
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/E7F6D15AD17411EE87F7325DC4F9AE02.roa
File: E7F6D15AD17411EE87F7325DC4F9AE02.roa (raw, json)
Hash identifier: tOv8I8JqW+YNhbrzCbO/AHIzq1jJ49VC9Cs7y7bsySc=
Subject key identifier: FD:9C:85:93:15:A1:D6:F5:66:24:86:4F:4B:06:9F:00:FB:A9:A0:F9
Certificate issuer: /CN=A9186249/serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF
Certificate serial: 0182
Authority key identifier: AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/E7F6D15AD17411EE87F7325DC4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:22:24 +0000
ROA not before: Fri 07 Mar 2025 04:52:01 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 152585
IP address blocks: 2001:df3:7ec0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl
rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386 (0x182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186249, serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF
Validity
Not Before: Mar 7 04:52:01 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a59d20-8c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ef:90:68:28:f1:e4:90:16:80:6f:df:05:a7:
84:10:bd:ff:71:fd:21:d8:f2:1e:26:30:21:81:95:
d0:dc:50:d0:f5:14:60:73:fa:e5:47:f4:68:33:26:
56:22:d1:2f:76:bb:53:fe:3c:f2:9b:5f:7b:b1:ba:
18:19:e4:bc:26:d5:61:da:58:d5:a6:73:d3:3d:a1:
17:45:82:5b:da:50:f9:f5:a5:f9:cd:fe:c1:f6:1c:
a2:01:ca:f8:9a:f8:10:bc:f0:20:dc:9d:31:36:74:
94:57:05:60:d5:c5:d1:7c:be:e9:0e:30:6e:bb:b3:
bd:d1:b7:05:ad:8b:a3:78:a1:09:c1:65:ac:db:07:
8e:97:ee:36:19:e6:ab:43:30:c2:00:65:48:e7:4a:
b3:84:3a:fc:f2:62:6d:d0:86:9a:8d:83:11:d5:ef:
1d:9b:c9:bd:94:c4:56:9d:b5:5f:8e:b8:a6:71:97:
15:f2:ea:0b:eb:1a:b7:8c:c1:a8:0e:1e:55:01:02:
a4:03:75:a1:53:12:9b:c6:5d:89:9f:7b:7b:00:9b:
0f:26:8f:49:38:ef:ce:e5:9d:ed:34:ed:e4:23:d4:
49:93:90:af:f2:46:cd:69:a1:c2:0b:cd:75:9c:89:
a2:d0:ef:fb:7f:50:e0:7e:a0:de:81:d9:ee:45:fa:
28:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9C:85:93:15:A1:D6:F5:66:24:86:4F:4B:06:9F:00:FB:A9:A0:F9
X509v3 Authority Key Identifier:
keyid:AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/E7F6D15AD17411EE87F7325DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:7ec0::/48
Signature Algorithm: sha256WithRSAEncryption
b8:34:c1:fe:4a:6a:4c:1b:1d:f2:e4:e5:01:42:03:77:cd:0d:
1b:5a:f4:ab:a9:4d:30:14:65:c4:6c:9f:49:bb:10:5d:bf:4f:
ce:dd:bc:d5:86:a6:a3:a9:40:0f:65:1e:d5:3c:5e:d8:27:94:
75:57:26:06:c5:1a:ea:11:6b:f5:c5:5a:1b:cd:e7:dd:60:54:
0b:30:59:e0:9b:3f:d0:bf:93:16:c8:08:9f:85:2c:60:96:56:
53:e3:06:b4:e1:e2:49:5e:47:23:90:3e:1e:2a:4d:a7:54:97:
33:04:3b:07:3f:a1:f9:79:e5:94:1f:ee:33:7c:1e:48:e4:6a:
32:e9:bb:f0:84:99:cf:02:ed:7a:4e:78:0b:82:11:54:b4:fc:
00:b5:ba:e6:10:66:91:6c:d5:83:f5:af:ed:e0:33:d6:fa:b5:
6d:bf:b5:21:20:4f:54:ea:4d:e2:0a:a5:54:76:c0:49:3e:ed:
47:05:f6:67:57:02:a6:8a:fc:2f:c7:b3:99:58:cc:20:19:8e:
42:73:d0:a3:4a:4f:e2:80:b2:9b:a1:2f:f5:01:d4:96:dc:ce:
45:73:08:77:07:a4:38:19:23:6f:63:1a:38:f4:d4:14:94:ed:
84:51:a1:5b:9f:e0:26:2a:6e:4e:48:a3:de:3a:ff:20:42:cc:
6b:12:1c:d9
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyNDkxMTAvBgNVBAUTKEFDRTI4REFCRTUzNjQ5NjM3RkE2RTRFMzIxREUxQjYz
NDYzQjgzQ0YwHhcNMjUwMzA3MDQ1MjAxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OWQyMC04YzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAre+QaCjx5JAWgG/fBaeEEL3/cf0h2PIeJjAhgZXQ3FDQ9RRgc/rlR/RoMyZW
ItEvdrtT/jzym197sboYGeS8JtVh2ljVpnPTPaEXRYJb2lD59aX5zf7B9hyiAcr4
mvgQvPAg3J0xNnSUVwVg1cXRfL7pDjBuu7O90bcFrYujeKEJwWWs2weOl+42Gear
QzDCAGVI50qzhDr88mJt0IaajYMR1e8dm8m9lMRWnbVfjrimcZcV8uoL6xq3jMGo
Dh5VAQKkA3WhUxKbxl2Jn3t7AJsPJo9JOO/O5Z3tNO3kI9RJk5Cv8kbNaaHCC811
nImi0O/7f1DgfqDegdnuRfooUwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFP2chZMV
odb1ZiSGT0sGnwD7qaD5MB8GA1UdIwQYMBaAFKzijavlNkljf6bk4yHeG2NGO4PP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjI0OS9BMUYyMzQzQ0Qx
NzAxMUVFQTYxNTFDNERDNEY5QUUwMi9yT0tOcS1VMlNXTl9wdVRqSWQ0YlkwWTdn
ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JPS05xLVUyU1dOX3B1VGpJZDRiWTBZN2c4OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYyNDkvQTFGMjM0M0NEMTcwMTFFRUE2MTUxQzREQzRGOUFFMDIvRTdGNkQxNUFE
MTc0MTFFRTg3RjczMjVEQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN837AMA0GCSqGSIb3DQEBCwUAA4IBAQC4NMH+SmpMGx3y5OUB
QgN3zQ0bWvSrqU0wFGXEbJ9JuxBdv0/O3bzVhqajqUAPZR7VPF7YJ5R1VyYGxRrq
EWv1xVobzefdYFQLMFngmz/Qv5MWyAifhSxgllZT4wa04eJJXkcjkD4eKk2nVJcz
BDsHP6H5eeWUH+4zfB5I5Goy6bvwhJnPAu16TngLghFUtPwAtbrmEGaRbNWD9a/t
4DPW+rVtv7UhIE9U6k3iCqVUdsBJPu1HBfZnVwKmivwvx7OZWMwgGY5Cc9CjSk/i
gLKboS/1AdSW3M5Fcwh3B6Q4GSNvYxo49NQUlO2EUaFbn+AmKm5OSKPeOv8gQsxr
EhzZ
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:19:44 2026 by rpki-client