
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/6023AFB22F5F11EEBE311577C4F9AE02.roa
File: 6023AFB22F5F11EEBE311577C4F9AE02.roa (raw, json)
Hash identifier: 5QEuxCPhlNT5MkVim+JlJUzX9cGTTGSeehOabrAMH3w=
Subject key identifier: 54:61:09:E0:C3:30:1D:C4:A1:02:A8:B1:36:E3:0E:BA:7C:C5:D0:C9
Certificate issuer: /CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07
Certificate serial: 024C
Authority key identifier: 27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/6023AFB22F5F11EEBE311577C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:58:45 +0000
ROA not before: Fri 11 Jul 2025 03:39:20 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 7674
IP address blocks: 2401:4640:170::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl
rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:13:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 588 (0x24c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141BED, serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07
Validity
Not Before: Jul 11 03:39:20 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a43805-ea15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:82:9f:80:39:1f:33:84:81:74:bb:03:cb:f0:
b4:79:04:64:9b:98:62:df:bb:e3:5e:a5:d6:e9:90:
22:8b:eb:5d:3e:1b:57:65:01:d2:e8:1c:5e:ce:3e:
7f:a2:52:15:cc:53:c2:22:50:18:2b:84:7a:99:dd:
96:35:76:c7:a6:79:96:5e:55:6f:b9:c1:83:80:fc:
ad:49:90:a0:14:38:b1:d9:f1:90:cf:36:06:06:ca:
9a:5a:a5:9c:2a:4e:01:d2:76:3e:72:73:ff:5a:9d:
70:85:b0:e4:96:9d:9f:89:15:56:7e:e4:06:78:2e:
5a:f2:1c:dc:25:29:41:a8:e0:f9:80:45:ca:2c:18:
29:b5:f5:00:87:ba:a5:8a:a9:46:e4:d0:ff:c7:65:
de:b1:75:ef:04:ac:a8:4e:8b:63:a8:60:57:f9:40:
6b:b1:66:a9:f6:59:63:08:b0:08:95:6f:c5:dd:b3:
78:93:e8:18:d5:a5:27:a6:63:2b:0a:64:31:7b:d0:
9c:1d:4a:97:43:c4:cb:51:22:e6:99:98:db:8c:1e:
40:75:74:f9:f1:f9:ef:97:d3:18:51:73:40:3d:ef:
43:17:64:1a:b2:b7:9d:fd:bd:e2:13:6d:19:f8:30:
80:74:56:85:43:fe:1e:fb:c3:fd:f7:28:ce:7e:f4:
91:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:61:09:E0:C3:30:1D:C4:A1:02:A8:B1:36:E3:0E:BA:7C:C5:D0:C9
X509v3 Authority Key Identifier:
keyid:27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/6023AFB22F5F11EEBE311577C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:4640:170::/48
Signature Algorithm: sha256WithRSAEncryption
62:3a:fb:5d:1c:22:22:64:d6:19:88:d1:f8:bb:c7:f2:6d:1c:
d8:42:aa:5b:6e:e8:24:96:3b:61:22:be:72:d1:dd:49:f4:6d:
b2:6c:84:77:31:5e:45:85:bb:1d:84:55:dc:96:51:f3:9e:5c:
46:bc:92:cb:76:66:a6:3b:7a:62:17:ec:fb:d5:76:42:26:a0:
cb:75:e4:8f:75:c6:fe:43:ef:ec:e9:0b:e4:da:0f:d9:67:11:
82:0a:14:97:8b:06:fc:e5:99:77:47:eb:3d:39:90:b1:ca:de:
36:11:88:d6:86:12:c8:8c:2f:00:6e:b0:46:74:9e:5d:9b:30:
a9:15:7c:9f:7e:03:71:4b:4f:fa:ec:3b:78:7e:63:7e:fe:0a:
96:ca:63:be:70:48:c7:18:87:5d:04:5d:09:1e:e3:c2:dc:1d:
54:3a:37:d7:63:23:95:51:64:d7:94:6e:41:63:41:a3:53:d8:
c0:19:e0:0d:e6:b9:8e:02:4b:6e:0c:67:89:be:36:11:ca:b5:
d8:a2:99:5b:45:42:e2:fe:35:e8:30:19:b7:6d:8a:83:c4:77:
03:bf:60:a7:3f:d8:a7:0b:9a:b2:fb:b2:ea:19:c3:14:15:1a:
20:94:64:a8:90:a2:8e:98:3f:29:89:2f:a0:39:52:9d:46:94:
71:e5:1e:0e
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDFCRUQxMTAvBgNVBAUTKDI3Njg5MDQzQzQzRkU2MUIzQ0UzQzRFQkU2QjZDMTVG
QkNDRDJEMDcwHhcNMjUwNzExMDMzOTIwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzgwNS1lYTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtoKfgDkfM4SBdLsDy/C0eQRkm5hi37vjXqXW6ZAii+tdPhtXZQHS6Bxezj5/
olIVzFPCIlAYK4R6md2WNXbHpnmWXlVvucGDgPytSZCgFDix2fGQzzYGBsqaWqWc
Kk4B0nY+cnP/Wp1whbDklp2fiRVWfuQGeC5a8hzcJSlBqOD5gEXKLBgptfUAh7ql
iqlG5ND/x2XesXXvBKyoTotjqGBX+UBrsWap9lljCLAIlW/F3bN4k+gY1aUnpmMr
CmQxe9CcHUqXQ8TLUSLmmZjbjB5AdXT58fnvl9MYUXNAPe9DF2Qasred/b3iE20Z
+DCAdFaFQ/4e+8P99yjOfvSR/QIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFFRhCeDD
MB3EoQKosTbjDrp8xdDJMB8GA1UdIwQYMBaAFCdokEPEP+YbPOPE6+a2wV+8zS0H
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUJFRC9GQjJBQThFQ0I3
MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVoczg0OFRyNXJiQlg3ek5M
UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0oyaVFROFFfNWhzODQ4VHI1cmJCWDd6TkxRYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDFCRUQvRkIyQUE4RUNCNzJBMTFFRDg4NEEwOTFEQzRGOUFFMDIvNjAyM0FGQjIy
RjVGMTFFRUJFMzExNTc3QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAFGQAFwMA0GCSqGSIb3DQEBCwUAA4IBAQBiOvtdHCIiZNYZiNH4
u8fybRzYQqpbbugkljthIr5y0d1J9G2ybIR3MV5FhbsdhFXcllHznlxGvJLLdmam
O3piF+z71XZCJqDLdeSPdcb+Q+/s6Qvk2g/ZZxGCChSXiwb85Zl3R+s9OZCxyt42
EYjWhhLIjC8AbrBGdJ5dmzCpFXyffgNxS0/67Dt4fmN+/gqWymO+cEjHGIddBF0J
HuPC3B1UOjfXYyOVUWTXlG5BY0GjU9jAGeAN5rmOAktuDGeJvjYRyrXYoplbRULi
/jXoMBm3bYqDxHcDv2CnP9inC5qy+7LqGcMUFRoglGSokKKOmD8piS+gOVKdRpRx
5R4O
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:47 2026 by rpki-client