
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/2FB32D18656611F1BCA7175E9E47A888.roa
File: 2FB32D18656611F1BCA7175E9E47A888.roa (raw, json)
Hash identifier: 6JnZ2Rfkl+jpMosCCBlC1Q8UNFhoX1SLQq1/RqNVuVA=
Subject key identifier: 7B:0D:2B:49:01:E3:DF:B1:2B:D2:3F:C2:0A:87:89:12:5F:23:A1:79
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 0945
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/2FB32D18656611F1BCA7175E9E47A888.roa
Signing time: Thu 11 Jun 2026 07:21:39 +0000
ROA not before: Thu 11 Jun 2026 07:21:39 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 214266
IP address blocks: 2401:2c80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:41:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2373 (0x945)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Jun 11 07:21:39 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a2a6203-d4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2f:f9:18:53:9b:bd:b9:d0:d8:ac:f1:d4:13:
0d:14:1e:05:26:dd:b0:cd:81:26:00:91:21:64:2e:
71:4f:6c:42:bb:6b:32:a3:a8:37:94:3f:9e:51:50:
38:85:9d:68:3f:b6:72:54:61:a2:41:e2:61:fd:5f:
ea:de:45:aa:39:08:08:16:b5:44:d3:dc:43:22:e0:
c6:b9:12:c5:ed:37:7f:a1:66:6f:f8:c6:e1:d3:81:
b3:94:ed:91:15:e0:64:22:9a:55:68:17:cc:c3:1b:
ed:67:09:af:36:c5:a3:fb:ca:a8:a5:0c:2a:2c:e1:
6c:b1:f3:33:fa:2e:04:49:23:63:b1:f5:b6:56:00:
3c:7c:1f:b9:2f:18:c2:84:49:47:63:b9:f2:e7:d0:
f7:ad:7f:5c:1f:1d:1d:ad:f1:7a:47:43:fd:cc:75:
8a:8b:95:3a:73:dc:13:98:d1:99:52:41:e2:e8:37:
53:6f:9e:cd:5b:37:85:f9:98:08:97:fa:0b:5b:63:
82:75:4e:fe:35:6a:86:fe:54:39:8b:ed:1f:a6:4d:
e8:0c:c3:c4:7f:4f:79:0b:67:d5:3d:fe:75:c6:87:
bb:a8:23:fb:20:f6:49:dc:6c:9d:6c:d5:cc:7e:a5:
49:ee:40:5e:e0:05:0f:ef:13:4c:90:54:8d:7e:46:
63:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0D:2B:49:01:E3:DF:B1:2B:D2:3F:C2:0A:87:89:12:5F:23:A1:79
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/2FB32D18656611F1BCA7175E9E47A888.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:2c80::/32
Signature Algorithm: sha256WithRSAEncryption
2e:80:d6:1a:c9:af:e2:bb:d4:ed:6c:20:8c:59:65:f8:2b:23:
4e:81:69:a6:11:63:df:fb:d7:cb:f4:58:b2:f4:15:35:4d:5e:
0f:7d:3e:e4:9b:4e:ed:66:01:db:f0:fc:91:9b:a2:92:15:ed:
66:44:96:9d:df:7c:c0:ba:8b:cc:7a:07:b0:4c:60:99:bd:5f:
f6:a2:92:e3:11:52:35:a0:c2:b3:58:f6:df:e7:99:81:00:8e:
3c:85:1f:6b:de:bb:01:89:f8:6d:ca:e9:cb:ee:df:b4:05:54:
23:b8:3a:2a:95:4e:a5:41:91:d6:31:a9:de:36:70:32:21:23:
69:dd:71:c7:8d:1d:be:69:24:80:a3:03:fe:e7:20:d1:af:f6:
9a:a9:d1:63:61:d0:50:82:6b:3e:1f:88:77:2b:9a:33:99:74:
fc:8e:28:e7:1a:da:b4:1e:b6:55:e1:37:b5:f6:22:67:be:31:
04:51:0d:2e:30:25:e0:9c:c0:eb:04:6f:ec:84:ea:ad:a6:ce:
f2:87:f5:08:bd:28:0f:e6:fd:52:fd:bf:c9:3c:ac:41:15:a7:
8b:3a:ec:db:88:49:66:cb:c6:94:32:de:94:9e:3d:6c:01:19:
06:3f:39:dc:f7:87:1a:f8:79:be:a3:8c:11:b1:b9:37:49:96:
3f:b5:db:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:06 2026 by rpki-client