
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/6B5A80B80B8211EAAD5B6B4AC4F9AE02.roa
File: 6B5A80B80B8211EAAD5B6B4AC4F9AE02.roa (raw, json)
Hash identifier: dGkv/rtzo56BVtckHVatWs5obEe9EAieuRY8f0MtX/U=
Subject key identifier: A6:2F:14:8B:D2:53:DC:E4:16:C3:64:78:7D:7E:42:05:DA:14:D1:F0
Certificate issuer: /CN=A9129797/serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43
Certificate serial: 11AC
Authority key identifier: 70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/6B5A80B80B8211EAAD5B6B4AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:08:56 +0000
ROA not before: Thu 26 Feb 2026 17:15:12 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 138560
IP address blocks: 2404:43c0::/32 maxlen: 32
2404:43c0::/48 maxlen: 48
2404:43c0:1::/48 maxlen: 48
2404:43c0:2::/48 maxlen: 48
2404:43c0:3::/48 maxlen: 48
2404:43c0:4::/48 maxlen: 48
2404:43c0:5::/48 maxlen: 48
2404:43c0:6::/48 maxlen: 48
2404:43c0:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl
rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4524 (0x11ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129797, serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43
Validity
Not Before: Feb 26 17:15:12 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a472a8-e0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:42:32:de:d2:10:10:ab:d4:29:72:a5:24:18:
92:1d:36:18:6f:d8:34:7e:5c:a1:f6:ec:5c:68:21:
4c:71:26:3c:a5:3d:09:90:e5:e8:b0:b7:4b:0a:06:
06:21:13:59:8d:08:a9:9e:77:41:b9:66:a8:1e:9e:
12:61:61:6e:49:ca:1e:b6:3f:d6:7a:28:e2:be:eb:
36:b8:7f:78:3f:ac:1b:1d:70:fa:94:83:cd:63:f8:
a5:47:f5:b4:b2:33:4d:b3:09:f3:9c:9b:c8:a4:69:
8c:64:f0:57:8c:ea:96:ab:f9:9c:a7:ed:8a:55:db:
1c:6d:88:1f:35:18:a3:20:c1:82:ed:6a:1a:58:8b:
3f:b7:19:63:cf:32:8f:e6:8d:87:14:29:7c:b3:0e:
d6:07:76:fa:e0:f2:f4:54:2f:03:f9:3f:c5:c8:c4:
c4:ad:a7:40:f0:40:0d:5e:3d:96:b0:40:51:39:a8:
a9:ef:36:f5:ed:14:91:ce:3c:b3:65:32:89:1f:7b:
5d:6c:ca:e3:c2:db:cf:ed:cb:d1:7b:bc:0b:67:da:
2d:4f:5f:24:c1:2d:94:b7:af:7f:d6:5b:51:e4:6c:
fc:ee:07:07:39:7b:69:72:9a:30:10:46:65:bc:07:
d1:98:af:15:fd:6d:a3:5c:47:55:8a:57:28:a8:12:
6b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2F:14:8B:D2:53:DC:E4:16:C3:64:78:7D:7E:42:05:DA:14:D1:F0
X509v3 Authority Key Identifier:
keyid:70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/6B5A80B80B8211EAAD5B6B4AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2404:43c0::/32
Signature Algorithm: sha256WithRSAEncryption
64:78:d0:23:aa:9e:d1:9c:ea:18:e7:5d:fa:14:e0:39:da:6b:
b6:da:73:48:8c:a2:da:c2:9d:70:54:4a:f8:c8:10:05:87:8b:
28:5b:f4:9b:7b:1b:7e:8b:ec:84:65:e4:b2:3b:ee:3d:a6:05:
cc:1e:18:24:47:f5:50:17:36:bb:b3:70:b4:41:bd:17:a0:5b:
6d:e4:71:20:8c:78:71:85:1d:af:e2:76:ac:0c:8f:1f:c6:20:
d3:f6:50:d7:e8:67:89:da:c4:1a:9b:a4:4c:7b:a2:26:26:96:
94:20:15:fd:a9:f7:e1:e1:60:a3:06:65:30:f7:75:c5:91:2b:
b9:dd:7d:70:82:66:0a:55:51:f2:c8:4a:b1:d1:5d:af:bf:60:
c7:ce:d8:5f:5b:2a:16:7b:fa:11:48:34:c8:27:84:b0:34:97:
12:c4:03:9f:bb:e3:2d:6a:8b:9f:e0:4d:de:bc:92:f5:15:cd:
a2:18:78:f7:f2:ee:b9:ff:2a:0e:ce:28:ca:f6:b8:6b:e1:18:
82:72:23:d3:4e:fd:1a:e4:e2:54:68:b8:9b:77:83:aa:8a:42:
2c:c1:9b:e1:94:a0:dc:b4:a1:40:1e:18:36:09:3b:f4:3e:8e:
50:91:6d:0d:9a:b1:dc:31:cf:ed:6a:aa:c8:4d:dd:38:91:28:
b0:b8:04:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:36:42 2026 by rpki-client