
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/E6C0E7E629D111F18231948697833773.roa
File: E6C0E7E629D111F18231948697833773.roa (raw, json)
Hash identifier: 2i2D4Yn4ye2PrDbqlGA5eFxQ6MY5YHkU4EJWvkgJNb8=
Subject key identifier: 95:7A:F0:5A:74:2D:93:80:34:C6:F6:1B:D3:68:64:E2:8E:D5:6E:E1
Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial: 12
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/E6C0E7E629D111F18231948697833773.roa
Signing time: Fri 27 Mar 2026 11:41:32 +0000
ROA not before: Fri 27 Mar 2026 11:41:32 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 13767
IP address blocks: 209.9.224.0/20 maxlen: 20
209.9.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 17:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Validity
Not Before: Mar 27 11:41:32 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69c66cec-449e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:07:60:b7:7c:81:68:63:40:73:cb:8c:12:e9:
22:ae:40:30:92:57:ae:53:62:b4:e5:fe:80:6b:ab:
7f:21:45:12:0e:7c:87:be:fe:65:a4:53:26:73:34:
c1:ed:6e:4d:90:bf:ef:18:31:ff:10:49:39:22:e4:
51:95:d9:2c:98:c4:37:0a:d8:98:d0:6d:9a:b6:b2:
8b:f5:c8:b1:ad:eb:ad:14:3b:83:0c:92:14:7f:ac:
8a:0b:57:31:26:3b:cc:f4:10:85:97:46:01:3c:45:
c3:db:24:95:5a:39:e3:8d:db:02:55:42:b6:5e:34:
e5:d7:3c:d9:43:ac:af:db:e7:5a:e8:5a:d3:75:a3:
28:ef:4e:b2:60:57:e0:49:4a:d4:9e:dd:cf:15:9c:
22:95:4d:b9:24:87:7f:ec:34:82:63:6c:53:10:b8:
79:aa:28:35:b5:57:57:c6:67:b7:53:d4:15:40:ba:
9e:9a:c2:2b:3e:5a:4f:69:69:55:68:64:a4:22:bf:
64:61:71:10:36:99:a7:be:56:c8:8e:88:6a:a5:05:
0e:38:35:7b:fa:60:6e:41:f1:8a:76:10:7f:40:5f:
25:a0:7d:50:d4:46:6f:5e:fb:13:65:2c:43:b8:dc:
65:5a:5a:bd:6c:f1:7c:33:90:76:9b:f0:2a:89:1b:
9b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7A:F0:5A:74:2D:93:80:34:C6:F6:1B:D3:68:64:E2:8E:D5:6E:E1
X509v3 Authority Key Identifier:
keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/E6C0E7E629D111F18231948697833773.roa
sbgp-ipAddrBlock: critical
IPv4:
209.9.224.0/20
Signature Algorithm: sha256WithRSAEncryption
1b:43:44:c3:00:d1:cd:6b:b5:f5:04:52:d8:56:55:1c:92:55:
da:55:90:98:2a:17:e5:54:5b:4c:70:a9:b7:a8:ec:67:c3:2a:
fd:bb:58:af:3d:f9:a6:1b:99:83:43:19:c7:c3:35:a0:7d:b1:
bb:e5:ad:2b:9e:23:f9:de:db:2f:b1:89:a6:03:1c:f3:37:30:
74:ff:2f:84:28:6b:1c:68:7d:67:d4:e3:d3:24:7c:5e:91:f7:
65:95:07:e3:87:77:3c:bd:9c:8c:c5:b4:e9:49:ca:59:01:99:
dd:b7:bf:69:39:ba:43:5a:0e:30:7b:ef:d7:cd:6f:d8:81:b9:
b3:23:0e:cd:17:8d:46:9a:02:b8:6b:5a:86:5a:98:3a:7d:06:
2c:df:ff:50:d7:8a:9b:c3:ed:62:77:8e:e8:55:24:46:aa:6d:
a3:a4:38:c6:4c:df:02:97:84:a5:3e:fb:a7:78:da:a7:05:70:
81:0e:8e:57:c7:29:e1:da:67:12:0f:63:15:ab:a8:7a:b9:57:
d1:17:5a:f2:44:16:a6:e8:a4:68:c2:93:dc:7a:8d:ce:85:fa:
c7:9f:3f:64:a6:d5:d5:1f:b5:c3:ce:9e:d7:b1:47:d1:d5:d4:
00:42:8b:8d:1d:22:7e:37:2b:c6:65:f4:68:37:e3:77:c8:0d:
8c:e3:cf:34
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Mar 28 19:00:21 2026 by rpki-client