
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/6F09FF784B3111F0AED6945EC4F9AE02.roa
File: 6F09FF784B3111F0AED6945EC4F9AE02.roa (raw, json)
Hash identifier: 9h9Wk9aH9jFwNi1AyO/YADoC/2y5/5H+OC8YAZoQcg8=
Subject key identifier: 68:3C:80:A9:35:75:72:D5:D0:9B:78:5B:C2:66:1E:88:B3:AF:6B:D4
Certificate issuer: /CN=A9185B6D/serialNumber=8E02B5C4DEB53F2B712FF077DE04908375E813DB
Certificate serial: 0175
Authority key identifier: 8E:02:B5:C4:DE:B5:3F:2B:71:2F:F0:77:DE:04:90:83:75:E8:13:DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/6F09FF784B3111F0AED6945EC4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:57:00 +0000
ROA not before: Tue 17 Jun 2025 04:13:34 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 152459
IP address blocks: 2401:7d60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.crl
rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:55:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373 (0x175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185B6D, serialNumber=8E02B5C4DEB53F2B712FF077DE04908375E813DB
Validity
Not Before: Jun 17 04:13:34 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a5891c-f707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:29:a7:a0:7a:ca:ab:ff:44:3d:0c:6c:59:38:
cf:7f:6a:8d:86:76:19:1c:ee:db:3c:e8:3d:4c:6f:
a2:f0:75:fa:7e:e0:0b:5c:98:32:22:1e:e7:9b:c1:
96:ae:74:6a:7c:58:e3:d0:39:d7:98:66:98:fb:70:
74:c7:1a:74:80:44:37:f0:96:3a:e6:2f:d7:69:57:
58:69:39:bc:b6:6b:ca:b7:86:7e:97:30:bd:98:d1:
e5:b9:9c:e6:64:27:63:44:03:d6:28:37:b1:c9:a0:
5c:b4:b7:db:b3:bb:09:bd:7c:26:14:77:77:e3:ec:
12:d9:25:20:35:82:95:f2:be:82:b1:e4:f0:be:0f:
16:71:c2:1b:7e:01:2b:af:31:4a:a8:c1:ef:1f:9a:
08:37:cb:25:32:60:a7:a7:09:3a:66:e5:09:dd:90:
fe:39:08:21:9e:c2:e4:e1:eb:60:78:08:09:9b:00:
f8:65:6c:3e:11:8c:1f:46:0b:6c:5a:f8:24:06:76:
89:c4:bc:dd:4f:f3:af:f5:47:20:8a:59:49:c8:1d:
7c:31:20:f5:52:41:fd:0c:8b:6f:43:15:03:b5:bf:
21:09:e9:f9:3a:cd:a0:32:5b:b8:8b:84:4a:f9:9a:
10:28:aa:2b:64:e1:ed:52:3e:bb:49:f9:29:ce:47:
c6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3C:80:A9:35:75:72:D5:D0:9B:78:5B:C2:66:1E:88:B3:AF:6B:D4
X509v3 Authority Key Identifier:
keyid:8E:02:B5:C4:DE:B5:3F:2B:71:2F:F0:77:DE:04:90:83:75:E8:13:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/6F09FF784B3111F0AED6945EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:7d60::/32
Signature Algorithm: sha256WithRSAEncryption
91:9c:87:c9:31:7e:df:4a:87:08:3d:f1:57:10:dd:1a:2e:45:
26:bd:c2:41:cb:b7:5a:35:d1:10:6c:14:7b:23:38:5f:f4:91:
fe:29:f3:fc:94:6d:91:76:39:29:27:cd:68:c1:6f:6d:c7:d1:
95:d2:75:0f:ee:c4:a7:cb:2c:03:db:c7:3e:f8:18:fc:8d:96:
fa:0d:93:ad:3c:6a:9c:d8:1f:14:8a:43:c8:07:e1:2f:17:ce:
75:25:1c:3e:45:53:c6:83:99:30:a5:d6:47:cb:02:2d:da:ee:
5d:05:47:cb:9b:28:35:78:7a:ac:21:74:0a:58:33:af:e8:15:
c7:90:25:92:0b:5b:58:28:ff:1d:9b:58:fe:0f:20:73:a3:da:
24:b6:36:31:39:57:c7:17:f3:7c:5f:95:0d:fd:db:a8:df:d8:
74:11:d6:c7:6f:9b:f2:65:92:b7:ee:02:a5:4f:44:23:5c:3f:
b9:d5:dc:00:d9:a1:5e:43:36:09:2b:a3:b7:97:10:d9:45:28:
8e:a4:5f:f0:dc:2b:cb:86:df:44:99:8b:3c:cc:67:09:f0:1b:
7f:b2:a2:a9:3a:0a:05:67:0b:3d:40:f4:44:da:2a:a8:e7:20:
8e:f3:d6:cc:06:4c:d4:2f:dd:65:dc:c7:4d:f5:ac:35:69:2f:
ca:c8:d1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:41:01 2026 by rpki-client