
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/854D304E0C9B11EC8433FE7AC4F9AE02.roa
File: 854D304E0C9B11EC8433FE7AC4F9AE02.roa (raw, json)
Hash identifier: Ab5UYVud2bNs5oNT54NbMqTkTRHIRZLylz4Z+NqHgPA=
Subject key identifier: FE:BA:8A:F4:D1:A9:B8:88:96:3A:CD:8F:02:DF:BD:B6:60:67:59:2D
Certificate issuer: /CN=A9172D91/serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897
Certificate serial: 176D
Authority key identifier: E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/854D304E0C9B11EC8433FE7AC4F9AE02.roa
Signing time: Sat 08 Aug 2026 17:30:20 +0000
ROA not before: Sat 08 Aug 2026 17:30:20 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 394749
IP address blocks: 2404:6900:2012::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl
rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 16:49:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5997 (0x176d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172D91, serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897
Validity
Not Before: Aug 8 17:30:20 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a7767ac-ccbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ad:c6:28:22:45:b6:94:63:f1:3e:60:35:9a:
f8:b5:55:f5:21:08:8f:3e:42:06:4b:6d:84:f5:4f:
9c:09:06:b9:e7:2c:f9:fe:43:72:94:37:6f:b4:ba:
fb:ed:0d:25:87:e8:13:c6:36:3e:1a:80:38:f2:70:
63:3b:3b:f1:bd:5e:03:27:e7:d5:43:9c:7c:f4:ff:
9b:5c:c9:f2:1a:f0:9b:bc:71:47:83:6d:63:2f:55:
e1:61:4a:25:66:94:be:93:1d:d4:0f:5c:a5:02:28:
d8:aa:5f:c1:f6:a0:dc:46:a5:80:d9:53:fc:d1:d9:
26:2e:69:2c:b5:03:a6:8a:a7:f3:11:ad:e8:b2:8a:
09:56:19:20:98:95:84:14:c8:a6:da:98:cd:69:fd:
fa:2a:f6:6a:0e:18:d5:a0:05:64:c7:f2:41:56:a5:
37:9e:41:08:cd:b0:78:44:4b:39:8c:1c:d0:cd:60:
49:b5:d2:c5:65:ca:92:66:72:8a:9b:ad:53:e8:6c:
5e:61:c6:5b:0c:62:21:ab:9b:31:1e:57:ab:5e:7e:
08:c2:eb:85:62:85:14:5e:54:eb:6f:65:88:fb:56:
69:c7:15:cc:be:f8:a7:7e:8e:f5:92:54:c2:5d:b6:
5c:30:b2:5c:ce:43:aa:d0:83:31:ea:20:fe:dc:09:
57:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BA:8A:F4:D1:A9:B8:88:96:3A:CD:8F:02:DF:BD:B6:60:67:59:2D
X509v3 Authority Key Identifier:
keyid:E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/854D304E0C9B11EC8433FE7AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2404:6900:2012::/48
Signature Algorithm: sha256WithRSAEncryption
af:c6:25:fb:d2:a2:df:89:3f:2c:a2:16:77:4f:c7:d0:8d:04:
7a:d6:c9:3e:31:d4:aa:51:15:89:55:23:4e:a9:d2:20:9d:33:
45:5d:c7:49:19:c6:d5:ab:c9:26:f3:16:6e:6a:b0:4b:db:b0:
35:3a:81:80:92:ab:c5:84:ac:57:fd:44:e8:ea:e0:78:60:f4:
78:63:aa:29:16:ea:01:a1:6e:7c:da:95:ec:c4:10:c2:bf:f9:
bf:51:7b:30:75:ba:bd:0b:ed:f4:e0:ef:be:ba:ea:8d:2a:96:
5b:ab:5b:04:32:29:05:b3:ba:c6:49:8a:25:4e:7d:63:b0:fa:
d3:68:5f:58:56:24:35:0a:e7:4e:d4:a3:c6:0e:8b:60:7d:30:
9b:a7:42:0d:35:ee:bc:5f:95:04:7b:28:ab:a4:fc:9f:4a:2c:
75:61:50:5b:04:a8:11:27:66:49:64:ea:7e:77:63:8d:a0:26:
77:5d:35:e9:6e:18:06:01:32:fb:8b:f3:90:5b:49:34:72:f5:
05:de:17:2e:25:b2:87:81:9f:1e:21:3a:d9:51:08:58:4f:3b:
25:63:e4:f5:77:ea:7f:53:d1:8c:57:d4:80:1e:f0:d9:f3:5e:
31:29:fa:51:87:a6:57:e9:f5:3c:2d:ab:6b:6b:d2:74:aa:88:
0d:dd:9f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:41:31 2026 by rpki-client