:60:4d:08:00:77:26:cd:85:77:32:d0:63:06:01:a1:8c:
77:46:0f:84:fb:e9:24:74:70:7c:c3:8d:27:a4:e8:b2:2f:07:
69:a5:0a:7a:af:69:7a:aa:4a:6c:e1:da:f3:a4:56:d2:98:5a:
fd:81:7d:a7:0b:52:91:b8:05:71:c4:15:38:bc:eb:5f:8f:30:
b5:01:dc:c2:ca:c3:e9:83:99:fb:f8:20:19:51:31:1b:dc:67:
d0:74:78:eb:36:f1:d6:ea:05:8f:6e:d3:13:84:62:c8:fe:3d:
af:3f:23:1e:15:9a:a4:f5:80:16:16:4a:80:01:2c:a7:d5:64:
75:ab:58:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 17:42:04 2026 by rpki-client