
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/9C06E51EE37A11EA84A20810C4F9AE02.roa
File: 9C06E51EE37A11EA84A20810C4F9AE02.roa (raw, json)
Hash identifier: VGb7fQ4+XdUAVdKkbAj+FraUZZtrQ9DDCForGAVJX7M=
Subject key identifier: C8:86:4E:93:CE:CD:EF:46:62:95:71:87:3C:23:25:8D:C6:7A:B4:DC
Certificate issuer: /CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827
Certificate serial: 0E5F
Authority key identifier: E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/9C06E51EE37A11EA84A20810C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:30:58 +0000
ROA not before: Tue 30 Dec 2025 15:11:33 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 24492
IP address blocks: 185.175.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl
rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 14:41:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3679 (0xe5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191A09, serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827
Validity
Not Before: Dec 30 15:11:33 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a44da2-2376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:2e:f9:1b:51:3d:4a:bb:59:96:f9:4d:dc:
d1:71:28:d2:3a:e1:8e:26:ef:02:16:b1:fa:64:d0:
46:4a:76:20:1b:71:bf:f0:bb:be:ac:32:ad:22:b1:
26:61:4a:10:82:30:2c:4a:2a:c8:1a:19:e5:58:c9:
88:53:12:44:43:1d:17:35:f4:b0:02:f5:28:03:19:
22:73:95:54:41:89:7a:db:95:15:b4:de:a8:30:28:
78:23:18:cb:49:d5:9d:ac:a3:f9:f2:d9:94:d1:38:
13:db:2f:74:23:04:b6:8b:8f:de:e0:e9:b4:a7:f5:
a3:ae:69:f4:0b:88:94:95:09:ea:f9:b0:41:25:ae:
70:28:46:a1:4c:26:42:b5:5a:a5:d1:3e:30:9a:58:
6e:51:7e:1c:0a:a2:b5:d5:54:43:50:4a:9c:5d:38:
f6:f9:1b:ee:8c:da:ca:cd:63:02:94:41:e0:34:39:
ab:ca:08:29:47:de:83:fa:ae:85:32:9c:f3:78:c7:
ec:09:df:02:fb:fe:f8:56:a3:aa:56:1b:2e:fc:37:
c7:75:04:89:f6:2a:5d:a7:31:2b:6d:0b:08:f1:c2:
3e:e1:58:2f:87:e4:1b:fc:ce:1d:37:41:74:93:77:
94:9a:52:3f:4f:41:57:26:3b:3b:0b:72:13:20:9b:
9b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:86:4E:93:CE:CD:EF:46:62:95:71:87:3C:23:25:8D:C6:7A:B4:DC
X509v3 Authority Key Identifier:
keyid:E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/9C06E51EE37A11EA84A20810C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
185.175.228.0/22
Signature Algorithm: sha256WithRSAEncryption
62:da:65:14:d7:f7:0f:6a:97:7f:f5:57:93:ea:a3:09:79:8a:
56:31:95:dd:94:e8:35:3d:15:50:99:ae:0a:45:5c:36:fb:e4:
22:10:42:e9:c1:52:73:d8:35:c4:c7:54:f8:c7:57:f1:2f:e7:
d0:a1:3c:3b:b0:4e:0a:51:05:55:9e:ac:2c:cb:99:f1:3a:4d:
15:8a:7e:78:c9:73:e4:33:c7:18:b6:1e:95:2a:c0:df:4b:a7:
b3:3f:3f:97:33:3c:78:94:c2:56:26:38:71:3d:01:dc:db:e1:
3b:68:79:ed:7f:4b:93:ca:10:c6:85:9b:5a:3d:5f:e0:35:37:
1c:b6:43:1a:f0:e8:b4:08:bb:fe:ae:77:c8:b5:82:bc:62:5b:
12:9a:4e:0f:2f:27:63:d4:ce:19:f3:89:d7:db:eb:29:3a:15:
eb:f4:7e:16:e0:8a:21:ff:8b:eb:2c:2d:fd:18:8d:b6:44:5a:
94:83:df:90:91:65:2c:a3:3d:63:01:d1:d9:d0:a1:09:5d:b6:
70:1f:d9:f1:79:00:77:31:61:f9:af:ab:2f:cd:0f:5d:35:3a:
63:bb:de:4f:c0:33:0b:2e:d8:5f:d0:5b:da:c5:b1:f2:58:57:
6c:e8:ae:a4:93:e7:c4:f6:d0:75:8b:3c:c0:f0:90:fb:64:23:
3e:61:bf:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:35 2026 by rpki-client