
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/6DEC60FC198811EBAD4C384FC4F9AE02.roa
File: 6DEC60FC198811EBAD4C384FC4F9AE02.roa (raw, json)
Hash identifier: RyCT9Kfh39JgpB62lsPr7X3rrbBLW034nB14BsTheqA=
Subject key identifier: 3F:3F:4B:2B:8F:21:75:AD:D2:CB:08:0F:C0:F2:F6:FA:86:E0:FA:2C
Certificate issuer: /CN=A9171172/serialNumber=76DEAC060460F6F8A5BD58299C53ABCAF9B1D358
Certificate serial: 080F
Authority key identifier: 76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/6DEC60FC198811EBAD4C384FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:52:46 +0000
ROA not before: Thu 18 Dec 2025 21:17:58 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 16509
IP address blocks: 165.69.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.crl
rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 20:58:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2063 (0x80f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171172, serialNumber=76DEAC060460F6F8A5BD58299C53ABCAF9B1D358
Validity
Not Before: Dec 18 21:17:58 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a452bd-d26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:11:bc:0e:02:35:b4:e1:dd:1d:6e:32:25:5c:
99:c9:98:6c:54:1e:ae:eb:96:4f:e7:76:1b:25:7c:
6f:42:81:24:7c:fc:21:f6:7d:60:85:03:d8:17:c9:
e6:85:96:ce:5a:45:a9:da:32:1d:6a:5e:84:8e:42:
88:59:40:f5:04:a0:1d:5e:ae:e5:9d:2a:da:87:b0:
bc:78:15:ea:13:6a:e8:bd:03:49:62:1a:78:1f:6d:
8f:90:84:88:e6:36:ab:a4:ba:1f:6e:31:16:85:93:
7d:4b:0e:2b:b5:8d:2e:0f:bf:b9:eb:3f:f0:65:85:
33:8d:f7:f0:e5:12:26:f9:e9:d5:6d:65:eb:d3:ca:
18:5e:89:27:15:be:42:02:b8:71:e4:34:b5:7f:67:
e8:d8:f5:2f:e8:bb:6e:1a:74:68:77:10:61:9e:82:
1a:00:31:2a:af:de:a1:e1:c0:54:2e:ad:4c:5b:48:
e7:2e:f6:25:8d:a7:4f:be:28:67:20:05:85:53:3a:
4f:8e:2e:40:f8:6c:db:78:9d:1b:a9:44:55:84:95:
c0:c4:83:96:bf:c7:0b:d0:83:92:70:73:6d:fe:19:
29:c3:f8:c5:04:88:51:72:bf:ba:45:fe:d3:79:cc:
16:dc:25:a6:e4:59:ca:8c:df:00:88:1e:b5:3e:df:
64:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3F:4B:2B:8F:21:75:AD:D2:CB:08:0F:C0:F2:F6:FA:86:E0:FA:2C
X509v3 Authority Key Identifier:
keyid:76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/6DEC60FC198811EBAD4C384FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.69.249.0/24
Signature Algorithm: sha256WithRSAEncryption
78:8e:fd:e3:71:e1:95:20:e2:aa:ed:2f:36:0c:1a:87:c1:40:
40:f5:b3:f4:ca:83:38:57:af:18:ac:20:8d:c9:7e:eb:aa:f6:
e6:12:09:bd:28:42:3e:1e:d2:c7:00:58:99:88:4a:da:50:9b:
26:5a:05:88:98:99:77:99:0f:b1:0f:fd:d3:ca:a3:bf:69:42:
f8:04:8c:5a:dd:64:e9:39:e4:30:99:02:8a:db:27:fa:06:a7:
af:cf:ce:1a:1b:23:c2:84:3c:83:83:5a:4c:b3:d5:bd:16:fd:
08:8b:7c:55:b2:34:19:4e:94:30:e4:ff:03:9f:e9:50:8a:c3:
ef:3a:15:d9:50:13:13:9f:98:9e:ab:54:49:aa:a1:7e:9e:56:
5f:51:d2:1c:2f:8e:65:74:ee:c2:67:20:22:6d:52:9c:86:9f:
46:a8:37:f6:41:70:27:33:3a:e3:39:98:3a:09:30:bb:d5:66:
36:00:a7:f3:8c:21:d8:b8:33:d6:a8:05:db:44:9e:3e:4a:fa:
5f:7c:06:69:20:fa:75:c5:18:f3:72:31:7d:62:b6:e8:45:a9:
b9:d5:5f:8c:29:12:06:f8:f7:37:57:2d:98:c1:e6:d6:5c:78:
27:28:9b:83:73:ed:04:c0:f8:4b:c5:d3:f3:5f:80:af:e8:01:
ba:0b:1f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:20 2026 by rpki-client