
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/CC647BDECAC711EF80553A61C4F9AE02.roa
File: CC647BDECAC711EF80553A61C4F9AE02.roa (raw, json)
Hash identifier: 6py7+bxGSuMtBsOOS74wMtrFxOuNUNxvgY9dbOF/Dhk=
Subject key identifier: E8:6F:4E:E6:FE:96:62:59:6F:57:88:6D:52:F6:18:66:86:FF:34:FD
Certificate issuer: /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063
Certificate serial: 03B2
Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/CC647BDECAC711EF80553A61C4F9AE02.roa
Signing time: Mon 02 Mar 2026 05:09:35 +0000
ROA not before: Sat 09 Aug 2025 02:39:18 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 133442
IP address blocks: 2400:9ce0:9000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl
rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 18 Mar 2026 00:43:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 946 (0x3b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BAC5, serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063
Validity
Not Before: Aug 9 02:39:18 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a51b8e-9e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:61:68:51:f1:a4:ce:62:95:ff:38:94:dc:96:
7e:98:67:ce:7d:d4:76:10:12:5b:c3:b9:16:3e:da:
e3:8c:84:ae:2b:fc:69:d3:a5:15:64:63:d7:2f:14:
3e:70:f4:6a:d7:bc:57:01:96:26:31:5c:12:51:5f:
30:34:2c:6c:22:21:34:21:e7:5a:ba:84:fc:eb:04:
21:83:b0:42:a6:2b:36:28:98:c3:40:ef:52:a3:28:
85:08:67:f4:14:e6:03:39:53:af:e5:83:3f:5e:9e:
4a:08:f3:29:4f:0d:29:24:cf:d4:65:bc:c1:34:a2:
ee:31:5a:68:f8:c8:8c:1a:f6:f9:43:bf:cd:0d:cd:
e2:60:2a:27:7a:10:67:91:9d:30:f0:3b:97:65:6a:
1e:3b:aa:70:18:1e:1d:f8:63:4f:80:04:47:c1:6a:
18:8a:86:bd:2b:c3:b0:1f:c3:8d:64:7a:bc:2c:aa:
5a:f0:27:2b:ef:8f:de:95:62:6f:6f:e6:65:6d:47:
27:8b:7d:22:01:46:75:87:47:58:9b:86:00:76:ed:
6c:3e:de:2a:0e:ec:b4:41:17:51:b2:e8:8f:a2:fb:
4e:f6:3c:79:4f:42:d2:ce:69:7d:b9:99:e7:ee:41:
57:da:25:a8:53:da:c4:8b:bc:7e:4c:80:e5:9c:a8:
0b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6F:4E:E6:FE:96:62:59:6F:57:88:6D:52:F6:18:66:86:FF:34:FD
X509v3 Authority Key Identifier:
keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/CC647BDECAC711EF80553A61C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:9ce0:9000::/36
Signature Algorithm: sha256WithRSAEncryption
a6:e1:26:e0:24:10:99:73:7c:e1:6d:d8:53:b0:0f:10:97:b2:
ab:8c:58:e7:9b:84:a5:2c:a7:68:d2:8b:15:09:57:fc:51:ec:
28:18:6c:09:73:fb:66:ce:22:8c:41:56:a0:ad:c4:2c:6a:54:
08:27:fd:e2:94:99:4c:80:9d:cf:b0:38:b3:6f:8e:75:df:b7:
a9:bc:c0:8e:b7:3e:a4:9b:b9:1e:e4:e4:00:f3:9a:cf:5a:5d:
7b:27:b7:15:78:28:0d:ef:38:db:a0:f6:3e:04:46:b0:87:a2:
f6:bc:3e:d5:2a:f7:43:cf:c9:a3:d7:f7:ad:58:df:3e:66:8e:
b7:47:4d:09:b4:09:7f:bb:e6:a4:90:6f:b9:08:f8:79:14:20:
f2:5e:e7:3b:aa:eb:db:d3:92:5a:bf:31:2c:37:3d:73:12:05:
9e:0b:e9:58:49:16:82:43:25:21:6c:a7:30:76:43:17:25:b3:
82:ea:53:d0:ac:9b:f6:cb:3e:0c:0f:b5:87:41:18:d5:d8:46:
8d:72:63:02:36:0e:fd:62:68:bc:35:08:8f:98:d9:44:1a:5d:
ba:84:fd:90:48:a4:1b:e7:41:19:76:bd:9b:80:08:c5:f3:34:
9c:ff:96:7a:b4:ee:9a:58:49:8e:40:80:3b:0d:e6:7c:98:37:
1f:98:f2:37
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgICA7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0JBQzUxMTAvBgNVBAUTKEUxMDg4MTg3RjY0MDk0MjYzRERBNjc0OUE5NUY3M0FB
NkMxQUIwNjMwHhcNMjUwODA5MDIzOTE4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1MWI4ZS05ZTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxmFoUfGkzmKV/ziU3JZ+mGfOfdR2EBJbw7kWPtrjjISuK/xp06UVZGPXLxQ+
cPRq17xXAZYmMVwSUV8wNCxsIiE0IedauoT86wQhg7BCpis2KJjDQO9SoyiFCGf0
FOYDOVOv5YM/Xp5KCPMpTw0pJM/UZbzBNKLuMVpo+MiMGvb5Q7/NDc3iYConehBn
kZ0w8DuXZWoeO6pwGB4d+GNPgARHwWoYioa9K8OwH8ONZHq8LKpa8Ccr74/elWJv
b+ZlbUcni30iAUZ1h0dYm4YAdu1sPt4qDuy0QRdRsuiPovtO9jx5T0LSzml9uZnn
7kFX2iWoU9rEi7x+TIDlnKgLGwIDAQABo4ICYjCCAl4wHQYDVR0OBBYEFOhvTub+
lmJZb1eIbVL2GGaG/zT9MB8GA1UdIwQYMBaAFOEIgYf2QJQmPdpnSalfc6psGrBj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkFDNS80NzBBNjIwNDE1
MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxDWTkybWRKcVY5enFtd2Fz
R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRRaUJoX1pBbENZOTJtZEpxVjl6cW13YXNHTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0JBQzUvNDcwQTYyMDQxNTMwMTFFREJBQTNEMDI3QzRGOUFFMDIvQ0M2NDdCREVD
QUM3MTFFRjgwNTUzQTYxQzRGOUFFMDIucm9hMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYEJACc4JAwDQYJKoZIhvcNAQELBQADggEBAKbhJuAkEJlzfOFt2FOw
DxCXsquMWOebhKUsp2jSixUJV/xR7CgYbAlz+2bOIoxBVqCtxCxqVAgn/eKUmUyA
nc+wOLNvjnXft6m8wI63PqSbuR7k5ADzms9aXXsntxV4KA3vONug9j4ERrCHova8
PtUq90PPyaPX961Y3z5mjrdHTQm0CX+75qSQb7kI+HkUIPJe5zuq69vTklq/MSw3
PXMSBZ4L6VhJFoJDJSFspzB2Qxcls4LqU9Csm/bLPgwPtYdBGNXYRo1yYwI2Dv1i
aLw1CI+Y2UQaXbqE/ZBIpBvnQRl2vZuACMXzNJz/lnq07ppYSY5AgDsN5nyYNx+Y
8jc=
-----END CERTIFICATE-----
Generated at Thu Mar 12 18:18:57 2026 by rpki-client