
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/24DBC31AB1BA11F080D32309C4F9AE02.roa
File: 24DBC31AB1BA11F080D32309C4F9AE02.roa (raw, json)
Hash identifier: p4a4dVFXyGYegzF068ON2uCyZmulHS7AQpUNoGSbKfc=
Subject key identifier: BC:0F:B6:47:A5:93:3A:95:6E:7F:ED:A6:15:F8:B9:32:16:F0:99:1B
Certificate issuer: /CN=A9179EAE/serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7
Certificate serial: 010C
Authority key identifier: 72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/24DBC31AB1BA11F080D32309C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:49:03 +0000
ROA not before: Sat 29 Nov 2025 04:02:41 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 153366
IP address blocks: 2001:df6:3fc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl
rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:11:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268 (0x10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179EAE, serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7
Validity
Not Before: Nov 29 04:02:41 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a5954f-5cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ca:a6:71:5d:ac:4c:5c:16:2d:70:ea:c5:25:
7b:50:c0:41:ca:c1:1a:49:f7:59:13:4a:37:af:4d:
95:68:0a:c6:b3:d2:d1:58:5b:01:35:d7:2e:07:69:
a6:a2:96:e7:d8:57:c3:b7:97:7d:4a:46:66:8c:7b:
91:c1:ca:3b:c3:f8:d3:c4:1c:2c:47:01:b7:64:76:
d7:1c:f0:f2:e8:31:c0:ec:90:b5:62:2e:91:81:b7:
4c:bd:fe:3f:35:a4:bb:ea:b1:51:e7:53:94:64:aa:
92:16:11:73:db:6c:4d:50:08:1d:d8:b3:9d:f9:44:
fc:34:83:b1:59:ba:27:17:10:d4:1b:b5:86:ec:64:
5f:e4:47:65:68:ca:71:60:f2:3a:39:28:f4:e7:51:
ed:73:ec:cb:4f:a4:2f:55:ab:d7:5c:e5:84:63:18:
60:70:de:04:c1:28:1c:d5:bb:bc:f1:dd:4e:e6:76:
12:d1:6c:b0:5b:05:ac:47:7d:64:06:15:bf:22:68:
4c:1c:64:0a:31:ee:87:89:6c:61:d3:93:6e:5e:c6:
f5:fe:95:dc:2c:64:6e:39:da:f2:9c:ef:29:45:ff:
6e:66:78:29:cb:63:97:91:14:1e:f1:73:1e:da:10:
fc:89:be:8a:b9:98:d5:e7:ff:5a:9c:91:8f:51:2e:
01:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0F:B6:47:A5:93:3A:95:6E:7F:ED:A6:15:F8:B9:32:16:F0:99:1B
X509v3 Authority Key Identifier:
keyid:72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/24DBC31AB1BA11F080D32309C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:3fc0::/48
Signature Algorithm: sha256WithRSAEncryption
6b:a1:0f:e2:ac:36:01:14:0c:52:23:dc:48:f3:5a:4c:0f:4f:
2c:75:a5:99:e8:82:8a:56:42:89:be:20:5c:79:c0:2f:ae:41:
84:1b:87:b5:52:c4:e6:f6:b4:5d:4a:f5:88:1c:0a:9e:fd:71:
19:09:64:4a:2a:2b:fd:06:11:08:c1:df:3b:b9:b8:2c:e4:41:
e4:73:3e:1b:31:cd:e8:70:2d:6e:95:57:43:dd:e9:49:cd:bd:
d9:81:ec:7e:81:80:13:17:0f:eb:48:a5:38:a1:e3:6a:f3:4e:
f1:df:2b:4a:1d:5f:47:d5:a8:b7:9a:88:31:8a:60:cd:32:aa:
81:fc:e3:92:21:41:5b:bc:f6:e5:da:66:fd:65:ae:af:7b:df:
ab:58:c3:ae:d8:bf:7b:e3:8e:1f:d0:fb:4c:f0:f5:c1:0c:2d:
c8:99:a4:03:b4:92:37:e3:4b:79:12:9d:9b:9a:d3:2f:b0:4e:
51:48:31:13:7a:c2:94:44:65:a9:bf:f2:65:5c:e1:7e:38:e8:
de:f1:e9:54:d6:f5:d4:3c:2e:80:d7:61:b3:7e:2a:96:c8:0d:
70:bb:d6:b4:1c:21:0e:1b:8a:58:01:e9:ee:aa:3b:90:c7:91:
a7:4b:04:e4:df:b5:92:ce:c5:b7:49:06:97:2a:72:78:c7:4a:
97:8d:3a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:23:36 2026 by rpki-client