
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/9F6611D029D311F184F1669A97833773.roa
File: 9F6611D029D311F184F1669A97833773.roa (raw, json)
Hash identifier: 7XOGs2wyUjEZQbl9lb0Bk82uyJ3XVHINwK4ItrxDuVA=
Subject key identifier: 31:7B:23:B5:67:26:57:00:2E:E2:38:B0:78:84:E6:FF:72:2D:28:F8
Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial: 015A
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/9F6611D029D311F184F1669A97833773.roa
Signing time: Tue 28 Jul 2026 19:40:50 +0000
ROA not before: Tue 28 Jul 2026 19:40:50 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 45342
IP address blocks: 209.8.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 346 (0x15a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Validity
Not Before: Jul 28 19:40:50 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a6905c2-5c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:df:84:a3:46:b8:52:56:5e:ba:de:47:39:f7:
7d:4d:4f:20:49:4e:d5:e4:09:80:cc:e6:6d:4c:44:
ad:5e:d8:c2:45:42:17:a9:87:59:e1:53:a5:84:80:
65:14:10:62:44:3b:cf:59:56:95:53:5f:f3:8a:f6:
f9:6f:1d:f2:d3:55:3e:6f:10:53:78:4b:3d:50:e8:
40:e3:73:fd:cc:e6:cd:c0:7d:a0:2f:b4:d2:b9:83:
69:d3:0b:f2:fd:8e:26:0b:84:1a:4a:c2:06:03:56:
02:ae:22:d7:3c:29:6f:39:a2:04:07:5b:5e:b1:4c:
a4:56:95:36:80:ce:96:20:fd:87:00:e3:f2:ab:e4:
15:ba:f4:a3:a9:70:2e:8c:2c:0b:79:d3:38:ec:20:
8c:11:05:34:49:6e:e4:e4:a3:ce:e6:74:2a:dd:d6:
8e:7e:de:e9:61:cb:37:e4:2c:13:33:95:b2:4e:13:
54:cd:8e:46:87:65:49:b3:03:4c:f0:94:04:a4:5c:
b9:82:29:2f:b9:0d:6d:80:5d:96:ca:1b:14:bc:80:
c2:ce:55:5b:a4:a5:63:a7:a0:58:2c:4b:8e:d5:02:
e9:5b:25:53:6b:65:ec:d1:29:b9:96:06:ba:a2:e2:
a6:34:e1:0c:aa:9f:d7:f1:30:c9:10:75:a4:aa:15:
52:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7B:23:B5:67:26:57:00:2E:E2:38:B0:78:84:E6:FF:72:2D:28:F8
X509v3 Authority Key Identifier:
keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/9F6611D029D311F184F1669A97833773.roa
sbgp-ipAddrBlock: critical
IPv4:
209.8.115.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:d3:46:4c:e0:c7:fa:1d:ed:4c:b0:2b:72:e4:08:57:49:3e:
b7:cb:9c:13:e5:c1:e3:a8:0f:68:f2:7c:b3:d1:dd:a5:e5:ba:
ed:2a:cc:13:cf:e5:03:a2:c6:d8:c1:84:5b:53:89:20:a4:8d:
5e:49:58:95:60:2b:a3:ed:55:a3:f0:a8:ed:94:9f:02:7e:d6:
38:b3:91:da:0d:2a:b7:3a:d9:89:61:57:64:b2:82:2b:79:74:
dc:27:d6:5f:ae:df:0b:9a:eb:e1:7c:4a:3e:0a:98:42:e2:e8:
22:ac:17:01:d7:4d:8f:41:b9:2e:81:a3:80:db:b4:9a:0b:1a:
1b:d9:de:49:1f:60:96:6a:6d:4e:4e:46:cf:1a:52:44:93:72:
da:7f:f0:ff:49:4c:da:e1:eb:d2:85:d4:c2:77:d3:79:12:b4:
10:48:80:0d:57:1c:b0:41:b1:4d:33:89:34:31:07:19:e7:fd:
cd:cf:be:ec:1d:e7:5b:45:6a:89:a7:c7:36:88:92:68:d6:ef:
ac:26:1e:dd:21:b2:fc:95:66:43:85:b7:88:bf:7a:56:80:5c:
f9:1e:bb:59:a7:7c:51:c8:05:ca:70:38:1b:56:a3:41:e7:96:
38:7b:fa:6a:69:da:03:76:55:b0:de:02:c8:fe:b3:36:2f:2f:
3d:d6:0e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:47:50 2026 by rpki-client