
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/9A6A637EF48C11EBBDF92914C4F9AE02.roa
File: 9A6A637EF48C11EBBDF92914C4F9AE02.roa (raw, json)
Hash identifier: gULvTolTuEQQ8V1CNmUYM1da4itNfnCs1HnngbZhPLc=
Subject key identifier: FB:99:45:85:4A:1F:25:4F:B6:09:85:9B:FD:BB:C1:F3:1D:10:8A:AE
Certificate issuer: /CN=A9165456/serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B
Certificate serial: 0B25
Authority key identifier: 2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/9A6A637EF48C11EBBDF92914C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:30:48 +0000
ROA not before: Wed 20 Aug 2025 20:00:04 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 396982
IP address blocks: 2404:f340::/44 maxlen: 44
2404:f340:4000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl
rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:46:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2853 (0xb25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165456, serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B
Validity
Not Before: Aug 20 20:00:04 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a469b7-678d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:25:0f:9c:3a:96:d7:f5:99:a8:cd:bf:2d:6c:
8f:4d:ab:54:55:85:d2:94:59:08:7b:d4:05:21:94:
8c:a2:1f:86:0c:a5:ae:f0:7e:ba:fb:ae:c7:71:10:
d5:bb:e9:8d:eb:3f:40:67:db:20:55:59:3d:01:fe:
b9:12:b4:04:b6:72:8e:b4:cc:58:9f:e3:c5:05:32:
a5:6f:be:dd:05:43:71:3a:da:a1:a3:34:0e:66:de:
b9:d2:00:5f:62:0b:87:23:14:df:00:b8:b5:78:a0:
27:6f:de:e8:e5:a1:b3:98:85:d4:71:a1:77:4e:c0:
1c:35:69:3a:43:d0:71:05:ba:40:d6:c5:f9:93:4c:
7e:37:df:e2:23:ff:ee:b2:6d:81:8e:f7:f7:db:f8:
c9:ce:ab:7b:03:73:8c:38:b4:80:51:7a:2c:60:e7:
10:0b:4c:33:5b:81:b9:96:b4:a5:5b:fb:71:3a:aa:
73:3d:d2:0b:10:75:af:32:39:fd:fb:14:b9:67:f4:
16:36:1d:77:36:fc:df:32:8f:4d:e9:97:d4:b0:50:
65:c3:02:c9:ef:04:db:15:98:58:6d:5c:75:14:61:
e5:83:df:95:a0:80:b0:8e:13:e9:f2:05:33:01:34:
1e:eb:1a:a0:f0:2e:64:22:c9:f4:4a:fa:f4:16:35:
e7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:99:45:85:4A:1F:25:4F:B6:09:85:9B:FD:BB:C1:F3:1D:10:8A:AE
X509v3 Authority Key Identifier:
keyid:2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/9A6A637EF48C11EBBDF92914C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2404:f340::/44
2404:f340:4000::/44
Signature Algorithm: sha256WithRSAEncryption
ae:be:82:6e:72:d5:a2:35:69:69:3c:b4:4b:68:0b:42:cd:bd:
3c:4f:83:cc:d1:f2:38:da:65:ef:f9:dd:a1:49:01:98:17:02:
6a:a4:8c:b8:1e:eb:3b:4b:6a:0a:8c:f6:7c:20:2a:04:52:a1:
9b:8f:f7:53:f9:3b:58:1c:aa:97:bc:74:84:9e:d1:22:0f:b8:
1e:24:2f:af:29:50:28:f4:d5:67:06:16:c3:5f:e3:64:e0:5c:
44:34:f3:6b:03:73:50:3b:c6:7d:2a:36:93:a0:d2:7f:87:4e:
45:24:a5:39:20:28:0e:c4:1e:6a:f1:ba:2b:b2:85:18:55:54:
30:62:51:4e:8b:bc:aa:4a:11:d0:91:de:23:73:f1:52:22:45:
bd:f8:b6:63:13:35:d5:8c:42:0f:08:c4:86:e4:9c:2c:b7:ec:
71:2b:b3:7b:e6:ee:12:cc:f1:d3:c3:a6:b7:0a:48:ff:33:a7:
37:e7:13:cd:eb:23:55:59:ec:2d:3a:94:4b:96:64:94:47:40:
35:70:35:e2:e6:fc:04:22:65:82:1a:d1:2c:a5:8d:38:7e:df:
18:e1:17:fa:f8:d6:57:6d:d8:6e:52:4c:ae:c0:92:d5:b3:9d:
b4:4c:c5:14:1a:bb:11:9e:c1:9a:30:70:86:48:fe:1d:ae:d0:
63:21:20:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:00:27 2026 by rpki-client