
$ rpki-client -vvf rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/2C60C8AAE01111EEA6583A7DC4F9AE02.roa
File: 2C60C8AAE01111EEA6583A7DC4F9AE02.roa (raw, json)
Hash identifier: KzpDIugbV8vHQ/gYQ5pO+EKoT/0uahv1Vz2s5knDV8s=
Subject key identifier: 27:A1:F6:4D:73:9B:69:C4:77:99:9D:F0:FD:84:E1:22:1E:52:50:2E
Certificate issuer: /CN=A918127C/serialNumber=8F942252B7D404E33DB9B1E354E09103AAC50184
Certificate serial: 0843
Authority key identifier: 8F:94:22:52:B7:D4:04:E3:3D:B9:B1:E3:54:E0:91:03:AA:C5:01:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/2C60C8AAE01111EEA6583A7DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:44:16 +0000
ROA not before: Wed 28 Jan 2026 21:17:35 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 23926
IP address blocks: 2406:8600:f040::/48 maxlen: 48
2406:8600:f840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.crl
rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:38:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2115 (0x843)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918127C, serialNumber=8F942252B7D404E33DB9B1E354E09103AAC50184
Validity
Not Before: Jan 28 21:17:35 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a45ed0-f507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ac:c5:62:b2:25:92:4d:67:ff:1e:ec:a6:49:
3d:ad:5a:05:c0:b0:d1:2f:49:2f:ce:85:63:66:8e:
44:b6:62:5a:0e:57:c3:2b:3e:44:41:7a:aa:9f:79:
9d:89:42:9e:29:b3:7c:95:30:80:75:26:c1:fc:57:
cc:4a:ec:2d:f6:5c:70:8c:9e:c3:ef:c8:25:99:90:
64:34:08:0b:d8:c9:8a:46:f9:80:c6:3d:3d:43:25:
b9:62:6b:39:cd:f1:d4:9f:91:96:99:c7:1b:f4:f4:
9e:a5:7b:c4:4a:32:60:57:17:05:af:c2:b2:21:0e:
02:88:22:fd:52:d6:e3:22:71:46:60:55:f7:97:24:
94:f3:4d:0e:f3:b7:4f:2a:01:b1:1b:99:64:07:0d:
3c:88:3d:12:69:c5:79:a6:b4:6c:3f:c6:66:59:ac:
c0:de:2a:49:9e:97:9c:65:a5:ff:ed:d8:44:9d:c0:
ef:dc:9b:70:29:6b:66:eb:ef:77:d1:7c:23:d5:4c:
e0:83:0f:9e:53:44:05:6e:d3:98:32:bf:db:e4:dd:
bb:a6:3a:e0:97:57:2d:bd:75:3c:bf:6a:d7:3f:94:
d4:d8:7d:06:d0:2f:59:76:1f:5a:0d:3a:8d:94:34:
00:47:3e:78:2e:2d:9f:9b:14:74:3b:0b:53:50:65:
87:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A1:F6:4D:73:9B:69:C4:77:99:9D:F0:FD:84:E1:22:1E:52:50:2E
X509v3 Authority Key Identifier:
keyid:8F:94:22:52:B7:D4:04:E3:3D:B9:B1:E3:54:E0:91:03:AA:C5:01:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/2C60C8AAE01111EEA6583A7DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:8600:f040::/48
2406:8600:f840::/48
Signature Algorithm: sha256WithRSAEncryption
2f:38:3e:4e:71:56:65:1b:ad:ce:a7:7e:65:3c:95:86:64:cd:
1a:1c:c1:c3:44:5b:94:4d:a6:b0:f0:23:09:12:27:42:c3:95:
51:75:12:94:ae:c6:1a:a7:53:09:b7:21:24:88:38:3f:bd:75:
df:f0:de:d3:95:44:db:1d:06:2a:b8:c8:97:2e:d8:77:14:02:
da:9c:e2:b5:57:9b:5d:bb:d7:f6:cf:62:73:a1:60:24:1c:75:
a3:18:8d:c3:8e:33:2d:79:53:4d:fd:40:66:8a:14:6b:a8:8c:
6e:56:2a:35:6b:f4:99:44:6a:12:ab:b8:d0:cb:ae:c8:54:8a:
24:2a:94:32:78:06:da:0e:63:3d:9f:03:c2:67:38:38:df:80:
99:a2:5a:dd:a5:ed:68:f0:87:76:2b:92:5b:9f:b7:76:13:c3:
3a:16:55:e8:aa:9d:a2:5f:e5:b0:6d:1d:37:86:de:69:ca:29:
fc:dd:b6:1b:1a:e9:d0:e0:68:92:fc:88:8e:3d:ff:fd:19:1e:
dc:bf:65:fe:14:d0:11:6f:d7:45:33:66:b5:8f:4e:4f:b3:27:
82:a6:93:8d:47:ba:91:bf:74:70:45:d0:b9:7c:dc:7d:b3:53:
3e:dd:72:b9:cb:bd:85:4f:8d:cb:01:e9:6f:45:c5:f7:5b:57:
ec:53:29:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:40:32 2026 by rpki-client