
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/2CE5BE065BDA11ECAA855355C4F9AE02.roa
File: 2CE5BE065BDA11ECAA855355C4F9AE02.roa (raw, json)
Hash identifier: yWnDOGXeBuapUFjfel16F3nDCGyHf2soSlsW7nZ7+cQ=
Subject key identifier: 6E:5B:A4:CE:0D:AA:8A:49:FF:50:0D:2F:FC:6E:BB:DB:42:12:DA:73
Certificate issuer: /CN=A9170E11/serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7
Certificate serial: 0513
Authority key identifier: 3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/2CE5BE065BDA11ECAA855355C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:24:34 +0000
ROA not before: Sat 31 Jan 2026 00:19:34 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 398355
IP address blocks: 2400:3e20::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl
rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1299 (0x513)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170E11, serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7
Validity
Not Before: Jan 31 00:19:34 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a47652-4331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9b:09:0b:45:9d:c8:0c:70:7a:41:cc:f0:5b:
66:f5:b1:f9:33:72:ee:fb:49:fe:63:dc:6f:c3:d6:
7d:3b:cc:be:da:b9:50:9e:b4:75:87:94:30:6f:b5:
95:36:c4:da:c6:fe:5c:27:4f:b7:05:99:b6:9b:83:
3a:19:74:cf:c4:01:e0:5a:05:81:6c:db:ff:f1:77:
be:fc:23:86:34:b6:fe:dc:5b:91:19:52:2b:d6:90:
40:9d:0b:f2:8e:c5:96:c2:d4:be:97:d4:33:dc:b9:
d9:2b:a6:06:03:03:13:9a:82:03:fc:a3:9a:ba:a0:
90:c1:c7:a7:07:98:f7:de:11:9a:d9:0d:5f:7d:d9:
88:c0:58:c1:94:3e:ab:04:f3:eb:71:87:80:7c:81:
bf:96:b3:07:44:9e:29:e3:a1:40:a0:54:e4:39:5c:
ab:bd:8a:01:d9:35:1b:6a:85:d1:21:d1:08:32:12:
bc:f9:fa:72:f2:4f:f1:22:f6:bc:b2:a6:46:fc:db:
65:bf:c8:28:a8:c3:81:c1:44:a1:5b:98:57:60:01:
86:2b:f9:25:2e:f6:c6:c6:3c:df:70:61:ac:5f:b7:
12:4a:32:1a:df:15:ea:ec:8c:ce:c0:d9:90:23:57:
e3:64:2b:34:ba:3b:5d:90:4e:1e:a0:4c:d5:17:a3:
d5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5B:A4:CE:0D:AA:8A:49:FF:50:0D:2F:FC:6E:BB:DB:42:12:DA:73
X509v3 Authority Key Identifier:
keyid:3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/2CE5BE065BDA11ECAA855355C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:3e20::/36
Signature Algorithm: sha256WithRSAEncryption
3c:81:6c:74:7c:86:70:5e:e1:6b:dc:47:9c:79:8f:2f:99:6c:
04:44:71:c9:de:ed:7f:5e:fe:29:e3:be:b3:13:14:76:46:2d:
3b:90:73:a8:50:10:05:e2:54:8c:0d:8c:1d:cb:2b:d4:b2:e6:
c4:f3:f5:09:94:53:96:00:d4:99:0b:f2:bd:ac:87:0d:9c:1d:
f5:b5:7e:c4:b0:fd:75:07:df:7a:7b:cf:71:1e:f0:cf:e2:a8:
24:e0:81:b3:91:74:ed:da:03:99:69:61:f4:b2:8e:cd:16:93:
3d:83:61:a9:84:04:54:22:73:c0:8d:ef:ed:74:03:0d:9a:b6:
0f:a0:c9:6b:9f:97:71:ad:a3:e7:9b:0a:ae:8d:fd:d2:d7:84:
f1:cd:e8:62:6a:4b:9f:ca:aa:c2:44:54:4b:6c:19:87:91:73:
55:8a:92:60:f9:ee:43:87:32:00:50:8f:1b:f6:7b:3c:83:63:
55:bc:5f:ac:75:67:16:45:e2:3f:d0:39:42:71:4e:27:ba:3f:
b5:ce:62:b7:62:39:a4:ae:8c:c0:93:92:67:4d:5f:76:f0:06:
9d:04:d1:f9:c6:71:40:d6:ad:7d:21:c8:f7:23:15:45:84:ce:
53:ae:14:dd:e0:5b:f5:b7:75:b9:4f:c6:cf:f5:5c:5f:c2:d7:
63:6e:42:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:11:26 2026 by rpki-client