
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/6211D40A941F11EEA7C3E86FC4F9AE02.roa
File: 6211D40A941F11EEA7C3E86FC4F9AE02.roa (raw, json)
Hash identifier: rwFUZotDCsUcE5y4SWo5vzPQMph+ISXIRs0BW/9TgJc=
Subject key identifier: 10:DE:6A:95:74:12:86:58:24:01:C1:86:80:16:0D:F8:C7:27:A2:AE
Certificate issuer: /CN=A9147C4C/serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
Certificate serial: 08E1
Authority key identifier: 2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/6211D40A941F11EEA7C3E86FC4F9AE02.roa
Signing time: Sat 12 Jul 2025 21:00:54 +0000
ROA not before: Sat 12 Jul 2025 21:00:54 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 26496
IP address blocks: 2406:f380::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl
rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 20:25:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2273 (0x8e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147C4C, serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
Validity
Not Before: Jul 12 21:00:54 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=6872cd06-e013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:36:34:ae:5a:ab:98:50:7d:68:ab:58:63:bc:
5f:dd:bc:b6:98:0c:cb:11:cf:3d:a9:94:eb:d4:5e:
e4:93:12:e2:ad:ed:fa:5e:a9:91:0f:a0:24:1c:c0:
40:7b:0e:54:4e:80:3c:2a:68:0f:2d:e0:7a:70:0d:
a7:f6:83:88:cd:b4:34:56:fe:da:a9:fd:af:7e:b0:
2f:0f:68:a4:1a:70:92:39:ee:73:ec:0e:45:ca:d0:
4b:8c:c5:33:51:8f:32:19:e2:b4:20:f4:63:e3:93:
f4:14:06:ab:a1:d1:ec:f8:ce:74:ae:fa:4e:f8:c9:
11:7c:30:d6:f9:74:8e:fb:50:70:20:e5:c3:e6:b9:
73:87:e8:95:47:e0:c6:b5:7f:ba:e8:ae:80:23:d0:
52:f4:32:ff:9b:62:86:1a:23:5b:89:b7:57:e3:54:
4f:9a:06:fc:46:1e:28:ef:c1:77:29:6a:1c:3a:68:
fd:b3:dc:4e:b7:fc:89:22:76:81:f1:a1:b3:2e:1b:
34:65:e6:e7:4d:47:69:14:6d:f0:cc:f0:d5:65:e3:
54:69:59:aa:19:18:80:3d:3b:e6:30:96:a4:3e:7e:
16:1f:f2:b6:b3:cb:ae:86:b3:29:64:65:27:d1:8e:
ad:01:77:fb:44:87:b1:2d:c0:af:6d:40:2d:de:e3:
c1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DE:6A:95:74:12:86:58:24:01:C1:86:80:16:0D:F8:C7:27:A2:AE
X509v3 Authority Key Identifier:
keyid:2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/6211D40A941F11EEA7C3E86FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:f380::/32
Signature Algorithm: sha256WithRSAEncryption
7d:bd:70:bd:15:6e:97:a9:06:9b:3f:f4:08:c4:f4:59:e0:1d:
c2:c2:8c:e5:ee:b1:ec:06:6f:56:c6:b1:f7:dd:26:8f:c4:97:
39:cb:41:7e:0d:48:d4:40:7c:f2:47:d6:86:5d:15:d0:3e:c3:
21:cf:43:20:31:68:69:ce:59:3e:49:39:73:bc:31:94:8f:c0:
53:fc:7d:33:c8:5b:76:1d:46:27:da:a3:19:cf:fa:8c:13:b1:
31:24:fd:da:f1:a5:b9:10:06:87:dd:70:c2:b4:fc:bf:04:ba:
91:33:42:3d:65:d8:ee:9b:27:e3:dc:fb:95:7f:82:5d:ff:ed:
e2:51:81:9b:39:11:ae:1b:94:21:26:c6:8c:94:51:3a:07:a3:
80:b9:5e:43:78:30:35:f6:4e:6e:21:1a:84:14:fc:37:2d:63:
b7:a9:0d:c7:a7:c4:a2:cf:3c:84:44:20:7b:c5:12:c1:c7:1a:
3e:d9:42:be:38:8e:6e:05:76:a7:87:f9:c1:7d:c8:d5:af:46:
a4:0f:42:d6:26:41:7a:70:20:7b:8a:78:16:9a:44:36:ac:90:
5e:38:6d:3f:df:64:c9:b1:81:81:89:d7:fb:ed:01:91:cf:32:
b6:e2:4f:bd:e3:3d:df:f3:8a:5f:43:60:84:35:8e:8f:ff:db:
fd:6c:29:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:27:39 2025 by rpki-client