
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/CC320712ACE011EAB535D034C4F9AE02.roa
File: CC320712ACE011EAB535D034C4F9AE02.roa (raw, json)
Hash identifier: ATSoIcgvhIoB1w29pbN50AH77sAvyF3PhL5dixTk+JA=
Subject key identifier: F8:27:4F:73:EA:A4:E4:C1:FD:7D:A0:31:D7:3D:18:96:11:C8:F2:17
Certificate issuer: /CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
Certificate serial: 1109
Authority key identifier: 5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/CC320712ACE011EAB535D034C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:12:37 +0000
ROA not before: Fri 06 Feb 2026 17:14:53 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 138467
IP address blocks: 2404:9ec0:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl
rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:23:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4361 (0x1109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123D9C, serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
Validity
Not Before: Feb 6 17:14:53 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a48195-e2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1c:57:55:e9:bc:9c:6e:a3:87:41:9d:9b:57:
10:9a:cd:00:0f:78:df:b5:43:7b:8f:6c:22:ea:e6:
aa:3f:fc:94:76:bb:f5:5c:44:50:80:1b:00:f1:ae:
cc:74:b1:84:a6:e3:bd:36:81:35:ea:46:42:f3:f4:
6f:70:0b:14:5a:d6:65:54:d7:0b:bc:a4:ce:29:27:
3a:14:23:7a:63:ff:71:69:ed:88:14:3a:b3:be:29:
1a:99:93:78:44:f9:15:6d:5e:b6:05:9b:68:d9:37:
6a:a2:62:8e:20:d8:ca:ab:c6:d7:62:51:3e:1d:b0:
19:c8:ae:02:c4:4b:98:67:81:12:bc:0f:a8:64:3d:
c5:a6:44:4a:0f:ce:65:86:99:c0:d1:1a:2c:bb:16:
e1:4f:d8:28:f2:db:5a:92:0e:26:ad:4a:6a:09:41:
d6:c7:75:37:87:02:a0:5c:12:90:97:6b:c6:95:b7:
a1:8a:d7:65:4e:c1:2e:32:fc:43:80:08:d4:0e:be:
75:9c:fe:29:52:1a:cc:9e:4b:f7:21:56:f5:71:07:
fa:b8:a9:3f:36:cf:9d:40:e8:5d:41:75:85:b9:ef:
24:74:2b:11:91:48:bb:6f:ed:71:fe:e2:19:92:4f:
5b:2a:cc:b1:00:16:9c:a4:ac:a2:f1:15:62:3a:59:
a7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:27:4F:73:EA:A4:E4:C1:FD:7D:A0:31:D7:3D:18:96:11:C8:F2:17
X509v3 Authority Key Identifier:
keyid:5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/CC320712ACE011EAB535D034C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2404:9ec0:5::/48
Signature Algorithm: sha256WithRSAEncryption
85:24:a1:6c:75:20:63:10:34:44:07:66:12:6b:48:fd:3d:1d:
85:d4:bb:df:13:82:75:a1:d1:4b:92:29:6f:55:dd:3a:a6:53:
01:0a:39:78:5b:d9:56:3a:db:7e:02:f1:82:04:c1:55:24:83:
18:93:12:ba:74:b2:de:d2:1a:48:68:00:a9:43:bc:ec:97:79:
6d:d3:6f:cd:7d:36:48:b5:20:bc:7e:d0:40:47:6f:b1:1f:7e:
8e:a7:21:01:25:c3:2b:9b:dd:c7:39:48:27:5f:f3:03:a8:38:
f2:81:3a:36:36:40:8a:f8:41:8c:aa:e6:3d:93:9e:2a:76:21:
e8:47:20:44:91:48:f4:96:0c:3f:6b:29:75:15:81:7c:34:b8:
b5:7b:67:0a:04:78:86:5a:04:c8:1f:d4:10:49:1e:a7:33:30:
a0:40:19:c3:cc:b9:37:ed:16:44:d1:e5:65:eb:47:93:cf:4a:
0f:dd:56:8b:8e:5b:42:98:a4:2f:b7:8e:90:2b:a9:07:98:f9:
7b:c2:56:24:b1:87:3d:1e:f9:3a:46:fb:9f:d9:e4:5d:53:57:
9d:8c:f5:1a:e8:c3:46:8f:20:ed:28:b5:94:8e:47:53:b5:d8:
b4:62:09:5b:42:67:f1:99:34:02:67:57:e5:8c:f0:37:85:a4:
c1:b8:f2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:27:09 2026 by rpki-client