
$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/A2369FBA595F11EF8C3B3D31C4F9AE02.roa
File: A2369FBA595F11EF8C3B3D31C4F9AE02.roa (raw, json)
Hash identifier: 8C9LDupV6BTb73S5fdDupYh39mCxESKwTImywmqhv28=
Subject key identifier: 13:0C:E3:82:E7:33:BD:73:40:A8:BC:00:33:1A:04:BD:0A:6A:4B:50
Certificate issuer: /CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
Certificate serial: 0F1B
Authority key identifier: C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/A2369FBA595F11EF8C3B3D31C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:42:51 +0000
ROA not before: Thu 24 Apr 2025 17:46:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18254
IP address blocks: 2404:8ac0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl
rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3867 (0xf1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912698E, serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
Validity
Not Before: Apr 24 17:46:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a46c8b-af91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6b:44:24:37:d5:6e:ff:46:6f:25:17:5a:7a:
bd:b9:c2:7f:ad:8b:ad:a4:c2:10:d2:a1:9e:0c:2f:
b7:36:62:f8:2d:f3:ca:4e:6d:a5:56:d1:87:63:2b:
ba:ed:28:81:c2:6a:e4:99:2f:b0:20:ac:57:c5:8e:
a3:a5:71:d0:b4:a6:4e:c8:cb:d3:3c:e2:a3:0e:b6:
f4:e0:ae:9e:92:30:7c:14:43:66:f3:d2:54:58:39:
db:0f:98:c4:53:d1:87:c2:83:b8:0c:80:2f:05:86:
30:74:8d:ce:f5:52:1b:f4:24:a6:a0:20:bd:37:1f:
af:3c:58:dd:b1:86:22:bb:9e:0c:60:d5:fc:6c:71:
27:48:16:89:10:13:f5:dc:32:3e:9f:7b:0d:5f:03:
e2:c2:e1:ff:2b:93:8d:02:07:0f:c4:19:19:b3:4c:
7b:91:ab:c7:ba:fc:05:63:2b:28:8a:f0:0d:f8:6e:
10:96:32:6f:c0:82:b4:58:cf:ef:21:4a:ef:ff:c3:
53:56:5a:12:39:17:19:5b:85:e0:87:92:10:9e:51:
25:6b:23:8b:28:b9:45:4f:88:bf:68:66:ca:87:a2:
2d:87:ff:24:4a:ea:a1:2f:03:bf:df:ac:be:3f:82:
91:fe:7d:8d:c7:5e:d7:1d:e5:67:95:26:19:ad:2a:
db:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0C:E3:82:E7:33:BD:73:40:A8:BC:00:33:1A:04:BD:0A:6A:4B:50
X509v3 Authority Key Identifier:
keyid:C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/A2369FBA595F11EF8C3B3D31C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2404:8ac0::/32
Signature Algorithm: sha256WithRSAEncryption
06:15:90:44:61:92:42:04:9e:89:03:bf:c0:cd:5a:90:c9:80:
fd:3e:dc:85:6e:ef:6c:0b:f0:a5:88:d3:a3:61:84:a4:53:10:
a4:fe:bc:19:ff:73:04:1d:a5:50:2e:5c:e5:04:fd:bd:d5:62:
01:c2:7f:fe:8d:a7:54:85:0f:ab:41:33:26:bc:e4:0d:72:75:
d0:25:9f:39:d6:c1:7c:cd:ab:9b:44:49:88:91:b5:0b:02:38:
79:4c:9e:21:50:a0:1a:26:1a:0f:d1:8d:91:08:b6:b6:bb:73:
36:b5:b5:63:16:61:f5:8b:7f:33:c9:84:e8:73:03:8c:b0:0c:
c9:b4:f7:3d:09:c9:52:e9:70:fd:98:3b:03:b7:a5:54:30:95:
49:ec:91:ce:5c:5a:88:1c:68:0e:26:1e:43:d0:c0:c1:aa:92:
38:f8:c7:24:81:a4:60:e8:f8:fd:4c:ce:7c:2f:fe:9d:54:c5:
52:d1:37:ea:b3:c7:ab:98:fb:90:b2:67:9b:3f:bc:7e:68:f9:
a6:5a:30:69:58:e1:94:1a:1a:83:b0:40:70:0f:98:38:43:01:
52:7f:ab:42:34:d7:a5:7c:0f:8c:5d:90:54:a1:8a:f7:76:4f:
4e:2a:5d:6e:79:c3:73:db:2e:93:77:2e:20:0a:da:c9:eb:6a:
d1:ac:91:5a
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgICDxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjY5OEUxMTAvBgNVBAUTKEMwQjlDMTFCMUIxNjBGMzIxQjhBRUM0Q0ZDREREQUQ4
OTVGQzQ3REUwHhcNMjUwNDI0MTc0NjQ3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NmM4Yi1hZjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk2tEJDfVbv9GbyUXWnq9ucJ/rYutpMIQ0qGeDC+3NmL4LfPKTm2lVtGHYyu6
7SiBwmrkmS+wIKxXxY6jpXHQtKZOyMvTPOKjDrb04K6ekjB8FENm89JUWDnbD5jE
U9GHwoO4DIAvBYYwdI3O9VIb9CSmoCC9Nx+vPFjdsYYiu54MYNX8bHEnSBaJEBP1
3DI+n3sNXwPiwuH/K5ONAgcPxBkZs0x7kavHuvwFYysoivAN+G4QljJvwIK0WM/v
IUrv/8NTVloSORcZW4Xgh5IQnlElayOLKLlFT4i/aGbKh6Ith/8kSuqhLwO/36y+
P4KR/n2Nx17XHeVnlSYZrSrbYwIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFBMM44Ln
M71zQKi8ADMaBL0KaktQMB8GA1UdIwQYMBaAFMC5wRsbFg8yG4rsTPzd2tiV/Efe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjk4RS9GMTlBN0M5NDlD
MUMxMUU5OTJGQUZCMUJDNEY5QUUwMi93TG5CR3hzV0R6SWJpdXhNX04zYTJKWDhS
OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dMbkJHeHNXRHpJYml1eE1fTjNhMkpYOFI5NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjY5OEUvRjE5QTdDOTQ5QzFDMTFFOTkyRkFGQjFCQzRGOUFFMDIvQTIzNjlGQkE1
OTVGMTFFRjhDM0IzRDMxQzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJASKwDANBgkqhkiG9w0BAQsFAAOCAQEABhWQRGGSQgSeiQO/wM1a
kMmA/T7chW7vbAvwpYjTo2GEpFMQpP68Gf9zBB2lUC5c5QT9vdViAcJ//o2nVIUP
q0EzJrzkDXJ10CWfOdbBfM2rm0RJiJG1CwI4eUyeIVCgGiYaD9GNkQi2trtzNrW1
YxZh9Yt/M8mE6HMDjLAMybT3PQnJUulw/Zg7A7elVDCVSeyRzlxaiBxoDiYeQ9DA
waqSOPjHJIGkYOj4/UzOfC/+nVTFUtE36rPHq5j7kLJnmz+8fmj5plowaVjhlBoa
g7BAcA+YOEMBUn+rQjTXpXwPjF2QVKGK93ZPTipdbnnDc9suk3cuIArayetq0ayR
Wg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:36:31 2026 by rpki-client