
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/09B2D8EC704C11ED97935E7DC4F9AE02.roa
File: 09B2D8EC704C11ED97935E7DC4F9AE02.roa (raw, json)
Hash identifier: c5g1rHsWNxDvIouk1n/dGRhPWzbyhhfN9823sucQoSo=
Subject key identifier: 30:5E:60:40:53:F1:23:A6:FB:FF:69:05:36:D2:29:BA:1A:3C:28:1B
Certificate issuer: /CN=A9188EB6/serialNumber=AD447A67F07E81CD09C322ECD10AD9416BC44B2B
Certificate serial: 0494
Authority key identifier: AD:44:7A:67:F0:7E:81:CD:09:C3:22:EC:D1:0A:D9:41:6B:C4:4B:2B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rUR6Z_B-gc0JwyLs0QrZQWvESys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/09B2D8EC704C11ED97935E7DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:18:07 +0000
ROA not before: Mon 02 Feb 2026 23:20:08 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 132077
IP address blocks: 193.149.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.crl
rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rUR6Z_B-gc0JwyLs0QrZQWvESys.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:28:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1172 (0x494)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188EB6, serialNumber=AD447A67F07E81CD09C322ECD10AD9416BC44B2B
Validity
Not Before: Feb 2 23:20:08 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a44a9f-3926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4b:7c:18:1d:51:7b:7e:15:31:d0:25:6f:6e:
2b:d1:8a:4e:ca:49:8b:d5:a9:ff:7a:fd:0d:5d:9a:
6c:b7:a6:b4:74:89:c4:e4:ab:d1:fa:62:84:3a:2e:
fd:d1:21:ce:85:f8:85:c2:aa:a5:e7:ae:63:d3:9d:
7a:44:26:57:65:90:64:f2:7e:3d:72:8b:be:26:90:
aa:17:ad:cf:91:3a:a8:37:94:a3:f6:7a:59:81:c4:
71:79:a9:21:62:a1:94:69:48:0c:99:cd:a3:d9:61:
72:e7:39:da:1d:19:98:a8:6d:74:1d:12:d9:65:e0:
25:4f:a0:19:06:58:ef:15:a5:a1:06:76:a6:23:43:
5d:c2:f8:a3:d8:17:90:83:76:a4:74:7d:21:84:4c:
f6:ef:c6:6a:c6:04:67:a4:44:8a:79:75:d6:f0:22:
03:27:ea:e7:50:ef:a0:89:30:de:be:3e:34:b4:cf:
5f:dc:62:a0:80:c5:bf:3b:8f:8b:81:79:37:d9:fc:
82:11:d6:eb:83:a1:0a:20:df:2a:d6:4d:4c:b3:c9:
97:9c:a9:04:0b:cb:7d:cd:59:26:9f:31:18:35:87:
75:65:b1:49:6f:6a:d0:39:94:19:38:bd:fa:21:e8:
8e:73:5b:47:66:57:b5:c8:74:82:b3:b3:33:f8:94:
03:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5E:60:40:53:F1:23:A6:FB:FF:69:05:36:D2:29:BA:1A:3C:28:1B
X509v3 Authority Key Identifier:
keyid:AD:44:7A:67:F0:7E:81:CD:09:C3:22:EC:D1:0A:D9:41:6B:C4:4B:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rUR6Z_B-gc0JwyLs0QrZQWvESys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/09B2D8EC704C11ED97935E7DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
193.149.153.0/24
Signature Algorithm: sha256WithRSAEncryption
99:53:a1:b9:42:09:5e:90:14:45:5f:5e:07:3f:af:e6:9d:6e:
07:b7:80:ac:bd:d3:d1:98:93:ea:31:f1:5c:1f:b0:69:95:38:
a1:63:3e:0d:af:43:5c:fb:1e:fe:e3:1f:1e:b2:a4:87:4a:fe:
e0:e5:78:1d:9a:90:1d:0e:14:30:9f:20:3c:66:b1:d1:e5:42:
ea:9c:70:50:3b:fd:26:20:b9:64:99:f4:9f:b7:ab:f1:d5:e2:
6d:c2:8e:98:ff:45:8d:1f:75:87:62:73:51:ee:43:6f:8a:fb:
56:2d:ce:44:52:f3:32:73:db:10:b7:96:f6:cc:84:39:3f:a9:
81:0f:ca:98:57:11:39:d2:dc:04:de:e4:df:13:99:9e:98:89:
95:3a:24:fc:a0:08:31:21:5b:25:99:c0:3a:2e:e8:8b:4d:f1:
ab:37:f4:e6:a2:27:0b:c1:e9:28:83:ca:fc:c4:14:81:5f:87:
5e:46:65:09:17:e4:79:e8:4e:6e:40:5f:b7:86:0d:ea:b6:58:
f4:62:cf:be:28:2b:d0:15:37:c9:3b:d5:e1:56:e3:68:bb:93:
56:62:70:bb:b1:9a:d4:28:46:08:95:46:93:5a:6e:82:f9:7e:
5f:1b:f4:a0:69:34:e5:80:40:4d:a6:9a:fd:03:4b:b7:f9:36:
e1:7c:54:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:36:18 2026 by rpki-client