
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/329ACDE2B8E511F18FEB8F563911F970.roa
File: 329ACDE2B8E511F18FEB8F563911F970.roa (raw, json)
Hash identifier: sfurQNZ8pzGNjJmLid2qdmUePNC/3WHcjh0nw/ZtJMI=
Subject key identifier: 46:03:2E:84:D4:5B:AD:CA:68:6E:EC:DC:04:2C:AE:58:4C:CA:BA:76
Certificate issuer: /CN=A9172989/serialNumber=AB69C74025489AFD61747FF9335B147E20BB25D4
Certificate serial: 9E
Authority key identifier: AB:69:C7:40:25:48:9A:FD:61:74:7F:F9:33:5B:14:7E:20:BB:25:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/329ACDE2B8E511F18FEB8F563911F970.roa
Signing time: Fri 25 Sep 2026 13:29:56 +0000
ROA not before: Fri 25 Sep 2026 13:29:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55569
IP address blocks: 2402:4480:203::/48 maxlen: 48
2402:4480:204::/48 maxlen: 48
2402:4480:305::/48 maxlen: 48
2402:4480:306::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.crl
rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 07:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172989, serialNumber=AB69C74025489AFD61747FF9335B147E20BB25D4
Validity
Not Before: Sep 25 13:29:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ab67754-58db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b2:e9:a2:22:07:1f:b4:45:fe:05:81:98:85:
46:ed:e1:0b:d8:31:11:ed:2d:af:e0:de:d4:8e:8f:
37:b6:fd:78:8a:10:5a:88:e3:0d:43:47:cb:cc:76:
bb:a1:b6:57:bb:d7:74:8b:34:a4:d3:86:a3:71:f9:
11:d6:35:ed:c3:1a:8d:52:c7:98:b1:05:02:4c:44:
32:a8:68:44:23:c1:ff:d5:0e:3c:7f:7a:b6:3a:32:
3d:c8:72:3e:7e:f9:75:75:10:cf:2b:a9:ee:a3:bf:
82:b3:2c:01:52:0d:e2:45:7a:14:7c:5a:56:19:de:
84:fe:8d:fc:2a:bd:8e:a4:7d:75:f1:21:93:4a:e0:
24:c8:b2:40:6a:aa:03:09:6b:5d:2f:ba:38:0c:27:
78:d6:4c:34:1d:8b:9b:ef:32:ef:44:06:f7:d8:c0:
4c:71:c2:6f:09:4d:28:1b:2d:51:f7:80:0e:52:ef:
c9:98:08:dc:2d:f1:69:9d:c3:5a:a1:45:21:45:cc:
93:a9:9d:5c:d7:c9:72:ea:da:69:11:16:c1:dd:b9:
11:0a:51:ff:21:32:4f:07:f5:e7:f2:dc:57:dd:ee:
03:cd:f5:29:4a:31:f8:b0:6d:e9:dc:88:ca:09:85:
a8:9a:8c:8b:b3:eb:3b:d3:28:7d:e7:51:8b:ea:ff:
8d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:03:2E:84:D4:5B:AD:CA:68:6E:EC:DC:04:2C:AE:58:4C:CA:BA:76
X509v3 Authority Key Identifier:
keyid:AB:69:C7:40:25:48:9A:FD:61:74:7F:F9:33:5B:14:7E:20:BB:25:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/329ACDE2B8E511F18FEB8F563911F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:4480:203::-2402:4480:204:ffff:ffff:ffff:ffff:ffff
2402:4480:305::-2402:4480:306:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3b:82:e7:3a:95:4b:d9:2b:49:b5:ad:3a:9e:68:3c:e4:be:64:
89:a3:93:1f:50:4e:d7:6e:5e:ed:15:c3:e3:f7:be:2d:c4:06:
08:ac:ea:4f:11:5e:d7:22:c1:ba:1b:8c:49:fb:0b:de:68:79:
e4:2d:8f:54:81:57:19:51:a2:16:50:d3:aa:93:97:a2:78:45:
61:83:66:55:c3:04:ce:cd:51:8b:63:dc:a8:d4:62:55:7e:2d:
4c:8a:5a:e1:3e:c8:f9:43:3d:84:c4:09:6b:b1:51:e6:39:a5:
8a:bc:9a:84:8f:59:ff:81:53:52:5d:ca:ea:85:ef:c4:33:aa:
47:a6:9f:b7:8d:b6:f6:cf:d6:fb:99:03:e0:a0:91:b8:31:79:
8a:8d:b9:d8:f0:08:3f:18:76:01:0d:31:99:5c:24:cb:c5:57:
43:e2:1d:63:72:66:7b:6a:b8:6f:e2:8c:7b:74:b8:05:a1:42:
f3:db:ba:22:43:2c:7b:24:9d:87:8f:22:61:29:33:44:e7:cb:
fa:15:1f:a2:8e:38:78:cf:16:44:75:b0:11:ff:71:4d:0e:36:
88:1b:12:99:28:2f:d8:cb:b5:1a:2f:b1:5b:6f:73:e7:88:27:
09:4e:cd:0a:16:08:07:c9:b0:25:d9:32:44:6b:6b:6a:8f:de:
92:2e:c1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:59:21 2026 by rpki-client