
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/8A69BFBAC67011EFAE929D0DC4F9AE02.roa
File: 8A69BFBAC67011EFAE929D0DC4F9AE02.roa (raw, json)
Hash identifier: dcT8VwGDc2u21DKh+yQ/NDXOjAOgW0Wax3bqcrB3XnM=
Subject key identifier: 37:8E:34:E3:E0:23:25:18:BA:55:1C:80:26:96:9B:EB:00:7D:C3:F8
Certificate issuer: /CN=A912F281/serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615
Certificate serial: DF
Authority key identifier: C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/8A69BFBAC67011EFAE929D0DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:25:59 +0000
ROA not before: Sun 01 Mar 2026 08:25:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135609
IP address blocks: 2401:e2a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl
rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:26:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223 (0xdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F281, serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615
Validity
Not Before: Mar 1 08:25:59 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3f817-2ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3e:75:98:b9:1c:02:03:2a:e8:86:4a:90:4e:
9a:a6:25:4a:94:6d:8d:e0:93:fd:22:8d:50:16:81:
8e:6f:eb:d6:c1:fd:5a:56:94:62:5d:04:55:42:8b:
dc:9b:86:5a:8a:0a:54:96:20:c8:9b:ba:31:e5:2e:
e3:ff:25:f7:a8:28:2f:fa:aa:6d:8f:ff:02:f3:90:
83:b0:32:68:27:c1:ab:1f:a8:65:c2:ef:3a:61:1e:
55:f0:fd:16:62:6b:ce:39:c3:c2:0a:60:a3:5e:c4:
d3:97:a2:13:64:d9:d5:13:ae:b5:3e:47:35:31:f0:
4c:a0:47:f7:46:b2:ce:79:11:06:3d:9f:b8:3b:e0:
2c:55:84:75:1c:cc:7d:05:2f:fe:45:15:5d:07:b7:
20:dd:84:0f:85:ca:0e:7f:08:fa:5b:fd:2e:fa:d9:
71:7d:1b:b7:7f:7c:90:4f:ee:3b:67:13:71:f6:17:
fe:0e:b3:36:2b:02:64:66:42:70:60:4c:ba:58:a5:
10:c6:4b:f4:61:8d:6a:13:7b:9d:ae:77:22:e5:d6:
7c:27:54:15:fb:1a:89:e8:ed:27:06:f8:c5:e7:80:
4c:d4:d4:5e:26:67:17:0e:59:12:e8:83:3e:47:88:
16:e7:d4:b7:3e:82:57:a1:21:35:9d:cc:9d:d5:23:
89:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8E:34:E3:E0:23:25:18:BA:55:1C:80:26:96:9B:EB:00:7D:C3:F8
X509v3 Authority Key Identifier:
keyid:C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/8A69BFBAC67011EFAE929D0DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:e2a0::/32
Signature Algorithm: sha256WithRSAEncryption
c6:27:86:15:5f:f2:bb:2b:97:2f:96:0b:a9:dd:b3:0c:75:37:
96:48:cf:92:fa:a3:9d:ae:79:ef:9a:4f:3e:5f:ef:f4:13:3f:
71:fd:78:74:ba:ef:bd:dd:56:fc:ad:19:8e:2d:ed:a8:d2:ea:
d1:00:67:33:de:5f:0d:a1:df:29:f7:1c:73:23:a8:3f:11:6b:
a0:20:16:04:cd:9e:e7:1a:3a:29:f6:19:f5:98:fe:79:d0:dd:
2c:fe:54:26:37:ce:06:95:df:85:29:3f:44:74:9f:af:61:09:
16:2b:c6:9e:e4:a0:47:ab:6e:c0:fa:d8:f6:b2:ec:2f:2b:97:
87:82:bc:6e:cd:ef:9a:0e:85:54:b3:7e:65:af:35:d0:de:96:
ec:cf:1e:11:e5:0e:74:9b:99:80:a6:bd:b2:51:96:8b:bd:17:
dc:26:0d:90:ca:5a:bd:1f:11:63:ee:62:3c:34:89:db:04:8b:
34:bd:c3:51:55:c2:e4:ae:d8:5b:fe:21:e2:46:91:db:0d:97:
0d:38:c2:71:ac:0a:58:d6:68:bb:57:42:bc:51:b4:69:c6:74:
b3:ee:b3:c4:7d:9e:f5:38:bb:5e:c2:3f:e5:f0:79:cc:05:ca:
bc:e2:ef:30:55:88:8f:33:29:0e:23:d7:39:cf:4c:98:bb:da:
a9:86:00:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:53:50 2026 by rpki-client