
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/28E35E4898F211ED9FB5D80DC4F9AE02.roa
File: 28E35E4898F211ED9FB5D80DC4F9AE02.roa (raw, json)
Hash identifier: b0UCq+eUPG0Zw3G9HvUdvsx8LonrZenua0MeaBXzxdI=
Subject key identifier: 0E:F7:B7:F9:A9:83:C0:32:52:3C:48:50:54:2B:81:CF:76:4F:5A:54
Certificate issuer: /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7
Certificate serial: 29A6
Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/28E35E4898F211ED9FB5D80DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:36:32 +0000
ROA not before: Sat 24 May 2025 15:43:32 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 17557
IP address blocks: 2001:dec:8000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl
rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 15:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10662 (0x29a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150F66, serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7
Validity
Not Before: May 24 15:43:32 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a48730-1e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e1:6e:9d:c6:3b:f9:37:ee:96:17:3a:e7:0c:
d5:d7:fe:ff:f5:e9:23:3d:2b:79:1e:79:02:68:cf:
05:a1:1c:40:11:30:2e:b6:98:4d:6c:49:fd:2c:89:
31:b4:f8:4b:76:ae:31:70:37:e8:ea:28:8e:3c:7e:
3e:38:c5:16:41:66:4f:d2:55:b5:3e:9d:46:fd:70:
6f:6b:3e:5d:4f:c3:be:3a:3b:1d:58:06:0d:9c:fa:
58:4f:55:d5:ce:a2:11:59:97:d1:d1:80:44:c8:88:
b2:c8:11:45:52:4e:e7:0d:5e:88:e6:ac:fe:6b:71:
97:cd:97:b3:2d:82:ad:45:cd:5d:dd:48:72:c5:ba:
e6:09:dd:18:12:cf:fa:9e:ab:aa:80:89:17:9e:56:
0b:dd:73:2c:ef:a9:1d:bb:d0:d1:73:d1:55:03:65:
61:18:0c:67:c0:47:0f:75:bd:da:67:dc:e1:4c:fb:
25:d3:46:2c:64:f4:b6:41:3f:85:7d:cc:71:05:64:
c6:30:01:96:23:e1:61:ed:cd:cb:ab:82:ce:3d:2f:
42:4f:6f:69:e2:6c:76:ea:71:d0:66:cd:82:dc:a1:
19:db:4f:c6:d0:43:69:59:1f:d1:5f:95:ee:78:a4:
8d:02:20:11:ea:25:1d:8f:0b:9c:3c:49:cc:d8:07:
43:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F7:B7:F9:A9:83:C0:32:52:3C:48:50:54:2B:81:CF:76:4F:5A:54
X509v3 Authority Key Identifier:
keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/28E35E4898F211ED9FB5D80DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:dec:8000::/48
Signature Algorithm: sha256WithRSAEncryption
04:b4:8d:50:b8:47:52:f8:d3:86:eb:e3:43:f2:18:5b:af:ff:
bd:ee:d4:02:82:68:53:2e:e2:d9:3b:bf:be:99:e6:0f:23:7f:
b1:39:54:f7:33:fd:d4:ed:7e:03:ed:73:f5:d7:a7:b8:07:f2:
ff:2d:a6:2a:bc:f1:17:2a:37:b2:b5:d0:31:14:1a:2f:e1:80:
b3:9e:f8:fb:ba:00:58:bf:17:15:15:a0:c6:67:f7:7f:b5:a4:
c7:44:15:a3:7d:22:2e:7b:7f:70:16:89:16:e5:21:99:06:92:
aa:c2:b9:0a:ca:6e:5b:65:17:92:81:b1:6a:30:35:a8:cd:29:
59:89:ea:64:1c:8e:5d:38:d3:e7:30:3b:18:8a:8a:bf:31:74:
36:be:de:3a:70:9d:2c:ea:92:0d:d6:9e:4c:c0:6d:52:0b:74:
a0:21:1b:dc:4a:76:df:10:27:fe:cc:84:03:0d:2a:44:f9:80:
25:9c:73:38:a0:ea:08:bd:46:84:af:20:59:78:6d:e1:3e:9e:
2f:fb:24:ad:94:75:35:17:73:71:0a:45:70:ac:93:0d:69:07:
6d:40:b5:76:99:52:2e:82:bc:4c:c2:93:8c:fb:48:52:13:24:
cf:17:58:ef:1a:d7:0b:55:75:38:9c:f7:a0:a8:fd:3e:1e:36:
68:4c:8c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 10:03:19 2026 by rpki-client