
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/62CDEE42941F11EEA7C3E86FC4F9AE02.roa
File: 62CDEE42941F11EEA7C3E86FC4F9AE02.roa (raw, json)
Hash identifier: 0BtxTED/WXMP9oTukw6NAAjWaQllEJgBeOkdUwGyy3I=
Subject key identifier: 18:6E:23:DF:3B:37:4D:0F:A9:B8:C2:F3:D7:51:FA:70:56:E6:41:E5
Certificate issuer: /CN=A9147C4C/serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
Certificate serial: 0963
Authority key identifier: 2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/62CDEE42941F11EEA7C3E86FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:32:42 +0000
ROA not before: Sat 12 Jul 2025 21:00:56 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 398109
IP address blocks: 2406:f380::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl
rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:41:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2403 (0x963)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147C4C, serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
Validity
Not Before: Jul 12 21:00:56 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a46a2a-1c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e6:71:18:60:ff:6e:e2:bd:1a:32:03:f8:54:
9e:61:0f:51:05:44:d5:e5:7d:5b:d5:bf:21:47:83:
b1:eb:0e:db:09:d9:87:ce:a4:63:bd:33:ca:99:94:
fb:d2:a7:33:c8:5e:5c:d5:3e:62:93:41:5a:dc:1c:
39:d5:71:0b:34:b9:dd:86:56:6c:f3:a8:7c:b4:63:
6b:5a:16:2b:de:33:0d:63:ec:bb:03:51:61:0a:b4:
e5:d2:18:f7:b0:a3:6c:3d:2c:93:d7:95:c8:bc:a8:
eb:c5:b6:9e:01:08:67:d2:71:68:71:60:8b:c3:d9:
46:bd:bf:8a:fe:3d:c9:16:17:8e:50:f4:98:ed:ee:
24:dd:ce:10:4b:58:31:fc:26:dd:a9:30:07:3e:15:
15:d3:0d:1e:8c:7c:9f:19:25:29:c3:18:20:23:49:
48:2e:fd:88:44:ff:0f:c2:96:5a:c3:69:e8:9e:15:
87:1f:cc:43:32:38:08:53:b2:99:71:d7:c0:72:68:
6d:49:2a:92:c0:33:21:be:c7:ab:59:66:49:65:51:
83:c6:f9:bd:5a:03:89:85:2c:ed:91:2e:f8:0c:4f:
78:2b:4b:2d:ac:68:68:f6:a6:12:d0:aa:16:bc:8d:
f0:e5:6c:90:20:fa:37:c9:7c:01:d6:81:13:0e:9c:
79:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6E:23:DF:3B:37:4D:0F:A9:B8:C2:F3:D7:51:FA:70:56:E6:41:E5
X509v3 Authority Key Identifier:
keyid:2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/62CDEE42941F11EEA7C3E86FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:f380::/32
Signature Algorithm: sha256WithRSAEncryption
9c:28:50:22:9b:38:28:ff:e1:0b:a3:30:51:10:db:4f:f1:85:
1a:2b:ae:ea:17:77:87:f5:1f:4c:29:f1:21:4a:8a:7b:45:a3:
9e:71:b1:0c:04:dd:f7:fd:47:d0:23:56:60:e2:f1:35:76:19:
b0:c3:63:db:6f:8b:f0:7d:a6:cb:6c:0a:72:4e:9d:4e:02:58:
37:b8:3b:c8:91:df:96:00:32:b0:eb:ea:00:30:04:1f:09:2f:
a6:03:2e:d9:9d:46:99:8d:ea:a4:d3:8c:8c:ce:ab:17:c6:88:
3e:22:8d:83:9d:69:21:67:de:cc:c8:cb:d4:b5:cf:3b:d7:1f:
98:eb:71:dd:dc:33:2f:50:5d:e4:f0:b6:78:bb:63:ae:cd:b6:
e3:e3:4f:1d:48:a4:4d:50:78:e8:90:94:48:65:e5:0c:c9:9b:
ff:f3:5d:39:d9:79:c3:38:91:fd:5f:8b:de:80:ed:25:9f:6d:
be:7d:2c:d0:34:cd:d1:35:2e:55:b9:65:50:55:84:b8:94:e0:
39:2f:cd:b9:72:fd:de:53:cf:f3:67:36:19:06:3a:04:9b:0f:
19:ba:ba:61:ef:e3:84:d2:14:25:3d:c9:b0:9f:5a:96:de:ee:
8d:6b:a1:de:61:0d:b6:bb:27:bd:11:ef:cb:3d:73:1b:eb:57:
13:eb:0e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:34 2026 by rpki-client