
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/10EEFBF4F66D11F0BC9231976F6F56BC.roa
File: 10EEFBF4F66D11F0BC9231976F6F56BC.roa (raw, json)
Hash identifier: eyoOEDYLeNLiyeOpxgsdlPiwL2JIJa/lO6369+YZZiQ=
Subject key identifier: 15:87:16:E7:FF:FE:80:46:FE:F6:25:B8:BA:65:AB:DB:75:EC:A5:5D
Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320
Certificate serial: 08F9
Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/10EEFBF4F66D11F0BC9231976F6F56BC.roa
Signing time: Mon 02 Nov 2026 21:39:36 +0000
ROA not before: Mon 02 Nov 2026 21:39:36 +0000
ROA not after: Mon 31 Jan 2028 00:00:00 +0000
asID: 213734
IP address blocks: 2404:3880::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl
rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 20:54:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2297 (0x8f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175F18, serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320
Validity
Not Before: Nov 2 21:39:36 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=6ae90318-8b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9a:d7:45:33:a6:e7:c9:ed:7c:cd:d8:ee:c8:
98:f7:05:c3:1f:7e:fc:9b:32:c9:d9:34:11:e8:21:
9a:f6:31:9d:8d:8b:50:1e:f6:49:0a:4f:43:8a:95:
b9:04:47:f8:34:8e:b1:bb:8e:e5:1d:7b:f5:74:42:
ca:c5:70:e5:13:a2:3c:1b:e9:9a:2e:ad:9c:84:c7:
4e:2a:d6:6b:cf:16:e1:b3:90:5d:67:80:ae:7e:d0:
66:4d:56:d2:23:f4:97:2d:08:a4:01:f3:1f:08:fe:
d5:94:96:ae:e7:9f:9b:38:b5:e2:68:d2:a4:1f:fa:
ff:c9:86:26:40:ee:38:77:1d:47:e3:d2:e2:14:b1:
7e:05:93:d0:f1:bc:24:23:f2:15:47:e8:86:f4:90:
1e:38:02:49:6f:08:be:98:db:56:d4:b1:db:e6:2b:
00:af:7a:67:46:3b:3a:08:1a:54:5b:66:b0:f4:60:
bb:b8:e4:ed:50:fb:67:90:80:1e:24:66:f2:6a:67:
1f:97:26:1c:bc:b9:24:d8:d8:18:23:67:f4:bb:7d:
2f:d0:c6:bb:ce:84:4e:95:a2:b6:52:ac:2a:77:a1:
e9:5f:92:ea:b5:2a:72:b2:32:59:79:a4:1e:de:bf:
08:5c:fd:21:ef:b6:9a:fa:11:3c:7b:77:d3:c5:c7:
54:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:87:16:E7:FF:FE:80:46:FE:F6:25:B8:BA:65:AB:DB:75:EC:A5:5D
X509v3 Authority Key Identifier:
keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/10EEFBF4F66D11F0BC9231976F6F56BC.roa
sbgp-ipAddrBlock: critical
IPv6:
2404:3880::/32
Signature Algorithm: sha256WithRSAEncryption
8e:84:55:09:40:6c:aa:51:1c:62:d4:92:5c:6b:9c:41:0a:c1:
56:71:c1:cf:de:7e:df:32:59:10:b9:81:d1:7a:d7:4c:76:8e:
89:b9:0b:e9:dd:b3:9a:23:fd:45:08:df:9b:22:c3:1c:21:07:
c6:e4:c1:ab:c4:33:78:58:1e:4c:8a:0e:b0:a4:82:0c:d0:b4:
2b:2d:11:65:7f:f8:66:93:b1:3e:8c:b9:9e:33:e3:10:cc:52:
67:7c:4a:66:f6:e3:6f:48:a8:ba:41:0f:5b:94:d0:70:d7:33:
2d:2b:7c:8c:d5:88:5e:53:ef:95:5b:7c:de:55:01:0d:c4:18:
c6:50:3d:9e:41:1f:b1:84:f5:4e:83:82:18:e8:94:11:cd:5b:
2b:8c:3b:c2:0b:a2:ed:12:6c:24:55:3e:39:0a:d8:9e:01:b7:
aa:3b:f0:8c:a8:8c:b3:56:f9:66:8d:53:c9:20:ac:b2:ef:b9:
71:cf:b5:f3:5b:3c:4a:e2:d0:33:a4:53:80:60:69:45:8e:99:
84:0a:5c:ce:19:c6:52:68:24:2e:7c:73:b8:3a:cf:ea:51:1a:
ea:54:9d:66:da:4f:6d:42:7f:c2:e3:8a:05:50:3a:d1:ef:f8:
ef:e4:96:ab:3b:fd:1d:f6:ae:31:87:14:7d:69:4e:01:13:f2:
06:b3:6b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:52:21 2026 by rpki-client