
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/CA9C62B6011911F0A7636250C4F9AE02.roa
File: CA9C62B6011911F0A7636250C4F9AE02.roa (raw, json)
Hash identifier: RUrsKpZBh2bHefYwp4oJVAW6UCst5icc8lXVG39cTUM=
Subject key identifier: B0:C1:E6:80:9D:92:A5:64:7C:7A:62:25:28:45:09:A3:5F:A0:3B:B3
Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Certificate serial: 0C05
Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/CA9C62B6011911F0A7636250C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:15:45 +0000
ROA not before: Thu 28 Aug 2025 19:40:46 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 55569
IP address blocks: 2400:8800:1002::/48 maxlen: 48
2400:8800:1003::/48 maxlen: 48
2400:8800:1004::/48 maxlen: 48
2400:8800:1005::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:23:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3077 (0xc05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Validity
Not Before: Aug 28 19:40:46 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a48250-4d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8c:92:4d:df:7b:ea:54:3a:6e:c7:82:eb:e7:
48:7a:db:14:ed:2a:1f:62:f1:2d:30:4a:cd:23:9d:
d9:55:1c:51:6e:6a:09:c6:dd:08:dd:0a:79:e4:d3:
95:78:62:99:68:e5:e5:55:6d:27:a8:5e:b5:5b:0c:
c6:de:2f:50:b7:c5:f5:53:f6:37:ea:90:a1:d7:1b:
04:58:2e:9e:0e:b7:f7:b0:95:d9:bf:93:6d:bd:66:
e2:4b:15:67:4d:b6:9d:01:98:24:84:d2:ae:b3:d9:
e1:31:be:13:fb:9b:dc:ad:b5:70:66:29:3a:48:51:
f1:0c:d5:55:6d:25:3a:12:9e:53:08:ee:c8:17:35:
c8:04:99:06:64:af:e5:c5:54:2d:17:7e:76:f9:46:
ca:bd:5f:b5:b5:1e:e0:94:25:3c:5a:a9:f3:2a:e7:
33:ae:2e:6b:e0:7e:9e:31:e5:59:96:47:27:b8:a7:
0f:03:cc:fd:a1:11:f1:fb:79:79:11:fb:24:42:e3:
d0:d2:59:db:57:f9:ad:a2:da:bf:03:e6:6c:49:97:
d4:18:6c:aa:ca:1a:97:54:b4:c8:4f:9d:e4:be:ed:
d1:16:e6:6b:77:c1:d3:49:f2:14:b8:9e:4a:cc:49:
4b:f1:e6:4f:54:02:71:47:f3:0d:64:b9:84:7c:b3:
59:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C1:E6:80:9D:92:A5:64:7C:7A:62:25:28:45:09:A3:5F:A0:3B:B3
X509v3 Authority Key Identifier:
keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/CA9C62B6011911F0A7636250C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:8800:1002::-2400:8800:1005:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0f:3f:76:ec:b6:40:a9:24:df:08:d0:49:78:fd:f1:f0:61:00:
41:9d:3e:1d:23:2e:85:04:55:62:34:54:f0:f9:c1:bc:bb:05:
5c:cb:aa:68:d9:0f:38:36:03:48:bf:2d:f7:22:22:89:4e:41:
2b:8f:cf:a1:b3:ab:bc:65:18:a3:d3:a3:87:46:70:68:2d:1d:
5c:d8:b2:e2:38:d8:f1:08:9b:8e:95:06:1c:90:69:3b:6c:82:
d2:53:5c:b6:e0:92:84:02:2b:19:b7:0c:cd:17:8d:68:6e:5c:
ec:e3:71:66:3c:50:26:ec:bb:d1:f3:fd:41:90:f6:ae:ec:98:
a5:46:40:09:ba:d4:ed:90:37:5b:4d:8c:60:b2:1a:65:a0:fe:
3f:07:db:e3:8c:1f:62:cf:f8:e0:0b:eb:31:5b:7c:e7:54:4b:
6f:65:71:3b:8c:20:09:e5:24:c6:45:af:a1:64:fe:91:99:cf:
64:70:13:30:ea:09:6e:48:d9:8d:af:46:9c:fe:64:04:3c:7b:
bf:95:27:3b:ef:22:f1:42:a8:65:4b:b8:de:c3:5c:09:93:7f:
bf:dd:9f:e0:07:3f:0f:fb:55:72:1a:ff:17:1e:99:60:f5:84:
4b:e0:79:4b:49:65:d7:42:a4:23:14:b0:f5:e3:56:0a:74:d0:
7c:46:61:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:10 2026 by rpki-client