
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154F63/9DA95560D83211F1BCD0001C2F66CEF9/2AC55BAED83511F193B3C8893066CEF9.roa
File: 2AC55BAED83511F193B3C8893066CEF9.roa (raw, json)
Hash identifier: X/pCRyo6uUE8fE8fMZAAb2F5dNLoQOAiVVIpiufiQ9w=
Subject key identifier: BB:A6:7B:74:59:45:3D:4C:92:F6:19:1C:12:DD:F0:C2:A2:1F:F2:BA
Certificate issuer: /CN=A9154F63/serialNumber=4132A4BF2E82B64DDFA389F34951D5584CAB4DA6
Certificate serial: 02
Authority key identifier: 41:32:A4:BF:2E:82:B6:4D:DF:A3:89:F3:49:51:D5:58:4C:AB:4D:A6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QTKkvy6Ctk3fo4nzSVHVWEyrTaY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154F63/9DA95560D83211F1BCD0001C2F66CEF9/2AC55BAED83511F193B3C8893066CEF9.roa
Signing time: Wed 04 Nov 2026 09:50:29 +0000
ROA not before: Wed 04 Nov 2026 09:50:29 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 136896
IP address blocks: 147.185.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154F63/9DA95560D83211F1BCD0001C2F66CEF9/QTKkvy6Ctk3fo4nzSVHVWEyrTaY.crl
rsync://rpki.apnic.net/member_repository/A9154F63/9DA95560D83211F1BCD0001C2F66CEF9/QTKkvy6Ctk3fo4nzSVHVWEyrTaY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QTKkvy6Ctk3fo4nzSVHVWEyrTaY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 10:15:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154F63, serialNumber=4132A4BF2E82B64DDFA389F34951D5584CAB4DA6
Validity
Not Before: Nov 4 09:50:29 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6aeaffe5-d129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5c:19:fd:07:4b:ea:9f:d3:4d:8a:cc:2f:55:
df:22:c0:a1:c8:c7:22:42:d7:d9:4c:78:a7:be:48:
ad:67:d8:9a:cf:ef:5f:58:95:b2:7a:8b:00:39:df:
30:13:dd:b1:b5:cc:12:c7:c0:d2:26:ac:67:5a:4d:
b0:3a:e9:f4:25:c0:a5:19:f9:72:0f:65:49:ba:f1:
d3:1e:5b:07:1a:db:a7:49:ea:95:45:ba:32:0d:b4:
20:46:fc:2a:b3:08:b3:24:71:39:93:e8:11:c7:ca:
7f:2a:ce:cd:d0:a0:4d:f4:b6:0e:a9:10:93:c4:02:
ed:c1:8b:29:a4:be:b1:44:69:3e:f7:03:99:50:0e:
de:78:5c:a1:34:0e:30:49:e7:a7:80:86:1b:dd:9a:
4b:a1:24:1d:ff:83:91:27:b1:3d:fa:bf:a6:7a:75:
6a:a1:61:a6:2b:0d:98:e0:33:8d:20:fd:39:df:31:
86:a0:ed:0a:5f:62:e1:6c:db:90:e8:5b:fc:1d:09:
34:42:fe:92:b2:8b:f4:16:e1:6f:95:89:cb:3a:5f:
4f:17:14:9c:e3:1a:e0:8c:ac:e3:99:df:17:ec:5c:
aa:24:79:ca:1a:09:d9:93:7c:a5:15:20:09:f1:5d:
f5:5e:17:18:b1:4c:23:11:9d:38:1b:0c:bc:31:21:
e8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A6:7B:74:59:45:3D:4C:92:F6:19:1C:12:DD:F0:C2:A2:1F:F2:BA
X509v3 Authority Key Identifier:
keyid:41:32:A4:BF:2E:82:B6:4D:DF:A3:89:F3:49:51:D5:58:4C:AB:4D:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154F63/9DA95560D83211F1BCD0001C2F66CEF9/QTKkvy6Ctk3fo4nzSVHVWEyrTaY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QTKkvy6Ctk3fo4nzSVHVWEyrTaY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154F63/9DA95560D83211F1BCD0001C2F66CEF9/2AC55BAED83511F193B3C8893066CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
147.185.28.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:26:3a:46:70:3d:f6:f1:a9:65:95:33:77:f3:8c:55:0f:b6:
d1:30:88:9b:ce:b7:11:47:7c:ed:e0:7a:2c:0e:dd:0a:80:b9:
e1:4e:b6:a8:f7:17:17:86:2f:06:9d:ec:d9:af:c4:19:ff:b8:
fd:36:3a:f3:59:0d:91:19:fb:65:cf:87:b5:42:13:82:14:6d:
93:09:f7:d3:f3:92:bc:b5:f1:df:b9:07:13:d5:ea:4c:55:77:
e3:e4:ce:d0:b7:12:87:45:cf:8a:86:71:bc:c3:9e:44:68:c6:
c9:25:7a:a5:83:aa:0e:86:24:26:a8:65:6c:d0:d8:11:2e:01:
af:14:ea:58:b4:37:50:66:ab:4e:64:c7:ad:76:d8:eb:bb:87:
26:6a:b2:7d:22:cd:4a:6d:70:60:f8:23:f2:cb:44:87:22:8d:
18:38:37:4c:9d:54:90:5a:6e:4c:96:92:ca:44:d9:50:c3:4f:
c4:e9:45:23:97:f6:0e:cb:c6:45:e5:34:7d:87:9b:6a:6e:3e:
e6:a6:8f:fb:56:6a:a2:0a:e4:b3:c2:d5:32:d5:ca:b9:9c:b1:
ec:a8:7f:5a:90:e1:7f:b8:a0:b1:e1:d8:a0:47:b5:6e:a9:6f:
c5:9e:b9:6b:4e:92:66:4d:c8:f8:3a:1d:67:c7:0e:9a:23:c0:
2d:85:1c:dc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 5 16:53:17 2026 by rpki-client