
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/9DA60E087F3311F19D56764D8FA30FBC.roa
File: 9DA60E087F3311F19D56764D8FA30FBC.roa (raw, json)
Hash identifier: Rt7PW/6uZ7cjq9gkzwDvAa35BI5KobAOVV29frmx7Uo=
Subject key identifier: 87:A5:14:6F:99:EE:C0:F7:56:C0:C9:0D:AF:60:67:B5:E5:E9:AD:F9
Certificate issuer: /CN=A913CB06/serialNumber=31D4439467161068DD30457C3838FE6356927D3E
Certificate serial: 6C
Authority key identifier: 31:D4:43:94:67:16:10:68:DD:30:45:7C:38:38:FE:63:56:92:7D:3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/9DA60E087F3311F19D56764D8FA30FBC.roa
Signing time: Tue 14 Jul 2026 03:25:09 +0000
ROA not before: Tue 14 Jul 2026 03:25:09 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 154481
IP address blocks: 2402:4ca0::/32 maxlen: 32
2402:4ca0::/34 maxlen: 34
2402:4ca0:4000::/34 maxlen: 34
2402:4ca0:8000::/34 maxlen: 34
2402:4ca0:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.crl
rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 10:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CB06, serialNumber=31D4439467161068DD30457C3838FE6356927D3E
Validity
Not Before: Jul 14 03:25:09 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a55ac15-5c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:68:79:fa:12:45:e5:51:5f:8a:d7:29:ff:55:
84:8c:bc:35:79:f6:12:f6:fe:7f:0b:eb:b9:93:17:
95:c2:32:99:8c:1c:dd:eb:35:a2:d7:0f:37:62:97:
07:45:9a:d5:8a:f4:a5:7a:e0:f1:c4:c8:6b:b1:58:
64:25:4c:4d:c9:80:e3:02:ce:df:92:97:ce:1f:55:
33:33:8a:7e:ac:43:4c:f0:a7:44:08:a3:90:68:bb:
ca:e8:c2:ff:ca:7f:f9:e5:e6:e6:a1:a8:de:6b:9b:
72:45:94:d9:b3:8a:1f:39:fb:1c:eb:75:74:8a:8d:
7e:14:0d:c8:86:ed:34:34:4e:42:23:bc:ce:1c:21:
3b:a8:c1:0c:e3:15:d7:db:ab:41:79:7d:4a:17:6e:
5e:9c:45:a9:c9:d1:a2:c4:4b:ba:09:d8:e4:d5:8c:
ba:13:de:a9:0e:76:97:9c:65:c5:41:d3:88:4e:4a:
79:be:e9:6c:4f:a3:71:17:e2:b1:c8:61:d1:01:ba:
b9:7b:c1:2f:7b:69:4e:99:be:53:0a:3d:0b:3b:5a:
6d:89:13:18:99:8b:e5:1f:2f:4d:2c:37:06:56:f6:
68:89:96:28:af:e7:3c:13:93:ba:b0:ec:0f:76:64:
2a:41:4d:f5:5b:fe:ab:e4:91:7a:a3:3a:0e:bd:02:
64:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A5:14:6F:99:EE:C0:F7:56:C0:C9:0D:AF:60:67:B5:E5:E9:AD:F9
X509v3 Authority Key Identifier:
keyid:31:D4:43:94:67:16:10:68:DD:30:45:7C:38:38:FE:63:56:92:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/9DA60E087F3311F19D56764D8FA30FBC.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:4ca0::/32
Signature Algorithm: sha256WithRSAEncryption
03:84:39:a6:e9:30:a6:44:73:10:35:75:48:79:0b:9e:45:43:
18:1c:61:84:95:6e:34:95:64:a7:77:80:26:d9:9f:1f:5d:40:
9d:96:3b:f8:9e:2c:af:31:92:a0:11:b5:98:b3:46:22:2c:d8:
80:eb:ef:de:4f:36:c4:9b:67:1b:2a:02:a4:86:b5:5a:0e:f5:
99:f2:a0:3c:bd:0a:e4:da:99:d7:7e:be:63:99:ef:a0:a7:c2:
1d:2f:5e:0f:fa:75:48:0a:61:a9:54:23:44:c2:a5:88:d8:67:
80:f4:59:b9:e5:36:dc:c2:69:ee:db:77:7a:0c:a0:36:59:20:
27:40:2d:d6:7f:a2:90:1d:e4:2d:80:b4:cd:f5:70:93:b2:22:
b6:ed:f7:07:3d:1e:ee:7d:e4:51:65:de:61:0e:28:70:8e:0c:
2f:5d:98:1a:25:73:a2:ab:9d:06:9b:94:af:23:0c:aa:35:7c:
da:39:1e:7e:9b:f8:b0:e5:b9:6d:12:32:a0:15:13:b3:10:32:
7e:ce:16:64:52:16:d5:fd:08:0b:e7:84:72:d4:52:91:52:67:
0e:c0:08:95:09:80:42:ad:7d:dc:a8:b4:4c:4e:d4:31:cd:53:
2d:55:b9:c2:4a:a3:5f:7b:7f:a3:91:90:db:ce:09:1a:f3:72:
c7:6a:cf:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:12:03 2026 by rpki-client