
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/6211D40A941F11EEA7C3E86FC4F9AE02.roa
File: 6211D40A941F11EEA7C3E86FC4F9AE02.roa (raw, json)
Hash identifier: BcVqX3QMZjJ8uxKDFNQBNxA0xJqgYL6h1gx88zp3U2Q=
Subject key identifier: 62:4B:F6:59:7D:37:20:52:01:9D:78:69:31:E6:50:CF:8E:12:54:C8
Certificate issuer: /CN=A9147C4C/serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
Certificate serial: 0961
Authority key identifier: 2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/6211D40A941F11EEA7C3E86FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:32:41 +0000
ROA not before: Sat 12 Jul 2025 21:00:54 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 26496
IP address blocks: 2406:f380::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl
rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:41:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2401 (0x961)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147C4C, serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
Validity
Not Before: Jul 12 21:00:54 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a46a28-3d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:34:d9:f4:6a:fc:a1:60:7b:ac:e5:85:ba:4f:
cb:5c:0b:c0:21:17:2c:7b:2b:36:8a:43:37:98:30:
03:d9:b2:3b:29:85:0d:54:2f:32:c7:51:81:a3:0d:
4f:9a:bd:05:00:0f:e7:8a:62:a0:a8:04:07:6b:67:
db:ed:cd:69:94:72:7a:c9:83:6e:5d:c7:82:8b:fa:
e5:e8:10:ad:33:c0:49:09:58:a2:97:e7:53:63:3b:
b7:89:b3:4e:2e:20:bc:ab:11:61:cc:87:1b:b6:61:
0d:85:8e:2c:b8:b4:a0:d5:a1:4b:a1:ec:1a:90:31:
7d:11:21:db:85:e5:77:1f:ca:20:49:42:ec:15:09:
66:76:58:71:9b:a9:b5:10:10:82:0d:05:86:50:9c:
7d:3f:fe:2c:3c:1c:11:a0:42:ac:23:56:aa:ea:59:
34:cf:ad:8f:89:e9:2d:e5:49:d2:00:53:53:f2:f6:
b1:3b:57:e8:9f:2d:ff:cd:b9:fb:f7:c7:c1:9f:f0:
4c:46:38:07:a1:67:18:0c:8e:e9:3d:dc:1f:cf:48:
4b:a7:7a:5e:d9:bd:c6:f0:82:20:40:52:15:71:b9:
bf:f8:ba:88:46:b3:f7:e6:04:79:b2:2d:ee:8e:39:
ee:cd:ff:21:d2:71:68:dc:8a:34:7d:37:ae:50:4b:
39:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4B:F6:59:7D:37:20:52:01:9D:78:69:31:E6:50:CF:8E:12:54:C8
X509v3 Authority Key Identifier:
keyid:2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/6211D40A941F11EEA7C3E86FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:f380::/32
Signature Algorithm: sha256WithRSAEncryption
1e:1b:7f:12:19:92:83:50:20:b0:b1:bb:c2:a6:95:5d:6e:cd:
52:6a:01:af:7f:6e:20:c7:12:66:32:fb:50:1e:66:8d:62:35:
43:91:01:a2:9a:eb:fa:fd:87:c1:8d:87:65:60:68:5a:ef:9c:
41:13:b6:f2:25:41:df:1f:ae:c9:35:c1:6f:31:3e:c5:3b:be:
14:33:80:97:4b:5a:66:77:cb:d1:df:eb:d6:63:49:4c:62:0d:
59:63:ed:96:fa:7d:fc:3f:2a:be:52:32:8b:05:49:aa:d4:af:
d9:8a:49:f7:34:f4:4d:e9:8a:77:ef:76:b6:ee:8e:49:a6:73:
71:0a:b5:13:3c:57:8d:5e:a7:9e:3d:9b:73:e0:08:c6:12:a5:
96:19:82:f9:dd:f8:1c:a1:92:c3:85:12:99:ed:63:00:6c:84:
c9:f2:b9:55:49:52:d5:e5:ab:e6:8b:6b:cc:5a:ee:1e:1d:58:
f0:77:0e:74:60:3f:71:44:54:56:61:2c:93:6b:8b:37:e4:a5:
a0:8a:05:50:f0:df:c4:76:1f:d8:74:db:fe:97:04:ec:e5:66:
58:f0:7a:76:8d:5a:9e:67:b0:0a:39:25:f7:80:23:32:8a:31:
82:4a:68:4c:e9:d7:f7:f4:89:c0:80:ba:8a:68:38:a6:ce:97:
fe:30:a0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:25 2026 by rpki-client