
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/06FAE294924F11EF80B1115DC4F9AE02.roa
File: 06FAE294924F11EF80B1115DC4F9AE02.roa (raw, json)
Hash identifier: zwt4jimE5dzItIYvflW2AfnzB22khQhDre8vwGomnT0=
Subject key identifier: 2C:CF:FA:50:F5:78:B4:45:C9:8D:9F:71:61:62:2E:93:CF:68:66:57
Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial: 07DD
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/06FAE294924F11EF80B1115DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:42:54 +0000
ROA not before: Tue 02 Sep 2025 23:44:29 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 967
IP address blocks: 2401:2660:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2013 (0x7dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139322, serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Validity
Not Before: Sep 2 23:44:29 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a488ae-dbcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:df:49:f9:5e:52:d5:ef:8a:32:78:b5:24:77:
fb:51:34:9e:e8:78:6f:97:da:85:0c:ee:a2:6c:1d:
1a:6b:34:34:5c:77:bf:c0:fa:f5:e0:f3:ee:8f:67:
04:2e:de:73:18:75:6b:2b:2b:8d:a9:5a:96:66:13:
71:f9:fe:4d:56:c0:59:44:5d:10:58:c6:5c:fd:75:
ac:e4:46:25:42:7e:39:3f:52:b3:6f:f7:17:94:68:
35:ba:30:05:21:92:e6:0c:68:a0:70:4f:59:ee:c1:
a9:fc:d9:28:6a:ad:47:62:9d:54:c9:5b:7b:3b:46:
9c:27:6a:80:11:3f:90:1d:44:a0:47:1b:73:15:a3:
17:46:28:f9:ed:60:87:cd:67:d1:67:c1:bb:f4:5c:
98:54:e8:49:31:46:ea:12:22:85:45:77:3d:b6:ff:
da:09:42:48:df:0c:76:ae:6d:d2:13:92:e5:4c:33:
81:d6:52:73:23:6a:4a:07:b6:64:1f:dd:30:bd:67:
57:e5:52:a3:40:75:5f:0f:c6:82:66:db:7f:4b:e0:
0c:07:7d:c0:12:0d:49:9a:ad:d3:3d:bc:44:d5:3c:
93:02:24:a7:c4:48:c5:d3:b8:1e:7c:db:d0:c2:79:
93:03:92:2e:bc:be:e0:15:94:81:9b:44:3d:1d:5d:
38:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CF:FA:50:F5:78:B4:45:C9:8D:9F:71:61:62:2E:93:CF:68:66:57
X509v3 Authority Key Identifier:
keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/06FAE294924F11EF80B1115DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:2660:2000::/36
Signature Algorithm: sha256WithRSAEncryption
4f:10:b1:c1:fa:59:76:f7:35:f6:d7:cd:bd:44:6f:e2:9e:e1:
4f:0d:62:0a:8e:b7:33:8e:eb:98:c9:01:c7:5e:ed:2d:fc:58:
5b:4f:6a:46:a7:92:9c:aa:a1:39:97:58:97:0d:ed:f6:9d:e5:
4d:47:93:c4:2c:7a:1a:70:00:bd:42:7f:ac:3e:ed:5a:58:8a:
12:9e:d8:c1:fc:77:6a:c1:39:f5:50:c1:7f:eb:85:6a:f6:8d:
d3:2f:80:4f:4d:dd:11:ba:08:76:3c:84:e5:d1:e0:2b:b9:9d:
4b:92:e4:c0:38:9c:2f:8d:a9:58:05:d2:0f:d2:43:d1:a1:32:
3c:85:ba:5b:6d:ad:76:5b:ee:7b:2a:a9:39:0b:94:59:53:72:
eb:7b:80:74:dd:d8:ed:cd:f2:27:9d:94:11:07:19:7d:19:f8:
fe:b8:6b:bc:e5:a9:50:28:35:dd:95:9d:5b:a1:aa:53:23:a1:
53:31:a8:e6:87:12:78:b2:d5:d2:3f:99:8b:be:d6:d8:28:66:
ce:50:95:d9:d4:23:f1:5d:fe:c5:55:7f:97:f1:75:b2:39:11:
2b:6b:a2:a7:9f:cb:73:d9:25:8a:3e:d2:79:c8:8a:33:5b:6e:
90:b8:7e:e6:85:66:be:f2:4f:39:94:02:9f:2c:6a:1e:57:8b:
80:60:9f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:14:46 2026 by rpki-client