
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/18611004B42A11EC9BD3DE42C4F9AE02.roa
File: 18611004B42A11EC9BD3DE42C4F9AE02.roa (raw, json)
Hash identifier: F7zelpLk1UD+fObDTKpqTOpRawAblSrVeJkuuPP4a6c=
Subject key identifier: 58:71:88:52:D0:5E:9D:99:B8:FD:BC:6D:24:0D:E3:75:F6:BA:05:45
Certificate issuer: /CN=A9170E11/serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7
Certificate serial: 0510
Authority key identifier: 3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/18611004B42A11EC9BD3DE42C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:24:32 +0000
ROA not before: Sat 31 Jan 2026 00:19:31 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 206434
IP address blocks: 2400:3e20:4000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl
rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:40:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1296 (0x510)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170E11, serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7
Validity
Not Before: Jan 31 00:19:31 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a47650-d9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cd:5c:e6:75:3f:82:9f:b3:9e:a8:9f:c8:0b:
27:2b:8a:97:e1:0b:92:49:52:13:e0:66:07:83:19:
65:9c:e0:18:7e:13:bb:13:dd:3c:d5:cc:3f:b1:d5:
0a:93:d4:d0:a1:b9:bb:1f:37:02:7f:57:fa:66:69:
20:5e:a3:18:d3:13:a3:05:f0:5e:30:32:71:9c:b9:
ed:09:8a:dd:65:51:08:12:eb:64:72:1b:9d:d7:c2:
7b:fd:51:92:6f:84:bc:6f:00:25:c9:b7:2c:a8:dc:
ec:e8:f0:bc:82:6f:ae:f3:8f:2e:e5:fe:14:25:00:
ac:58:75:dd:c3:d8:bc:38:c6:45:09:5a:b8:b4:fb:
fb:8d:65:74:48:76:1e:a7:2b:5f:52:18:3c:68:7f:
e4:8c:91:1d:e8:da:0f:45:7b:d5:f1:93:cb:55:97:
d4:11:1f:e7:6a:fe:11:a6:9d:cb:99:35:cb:ff:78:
49:20:8a:47:7c:53:68:58:e3:84:a2:67:45:b6:74:
3b:9a:38:c2:3f:16:09:b6:46:b4:74:2a:f8:dc:c5:
b2:27:6f:6a:de:1a:31:c4:1a:8f:31:74:12:84:f6:
b6:18:e7:43:d7:3e:ad:0a:57:9d:78:b5:72:ff:22:
46:0c:ab:4e:bf:bf:50:ca:eb:be:c8:8b:8e:10:c4:
e8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:71:88:52:D0:5E:9D:99:B8:FD:BC:6D:24:0D:E3:75:F6:BA:05:45
X509v3 Authority Key Identifier:
keyid:3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/18611004B42A11EC9BD3DE42C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:3e20:4000::/36
Signature Algorithm: sha256WithRSAEncryption
96:44:a8:9a:df:cc:20:6e:ec:5d:69:22:6c:2e:31:69:08:e3:
0a:83:ee:52:5c:3f:f2:ed:9e:d8:b2:0d:8a:34:65:9d:fa:2f:
6b:f3:cd:3e:06:71:45:c0:72:58:de:53:97:d1:f4:13:e5:8e:
4f:38:90:a1:90:75:ff:3c:5b:88:b1:31:44:48:33:4b:d6:b6:
0d:6a:9b:82:cc:1f:af:82:18:ba:43:9a:b4:6c:a6:ee:eb:66:
71:ea:98:66:84:e3:ac:9a:c7:a8:41:71:8f:53:49:c8:6f:af:
04:57:70:5a:fa:e9:83:bb:61:0c:4d:39:e4:37:c1:31:1e:fc:
4c:13:41:15:15:c7:d0:a3:10:85:55:bc:6d:8a:d4:0f:05:38:
15:7c:95:f6:5a:5e:df:5c:7f:f0:b5:c3:df:82:59:40:8b:74:
7c:ee:1f:fa:9b:19:fa:dd:a9:20:0c:ec:ba:8f:38:d0:9e:77:
b7:b5:12:78:f0:25:10:f6:d6:49:fc:03:e5:07:cf:6d:17:58:
9f:8e:7b:32:02:a3:23:c6:0c:30:5c:b8:20:3f:a8:a8:b6:66:
e9:28:03:40:02:f1:8e:57:67:e0:74:18:07:5d:82:ad:ac:b4:
7c:b6:a1:91:76:3a:ce:9a:dc:a9:57:c1:b4:7c:c7:12:e0:e2:
e8:fc:d5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:18:48 2026 by rpki-client