
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/A97B2098C70811ECBAECCC78C4F9AE02.roa
File: A97B2098C70811ECBAECCC78C4F9AE02.roa (raw, json)
Hash identifier: kyIG7ncvbWqzn85Ha8KabsesL4FJLH6bGyp9u+dlsPU=
Subject key identifier: 06:0B:A0:04:F5:7A:34:5F:EB:7E:B7:09:27:2E:01:5A:0C:FF:31:41
Certificate issuer: /CN=A9185D6E/serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
Certificate serial: 04B9
Authority key identifier: 8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/A97B2098C70811ECBAECCC78C4F9AE02.roa
Signing time: Mon 08 Jun 2026 11:38:20 +0000
ROA not before: Mon 08 Jun 2026 11:38:20 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 14618
IP address blocks: 31.69.0.0/17 maxlen: 24
31.69.224.0/19 maxlen: 24
31.99.144.0/21 maxlen: 24
141.163.128.0/20 maxlen: 24
141.163.144.0/20 maxlen: 24
141.163.160.0/20 maxlen: 24
141.163.176.0/20 maxlen: 24
141.163.192.0/20 maxlen: 24
141.163.208.0/20 maxlen: 24
141.163.224.0/20 maxlen: 24
141.163.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl
rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:47:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1209 (0x4b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185D6E, serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
Validity
Not Before: Jun 8 11:38:20 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a26a9ac-ca35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:98:f8:d6:1f:e4:17:22:42:77:94:76:92:fa:
98:27:67:ed:dd:db:dd:a6:c5:f0:ef:5b:30:f8:74:
61:a2:05:82:6b:c6:07:68:65:ab:22:ed:ff:1f:61:
bd:38:b8:78:c6:80:90:89:9c:fc:da:9d:15:20:4e:
e6:ef:76:43:16:91:51:20:29:5d:e2:44:54:44:0d:
b5:46:3c:e0:d0:87:5c:21:6c:7a:fa:a7:cc:f4:41:
28:86:a7:4e:08:c9:3f:02:17:e7:b1:a1:50:21:3c:
a5:92:06:fc:ba:f9:a0:d6:2e:46:0f:0a:78:54:28:
7c:a5:f4:68:ce:a3:74:ab:c6:85:2f:b8:5c:0b:9b:
49:b1:70:fc:a5:6c:4e:7d:30:20:24:3b:d3:57:c0:
14:f2:98:28:23:12:f6:a1:b3:57:e3:ce:e7:e6:44:
84:e1:2f:dc:09:c0:5c:3c:6d:b4:0c:cf:e5:fc:5c:
ac:53:df:85:15:7d:4e:0c:9f:fd:d0:fa:a8:4b:97:
f7:3a:85:8c:72:a6:28:d0:36:14:e0:6e:70:db:81:
ee:ea:c8:64:53:d6:ca:9f:fb:bc:95:88:22:29:5f:
ea:c4:a8:04:0c:1c:35:ac:7e:bb:51:e1:70:4c:4c:
58:1e:86:e0:c1:4b:72:f9:c1:12:d1:c5:3a:f0:c1:
30:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0B:A0:04:F5:7A:34:5F:EB:7E:B7:09:27:2E:01:5A:0C:FF:31:41
X509v3 Authority Key Identifier:
keyid:8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/A97B2098C70811ECBAECCC78C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
31.69.0.0/17
31.69.224.0/19
31.99.144.0/21
141.163.128.0/17
Signature Algorithm: sha256WithRSAEncryption
9e:34:23:2f:68:02:14:85:1e:26:df:43:f5:06:66:49:e3:97:
a1:4b:37:50:24:dd:c0:98:45:89:ec:96:19:ac:4a:60:4b:7b:
6e:23:5b:c9:0d:98:a6:b5:bc:2b:c8:c6:86:fb:4e:fb:4b:5b:
1b:48:61:96:37:75:44:43:c0:d9:52:ed:10:de:de:6c:5f:29:
29:fa:3a:27:d1:b9:b5:90:c3:87:f5:61:98:fa:54:44:46:c0:
3a:2d:a2:e5:fd:97:ef:0a:95:de:d4:c6:e0:bb:61:b2:f9:4d:
f4:86:f3:30:84:76:bc:a2:39:17:47:87:4b:29:2c:92:87:48:
a9:69:c1:49:cd:1d:34:ce:e7:0a:fd:c6:47:67:cd:c5:0f:da:
12:8b:3c:25:eb:82:d9:ec:b4:2a:99:5d:99:99:3b:55:e9:e9:
36:1e:7c:01:ec:4b:21:16:3e:a4:97:22:43:36:5f:e4:1f:30:
0f:4d:d0:a7:0f:63:04:a7:65:8b:73:26:7e:df:c4:a3:bb:38:
fe:55:96:38:72:f8:7b:15:a1:a1:aa:1e:33:81:30:32:35:2c:
d6:76:ab:91:6d:23:04:90:9e:21:15:c0:b4:77:5e:7a:07:e1:
cc:0a:e9:4f:8c:61:ed:5a:6b:e0:82:bc:7f:98:38:4a:73:13:
12:4b:bd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:17:34 2026 by rpki-client