
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/3CD29BF4D46911EE8B36431CC4F9AE02.roa
File: 3CD29BF4D46911EE8B36431CC4F9AE02.roa (raw, json)
Hash identifier: KYjRsSmZFGs+FoyNnOuXfuvWzg10BoAKlArtMc3CJYg=
Subject key identifier: 3D:31:E6:25:9F:45:56:39:BD:5D:10:39:FC:A1:36:6B:DB:04:D1:AB
Certificate issuer: /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
Certificate serial: 0878
Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/3CD29BF4D46911EE8B36431CC4F9AE02.roa
Signing time: Sat 06 Jun 2026 21:25:34 +0000
ROA not before: Sat 06 Jun 2026 21:25:34 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 23879
IP address blocks: 27.123.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl
rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2168 (0x878)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119DCB, serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
Validity
Not Before: Jun 6 21:25:34 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a24904d-273c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:29:b7:4d:71:4a:3e:ed:e5:4b:22:63:5e:14:
3c:12:2e:8a:fc:7b:c0:6a:09:12:b8:8d:a9:5a:ae:
d3:ca:41:a8:99:45:d9:91:80:8e:84:f6:24:73:0d:
a7:de:a1:99:a9:e1:61:86:2a:7a:93:77:c8:7c:6e:
06:9c:e4:5c:20:6f:6a:05:26:93:ab:a3:89:fb:35:
b1:03:0d:0d:d6:3f:d4:a2:79:4f:cf:36:db:c3:51:
fa:6c:e9:57:3c:57:0e:37:6c:b8:f7:c8:de:ff:38:
c3:c5:51:f1:86:f4:49:b0:42:0d:5e:e4:e8:06:89:
48:89:64:11:34:9d:de:96:73:e0:84:3f:78:47:d2:
92:6c:58:84:c5:b3:8b:5f:44:90:62:82:1a:b2:1c:
47:d3:d9:ae:40:b5:06:c5:38:82:55:1c:a2:6e:95:
61:bf:48:64:58:2b:95:8d:b3:31:d4:4e:96:fd:54:
1e:b9:15:ae:be:1e:0d:71:62:a1:1b:9b:64:c1:e6:
11:f8:f8:29:be:d0:a7:ab:ad:58:bc:51:82:3b:74:
e5:92:7d:33:4f:bd:e3:11:50:14:7f:b2:82:93:d2:
8d:0a:a8:33:00:15:be:4c:70:1c:eb:b3:fb:c8:31:
21:e8:72:6f:18:93:5d:b4:81:ff:82:49:f7:7b:3c:
6c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:31:E6:25:9F:45:56:39:BD:5D:10:39:FC:A1:36:6B:DB:04:D1:AB
X509v3 Authority Key Identifier:
keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/3CD29BF4D46911EE8B36431CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.123.42.0/24
Signature Algorithm: sha256WithRSAEncryption
61:34:fe:c8:77:e8:dd:14:c1:69:e0:50:a1:21:c6:30:3b:26:
dc:68:7f:6a:7f:d6:8e:26:a6:8f:34:9f:4f:60:6c:1c:63:b0:
bb:00:30:0b:52:a4:4e:97:d1:80:c4:e4:d4:79:58:52:b5:2b:
cf:ea:a7:10:de:bd:6f:df:7e:1b:49:7e:c5:d2:88:a8:10:91:
1a:4f:13:b8:5a:88:35:83:77:84:e3:e7:f1:46:2c:2d:6d:10:
31:76:0a:0e:9b:96:da:2b:42:ff:43:0e:27:78:c9:11:e5:84:
df:13:d5:b5:53:0f:8c:3f:03:79:28:10:45:e6:ff:a5:6a:a1:
b1:e7:f5:de:cc:33:db:b8:3a:e4:14:83:25:fc:81:fe:90:43:
7c:89:2e:85:61:30:03:d8:29:5d:26:5c:9e:17:ae:4e:72:fd:
fc:24:ea:fe:1b:e7:e3:b4:fb:9e:4b:05:53:05:53:e6:6c:02:
e3:8d:0c:a9:fe:3a:4a:df:fd:d5:aa:f6:cf:a3:ec:3f:49:5d:
da:50:80:2e:38:ed:43:1a:ae:58:86:5a:f6:8e:02:9f:d7:75:
b7:3c:3d:03:2b:73:82:23:50:b2:52:b7:ce:95:46:ab:d1:a0:
5e:6c:ba:21:fd:d6:4a:30:c7:59:95:46:88:3a:c1:ae:c6:d8:
10:de:50:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:08:59 2026 by rpki-client