
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa
File: AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa (raw, json)
Hash identifier: kHDQejmqjPobOzP4RpQqwvEFOqclUXhG9PAka+bN9iQ=
Subject key identifier: 6F:74:7F:9B:4F:CD:6A:57:E3:19:51:52:2F:A2:46:3A:EC:BD:3E:38
Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
Certificate serial: 0441
Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:10:28 +0000
ROA not before: Wed 07 May 2025 01:07:32 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 7586
IP address blocks: 2401:1740:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl
rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1089 (0x441)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
Validity
Not Before: May 7 01:07:32 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a464f4-9cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b8:bd:3c:62:37:9d:9d:a9:28:2a:a7:5d:43:
1b:d1:01:24:70:2c:1b:98:51:05:ed:5c:7e:99:cd:
e7:dd:a0:a0:10:08:93:06:5c:33:1f:f5:7b:72:dc:
57:6e:92:32:5a:fb:8e:98:bb:63:b8:a3:07:1a:44:
2c:28:d9:81:1f:b0:09:04:39:04:7b:67:01:cd:1e:
a3:ab:34:34:69:86:be:c8:b7:80:72:cc:66:3e:d7:
94:45:a3:7e:9a:29:d8:07:1a:32:5b:67:d4:56:75:
58:5c:95:2f:09:1d:b6:e6:a0:c6:6a:a3:66:b6:5f:
1b:19:7e:24:e2:ad:a0:8e:74:a9:f5:ff:e9:98:7d:
27:58:ae:56:8e:b9:55:31:98:2e:13:dc:fa:98:b9:
fb:c5:df:3c:91:7b:dc:59:e2:c2:48:8b:22:6b:68:
ae:b4:6d:70:f5:4b:cf:a9:3a:dd:4e:8e:67:e3:21:
ad:83:fe:43:28:20:06:e2:12:07:42:83:87:05:d7:
76:14:a2:e3:09:33:d7:6a:9f:4f:87:1e:20:03:cb:
80:cb:6d:94:6d:38:78:58:5f:1c:cb:8b:dd:c9:5c:
98:1e:9f:b0:34:31:28:f5:d5:5c:6e:3c:84:fa:86:
3c:07:30:37:82:aa:84:04:ab:b9:e1:2d:6d:1e:58:
3e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:74:7F:9B:4F:CD:6A:57:E3:19:51:52:2F:A2:46:3A:EC:BD:3E:38
X509v3 Authority Key Identifier:
keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:1740:2000::/48
Signature Algorithm: sha256WithRSAEncryption
86:1d:4d:7e:03:3f:90:a6:1d:d1:2e:f5:95:82:32:21:32:ea:
06:a7:79:96:77:62:ff:6b:ce:b2:2c:b1:ab:15:4f:dd:a6:d5:
3e:ee:0c:b8:ac:a9:56:fc:83:a6:22:ed:89:34:cd:a8:ef:9a:
ea:bb:f2:27:80:93:a5:28:df:28:8b:1d:69:df:8c:57:b7:59:
c7:5c:65:2f:08:23:16:df:7a:59:9c:3e:23:55:95:df:a9:68:
bb:fd:0b:51:37:77:96:d5:71:6c:52:46:99:b6:f0:2d:d4:2e:
f1:44:76:af:7d:ca:ee:04:8d:3e:1d:12:81:17:fc:3a:d6:97:
96:8c:93:fc:02:8a:4b:88:fa:4c:2c:1b:4f:44:f6:36:00:4e:
8c:1e:19:62:2c:d9:41:06:8c:a9:93:4d:84:d4:56:bb:7d:4e:
19:34:87:24:1c:68:af:90:d8:c3:e0:6b:b4:20:ca:45:97:73:
e1:f5:36:df:01:55:3b:3c:b0:66:ba:ec:3d:ce:3b:dd:84:09:
ac:73:78:70:46:8f:76:57:4b:6d:2b:cc:cd:6f:e8:2f:ba:4d:
05:2b:b7:ab:98:90:10:65:ee:ec:96:20:a5:e9:a0:d2:3a:05:
08:7d:d8:1a:5e:99:39:1b:f3:d8:4a:32:29:fc:e3:64:e7:76:
87:1a:d6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:14:22 2026 by rpki-client