
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/6FA6ED7E82C711F0AD86D64DC4F9AE02.roa
File: 6FA6ED7E82C711F0AD86D64DC4F9AE02.roa (raw, json)
Hash identifier: EyDqWRIP2HZa6wsll9pUJm6te+t2HIVlnzU+AhtjxWs=
Subject key identifier: 88:BD:02:98:F7:51:74:09:69:29:85:A6:3A:49:4E:72:A8:06:19:08
Certificate issuer: /CN=A9146AD7/serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2
Certificate serial: 6A
Authority key identifier: 17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/6FA6ED7E82C711F0AD86D64DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:14:45 +0000
ROA not before: Tue 26 Aug 2025 21:55:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 47.72.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl
rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:40:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146AD7, serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2
Validity
Not Before: Aug 26 21:55:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a42db5-0b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:34:e9:45:7d:b8:33:ae:47:56:fa:98:9d:9a:
98:40:8b:de:4a:42:21:03:6f:5a:8f:ee:88:cb:9c:
11:b0:1e:83:6e:09:26:a8:c3:80:1e:a4:3d:55:cb:
3a:37:0a:16:77:bd:4b:27:a4:da:96:c2:e0:3c:4f:
88:6a:04:4d:1c:7a:73:a6:ab:0a:25:ee:7c:33:ca:
da:bf:09:9e:13:ea:55:d1:b3:60:93:32:3b:d4:64:
04:20:c9:6b:d9:fd:eb:69:cf:69:b6:28:e4:2c:b4:
1f:03:6c:dd:01:99:15:8a:24:89:65:c0:ea:18:f2:
26:44:09:72:a4:2b:74:d9:1e:f7:e2:52:e6:63:fe:
0c:8d:75:bb:f2:94:66:b1:99:2c:be:81:fc:50:1a:
08:da:80:c3:bc:2a:aa:b8:5c:06:a8:91:50:f5:ce:
7b:b7:9d:02:b9:3a:7f:75:43:14:5b:36:d3:4e:c0:
85:24:b6:01:4b:b8:de:5d:62:d9:a5:d1:74:e9:3c:
8b:87:41:f5:c0:d3:de:94:b4:58:20:c5:c5:1d:0d:
53:6e:0f:e7:f7:12:5c:88:2a:61:83:72:3c:b5:8c:
01:a4:ec:0e:0b:1e:6f:44:c5:4e:3b:ec:ae:5d:d6:
41:99:12:b1:53:f4:1a:d4:68:1a:81:00:22:2e:36:
e0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BD:02:98:F7:51:74:09:69:29:85:A6:3A:49:4E:72:A8:06:19:08
X509v3 Authority Key Identifier:
keyid:17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/6FA6ED7E82C711F0AD86D64DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
47.72.0.0/16
Signature Algorithm: sha256WithRSAEncryption
88:5f:e8:7f:e8:08:cd:96:c9:b3:8a:5b:b9:21:32:05:6b:80:
5d:04:89:7d:70:d8:c5:68:c1:5a:4f:e9:71:2e:d5:c2:66:86:
0b:87:0c:3d:7d:73:c8:b8:3e:c3:c6:0e:08:91:b9:a4:e9:43:
95:d0:90:47:cb:24:f3:8f:4f:f7:e6:71:75:a2:08:8e:7b:77:
56:87:a3:8f:90:0f:56:e5:75:66:b5:9a:b0:a1:d0:44:0a:ee:
95:5f:4f:f7:e6:e1:16:87:3c:24:ce:55:55:f5:01:12:2c:fb:
5f:af:86:f5:b8:71:b3:df:93:af:85:02:ff:a2:4d:47:23:f5:
13:3b:83:37:31:0c:3d:57:0b:02:d4:bb:29:25:5d:85:47:68:
6e:86:f1:b9:3b:d2:28:5d:92:0c:65:f8:5f:90:a4:ca:77:a3:
b7:80:50:94:0c:da:47:a0:be:f6:57:8a:49:ee:c2:42:c0:89:
cc:17:64:e2:3c:73:0f:b0:24:a8:6f:52:7e:10:5c:81:be:92:
3f:d3:0b:a9:21:2f:4f:f5:90:cb:a1:92:69:b5:c3:3b:ee:a2:
b6:bd:f1:3e:0f:15:1d:0a:83:58:78:c0:3c:e9:c8:0f:4a:9b:
d8:5f:68:76:72:30:30:eb:ed:14:2e:3d:b3:9e:1e:72:26:65:
92:73:ec:15
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:01:04 2026 by rpki-client