
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/FDD39BD607B811F0AB98B333C4F9AE02.roa
File: FDD39BD607B811F0AB98B333C4F9AE02.roa (raw, json)
Hash identifier: 9d80apncQwaKTAG06R4mIWLTbRCpdrLELAUO00snQkE=
Subject key identifier: 10:0B:DA:F8:BD:AA:4B:2C:B6:19:CA:99:E9:47:26:BF:DE:24:87:4E
Certificate issuer: /CN=A9177FC9/serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8
Certificate serial: D8
Authority key identifier: 06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/FDD39BD607B811F0AB98B333C4F9AE02.roa
Signing time: Sun 29 Mar 2026 06:42:08 +0000
ROA not before: Sun 29 Mar 2026 06:42:08 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 153654
IP address blocks: 2001:df5:2e40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl
rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:18:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177FC9, serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8
Validity
Not Before: Mar 29 06:42:08 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69c8c9c0-f739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8c:b7:03:10:fc:a0:ca:a1:af:99:f6:3e:39:
4a:5f:d6:f4:b9:67:bc:76:19:d8:77:1a:0c:1d:16:
d3:07:24:31:ac:fb:74:27:c2:79:e7:ed:69:af:3d:
3c:d1:30:ec:96:70:04:8b:bd:65:76:82:68:7d:68:
42:f4:88:70:81:93:1e:c7:21:5f:b3:0e:72:e8:8e:
fd:42:2d:5d:3c:fc:7e:1d:8f:d4:c0:d6:df:b2:9b:
cf:d5:da:35:31:36:0f:42:cd:97:fc:69:fc:b8:23:
d5:d4:35:89:3f:96:76:1e:94:e0:3f:c6:85:5d:51:
23:df:84:94:03:9e:98:54:7f:2a:2f:37:34:05:4e:
35:8f:4a:e8:41:ea:74:45:56:85:fd:ab:9e:33:09:
d0:60:52:4b:9e:ee:1e:91:d5:63:cd:9a:d3:3c:74:
26:08:1c:87:c5:7d:82:ea:aa:93:5d:25:bb:4e:fb:
70:b0:46:81:04:cf:4c:4e:d5:13:4d:c9:a0:33:77:
3e:b1:08:67:fb:8d:56:de:c2:b7:47:55:96:06:eb:
68:1d:7a:1f:40:92:0c:36:c6:40:50:75:9e:b8:29:
66:c1:26:a6:77:c4:ef:32:7e:37:90:0d:e7:09:53:
6e:8c:f5:43:e2:4b:b0:01:f2:3a:c5:b1:48:86:a1:
3b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0B:DA:F8:BD:AA:4B:2C:B6:19:CA:99:E9:47:26:BF:DE:24:87:4E
X509v3 Authority Key Identifier:
keyid:06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/FDD39BD607B811F0AB98B333C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:2e40::/48
Signature Algorithm: sha256WithRSAEncryption
4d:a2:1e:df:b2:00:b0:a1:5e:b2:ef:20:3f:a0:54:c4:5b:16:
47:e1:bd:ef:7f:45:b9:1e:fb:93:6a:94:c5:db:b0:13:bf:ba:
31:05:63:aa:6d:5e:f4:be:ec:c2:5d:c0:f5:50:50:bd:20:e0:
b4:d8:34:ef:75:85:fb:28:cf:a1:83:cd:8a:89:a5:e6:92:b6:
f6:75:38:fd:88:d0:35:ab:e9:03:ce:54:62:97:ed:5b:09:07:
5e:99:a8:d8:8f:57:2e:fd:f4:88:c2:17:ad:d9:00:0c:ff:f5:
11:e6:f6:f6:b9:8b:85:ff:34:ef:21:31:51:c8:34:52:79:33:
d5:d6:75:b2:90:08:5c:80:66:97:c5:28:00:bb:4f:cc:35:a5:
2d:d2:a6:5b:49:7c:db:23:aa:53:cb:80:6b:b7:87:06:99:4b:
22:b2:c6:09:c1:59:7f:6a:6b:e5:8d:74:e1:98:b5:a2:c7:20:
e8:4b:16:55:ea:46:4d:6a:51:58:60:68:90:30:7f:9c:05:f4:
23:3c:f6:13:bf:e8:74:30:72:33:7a:e9:0f:fb:6c:a0:d1:b9:
89:54:0c:50:fb:eb:ba:94:5f:15:3f:90:9e:70:a5:90:21:23:
c6:13:a7:2f:6c:ec:b4:8c:a1:8c:b9:81:02:03:fd:b5:41:e3:
4c:1c:99:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:24:51 2026 by rpki-client