
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/0953844ADF0811F0898BFB0E5D6F56BC.roa
File: 0953844ADF0811F0898BFB0E5D6F56BC.roa (raw, json)
Hash identifier: Bj0dTRZe69VKYdKXRVtHuHMTmJbMH2dUZaNRMuW+NkI=
Subject key identifier: EC:3A:48:AE:E2:6C:AC:A1:D6:5E:93:89:AF:B5:AB:20:E4:CF:3F:0C
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 3A67
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/0953844ADF0811F0898BFB0E5D6F56BC.roa
Signing time: Sun 01 Mar 2026 21:22:29 +0000
ROA not before: Fri 16 Jan 2026 16:13:37 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 41239
IP address blocks: 2402:d680::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14951 (0x3a67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Jan 16 16:13:37 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a4ae15-76b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:00:67:2f:5c:93:c0:b8:31:40:c2:af:2c:4e:
0f:83:1a:79:47:e0:77:3c:8a:09:74:33:70:64:a0:
f6:c9:a3:75:9a:ef:cf:64:f1:ad:1e:71:af:7b:e7:
8e:46:8e:54:e8:18:f5:f4:08:f0:e0:fd:0e:e1:23:
c9:51:b1:37:94:80:bd:26:e7:96:44:47:eb:69:e0:
67:93:fc:f7:3a:7a:8a:81:82:f9:7f:60:6c:a0:80:
09:74:65:b3:60:47:b4:7d:34:e8:51:32:9f:6d:4c:
50:d7:c5:ce:53:a8:f9:c6:d4:de:04:51:6d:2e:6e:
01:8d:ba:f2:9a:0a:92:1b:05:bb:1d:07:d9:b3:ec:
30:28:8d:96:f5:86:c9:27:69:1c:2e:f6:3d:f8:67:
72:ce:a7:cf:24:bd:fd:dd:d7:ee:53:5c:77:76:f9:
bf:8e:49:b9:be:f2:60:16:2d:0a:2f:c6:d8:7f:40:
a6:a5:91:fd:e3:ff:32:97:f8:ed:dc:e7:41:ca:05:
8f:45:d8:c0:87:63:24:05:3a:6c:38:3e:01:3f:1c:
73:04:41:bf:d6:d8:57:ca:2a:aa:45:6c:62:2e:f6:
d4:8e:b7:ca:b4:c1:0b:fe:4c:ec:1c:9d:45:54:37:
91:64:bc:2d:1e:c4:66:e7:50:2f:7d:93:c7:f4:f3:
19:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3A:48:AE:E2:6C:AC:A1:D6:5E:93:89:AF:B5:AB:20:E4:CF:3F:0C
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/0953844ADF0811F0898BFB0E5D6F56BC.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:d680::/34
Signature Algorithm: sha256WithRSAEncryption
a3:eb:67:06:a8:0e:cd:39:af:07:15:54:09:d8:21:f3:7f:f5:
f3:40:21:1f:18:fb:80:d4:9a:1d:c7:cc:6a:17:f6:a7:64:8d:
7f:90:0e:80:a3:09:e3:1b:fa:04:61:49:a7:ad:2c:fa:e6:d2:
95:e4:64:6f:f1:e7:aa:dc:d1:a7:32:11:49:ca:21:a7:6c:cc:
e2:fa:c8:c5:bd:a4:52:dd:0a:3e:78:25:b1:f7:3b:4d:e8:e1:
62:58:41:f6:ab:71:7b:9f:cb:9a:8b:cf:2b:9e:ba:83:eb:51:
26:b1:e1:f9:48:72:13:c2:de:2f:45:e3:c5:d5:70:08:01:de:
62:35:47:3e:6b:7f:ab:21:41:31:67:7c:2c:dd:94:02:c3:4a:
25:c1:d5:03:e8:83:0c:28:55:42:5a:43:5c:ad:c3:34:83:c7:
6f:21:8f:95:52:cb:dd:80:b7:48:9c:ed:67:e7:03:96:ee:5d:
87:8b:49:39:a6:e1:47:d8:0e:d0:c7:52:7a:20:07:08:2e:b3:
72:43:c1:d2:1f:7b:18:50:73:ed:4d:28:92:ad:bb:7c:4d:3c:
bd:58:6e:2a:c8:7d:11:7f:28:20:a7:e3:96:a2:0f:3d:e0:42:
77:d2:47:e8:1f:ee:77:95:5c:e9:3e:4e:76:37:fe:e2:0b:d8:
d0:3c:8c:99
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgICOmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG
QUIyNEQ3RTcwHhcNMjYwMTE2MTYxMzM3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YWUxNS03NmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsABnL1yTwLgxQMKvLE4Pgxp5R+B3PIoJdDNwZKD2yaN1mu/PZPGtHnGve+eO
Ro5U6Bj19Ajw4P0O4SPJUbE3lIC9JueWREfraeBnk/z3OnqKgYL5f2BsoIAJdGWz
YEe0fTToUTKfbUxQ18XOU6j5xtTeBFFtLm4BjbrymgqSGwW7HQfZs+wwKI2W9YbJ
J2kcLvY9+GdyzqfPJL393dfuU1x3dvm/jkm5vvJgFi0KL8bYf0CmpZH94/8yl/jt
3OdBygWPRdjAh2MkBTpsOD4BPxxzBEG/1thXyiqqRWxiLvbUjrfKtMEL/kzsHJ1F
VDeRZLwtHsRm51AvfZPH9PMZ2wIDAQABo4ICYjCCAl4wHQYDVR0OBBYEFOw6SK7i
bKyh1l6Tia+1qyDkzz8MMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz
MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvMDk1Mzg0NEFE
RjA4MTFGMDg5OEJGQjBFNUQ2RjU2QkMucm9hMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYGJALWgAAwDQYJKoZIhvcNAQELBQADggEBAKPrZwaoDs05rwcVVAnY
IfN/9fNAIR8Y+4DUmh3HzGoX9qdkjX+QDoCjCeMb+gRhSaetLPrm0pXkZG/x56rc
0acyEUnKIadszOL6yMW9pFLdCj54JbH3O03o4WJYQfarcXufy5qLzyueuoPrUSax
4flIchPC3i9F48XVcAgB3mI1Rz5rf6shQTFnfCzdlALDSiXB1QPogwwoVUJaQ1yt
wzSDx28hj5VSy92At0ic7WfnA5buXYeLSTmm4UfYDtDHUnogBwgus3JDwdIfexhQ
c+1NKJKtu3xNPL1YbirIfRF/KCCn45aiDz3gQnfSR+gf7neVXOk+TnY3/uIL2NA8
jJk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:44:44 2026 by rpki-client