
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/0FB60AEED6D711F085B1D0E884D3641D.roa
File: 0FB60AEED6D711F085B1D0E884D3641D.roa (raw, json)
Hash identifier: zu2J1LZYT0w/3iHjLznZWECGOhdsg6myGC2fCgr+ku8=
Subject key identifier: FB:B5:8E:7A:AD:3E:CA:79:3F:9B:86:EF:F4:8A:03:33:34:1A:05:86
Certificate issuer: /CN=A9172989/serialNumber=AB69C74025489AFD61747FF9335B147E20BB25D4
Certificate serial: 2D
Authority key identifier: AB:69:C7:40:25:48:9A:FD:61:74:7F:F9:33:5B:14:7E:20:BB:25:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/0FB60AEED6D711F085B1D0E884D3641D.roa
Signing time: Sun 01 Mar 2026 05:54:06 +0000
ROA not before: Thu 11 Dec 2025 21:19:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 27424
IP address blocks: 2402:4480:202::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.crl
rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:10:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172989, serialNumber=AB69C74025489AFD61747FF9335B147E20BB25D4
Validity
Not Before: Dec 11 21:19:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3d47e-dc4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:39:ab:c6:6d:8b:71:5d:38:74:ba:37:f5:ca:
6e:36:3a:1e:0d:68:89:f5:d1:10:72:31:c5:50:e5:
dc:d9:d2:86:00:4e:85:3f:e3:fd:b0:3a:04:b4:bc:
cf:6b:f5:ff:54:98:10:ef:dd:fb:32:5e:1b:16:13:
52:b9:f5:35:79:a5:5d:38:8d:42:47:1a:a8:16:18:
05:e5:27:18:75:fc:40:a9:b8:97:79:99:51:a1:53:
f0:4f:13:85:6b:06:d1:c9:32:03:cc:3f:0c:e1:ad:
11:88:c2:31:f1:28:de:3d:c1:b6:e5:98:d3:4f:df:
c3:f8:df:9e:23:90:f6:17:55:ad:a1:a7:65:da:65:
1d:cb:ff:2d:39:91:97:a7:38:20:ae:8c:d5:e9:c0:
39:74:40:33:35:9e:9f:bf:d7:2d:e1:32:c9:27:bc:
58:e9:6d:4c:ad:b7:ed:ec:24:88:aa:a6:40:57:7f:
ca:a4:4f:be:3c:5b:b0:f7:25:73:a6:9a:08:0d:4d:
8a:c6:be:5b:e5:cf:5d:9a:6b:7b:a6:7c:88:bf:85:
7c:bd:1c:75:82:11:1d:c2:fc:5f:ad:8f:cf:aa:8e:
a8:b4:d0:9c:d9:36:03:9c:47:e7:3d:13:85:87:97:
2b:11:c5:89:44:36:80:47:fc:b7:7a:2e:cb:b5:cb:
af:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B5:8E:7A:AD:3E:CA:79:3F:9B:86:EF:F4:8A:03:33:34:1A:05:86
X509v3 Authority Key Identifier:
keyid:AB:69:C7:40:25:48:9A:FD:61:74:7F:F9:33:5B:14:7E:20:BB:25:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/0FB60AEED6D711F085B1D0E884D3641D.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:4480:202::/48
Signature Algorithm: sha256WithRSAEncryption
10:16:e5:5c:d0:0c:3c:89:6e:ee:66:a1:53:50:52:6a:38:04:
ef:67:34:54:c5:c8:06:06:a3:b1:93:07:1d:33:da:e4:df:0a:
d5:de:1f:cd:61:8a:e7:9b:39:66:91:7c:a5:ee:1f:c5:54:96:
47:1d:2a:dc:85:dd:78:31:64:c4:b1:a5:86:2b:63:8a:52:fa:
0a:b0:07:69:b4:09:6a:64:6f:49:3a:b7:db:49:e8:17:08:4b:
78:db:58:24:2a:bf:67:df:15:90:b1:50:4f:d4:68:20:19:16:
d3:c5:12:e9:b0:3b:1d:42:e9:e9:2e:fe:7d:34:4f:97:60:2f:
63:7b:4d:2e:da:47:86:bc:03:35:d9:5b:4c:2c:dc:af:00:56:
df:59:2a:b8:e2:1c:f6:3e:cc:b0:94:a2:9b:fd:71:a4:b0:a8:
05:d5:65:ed:2f:ac:7f:27:d6:fd:53:55:2c:db:ce:aa:ef:fc:
8a:c0:bb:bb:08:c2:56:25:20:d1:8c:f3:d8:93:69:38:a4:ac:
19:38:2a:f6:8e:83:2b:e4:8f:b4:a9:64:e1:e1:8f:f0:0d:71:
d8:a7:f4:7d:18:61:ca:a6:7e:6f:96:20:68:36:85:d0:4e:6b:
9a:45:63:12:3b:11:4d:70:21:32:a4:6c:7d:56:9b:1b:1a:2e:
05:89:86:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:08 2026 by rpki-client