
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/854D304E0C9B11EC8433FE7AC4F9AE02.roa
File: 854D304E0C9B11EC8433FE7AC4F9AE02.roa (raw, json)
Hash identifier: lQxeErZo8KSMidBaLZU2uZhEmg+ZApCYBav6XaOd1/4=
Subject key identifier: E1:CF:12:46:04:0A:FC:59:88:A3:3A:D9:60:9B:8A:4B:FC:40:20:55
Certificate issuer: /CN=A9172D91/serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897
Certificate serial: 1711
Authority key identifier: E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/854D304E0C9B11EC8433FE7AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:25:39 +0000
ROA not before: Sat 12 Jul 2025 16:55:30 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 394749
IP address blocks: 2404:6900:2012::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl
rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5905 (0x1711)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172D91, serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897
Validity
Not Before: Jul 12 16:55:30 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a46883-b9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4e:7c:c4:08:44:88:43:6f:4f:0e:34:c6:21:
9f:6f:fe:6d:a2:f9:b4:f0:c7:b6:43:95:fc:23:cf:
09:e5:6c:06:80:a7:03:c3:4f:5f:b7:77:17:16:e1:
3a:a8:84:ab:c8:8f:43:67:ff:5c:df:5e:29:c4:05:
a5:80:e0:bd:c0:b8:cb:5c:66:ab:19:b7:fe:f6:c7:
7e:e1:ca:2e:36:fe:30:9c:e3:f7:e1:c1:b4:fb:00:
70:1d:23:8f:21:0e:1b:64:3d:31:97:35:a5:b0:c6:
69:db:c8:b9:72:4c:a1:13:e7:63:3d:b3:8b:16:2f:
3c:5f:6a:7c:17:27:5e:50:88:b3:1a:d8:29:f8:be:
29:87:91:5e:4e:cf:69:e4:bc:34:7e:7c:20:23:5e:
10:65:01:f6:0a:20:02:e9:cc:b8:fe:ce:91:6f:14:
35:85:44:46:15:3a:c6:d5:1c:ba:63:9d:9b:d9:db:
32:63:c1:be:2d:89:f0:7d:a1:0e:89:cc:f9:ac:e0:
0b:87:f4:6b:51:02:c5:d0:71:1d:b2:92:48:a5:56:
d8:9a:95:14:e3:e5:7c:88:f4:6a:dc:ff:c4:07:60:
d6:a5:6e:90:ac:23:3a:4c:42:2a:c0:b9:da:86:6f:
5e:dc:21:cf:7b:8e:c0:41:00:8f:a6:97:a7:6f:ca:
29:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CF:12:46:04:0A:FC:59:88:A3:3A:D9:60:9B:8A:4B:FC:40:20:55
X509v3 Authority Key Identifier:
keyid:E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/854D304E0C9B11EC8433FE7AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2404:6900:2012::/48
Signature Algorithm: sha256WithRSAEncryption
6b:62:e0:68:67:c4:ec:ba:12:c3:41:ca:6a:65:19:45:89:e5:
61:26:ec:1a:c0:83:d9:ac:58:14:7b:1a:e4:7a:4e:63:34:17:
32:63:08:b8:c9:6a:ad:d8:48:41:39:7d:73:85:cd:c4:9c:d8:
ff:e4:15:ca:9b:13:c1:ac:31:d8:e4:95:44:82:04:95:18:38:
d5:39:66:2d:b6:50:d9:ac:65:eb:1c:42:6a:cf:7c:51:58:6a:
30:8d:aa:85:08:2e:83:53:59:c5:36:fd:a5:a6:1c:27:84:17:
fb:48:5d:57:8e:8b:78:6e:63:62:bc:2b:f4:4c:87:b2:2b:72:
58:20:0c:51:9d:9e:b2:f7:34:dd:1a:ac:ff:49:08:bd:53:9b:
7b:4f:b1:ef:be:5c:03:8b:51:9f:4e:1e:db:ad:52:ca:2d:5c:
fd:ce:78:ba:4a:f2:51:ca:be:f7:1d:42:4e:0d:2d:0e:80:07:
6f:0b:5c:3f:08:6a:24:c9:83:1a:47:1c:16:68:b8:f8:a4:fb:
74:8f:a1:d2:0b:00:47:63:a3:cf:e8:9e:63:4e:88:6a:56:b8:
97:66:a6:b7:0e:4e:5e:dc:16:bd:cb:84:6e:53:16:3d:da:ec:
38:ac:41:d1:40:c4:ac:3f:b9:04:94:9a:f3:7c:64:8b:69:6d:
d6:30:f7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:42:13 2026 by rpki-client