
$ rpki-client -vvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/9CA607DA3C8411F0BDA85229C4F9AE02.roa
File: 9CA607DA3C8411F0BDA85229C4F9AE02.roa (raw, json)
Hash identifier: JGgROCd0rurPRIraTkAMkDhgeLifHRo8Ck7DouTUfEU=
Subject key identifier: 59:9D:19:D8:3B:2C:63:7C:68:B5:85:5F:81:72:70:59:A3:0C:F4:24
Certificate issuer: /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
Certificate serial: 0279
Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/9CA607DA3C8411F0BDA85229C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:52:22 +0000
ROA not before: Mon 08 Dec 2025 08:04:24 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 150785
IP address blocks: 2400:e3e0:c000::/36 maxlen: 36
2400:e3e0:e000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl
rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:55:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 633 (0x279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919BE9A, serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
Validity
Not Before: Dec 8 08:04:24 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a47cd6-5538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:78:f8:f4:87:66:c1:04:48:50:bc:7f:1a:5a:
2b:f4:9d:e2:7a:da:a3:92:fd:04:47:a3:56:84:3d:
9b:4f:00:b1:c9:29:60:00:c3:55:5b:3f:d6:e8:c5:
f3:0b:86:af:9c:67:7b:67:6a:ad:62:c6:04:f0:ca:
c8:f1:09:22:07:db:b3:75:01:97:a3:c2:e3:4d:c3:
c2:bc:e7:61:27:4b:70:92:0f:11:27:18:6d:7a:21:
8e:4b:bc:4c:38:78:87:61:ef:fe:e2:4d:57:45:34:
89:ab:f0:6a:46:5e:ee:94:b7:55:36:df:3f:89:30:
2d:9a:e1:ee:83:9b:ca:11:79:e9:1a:d5:f9:e9:51:
76:c9:94:b3:5c:f7:3c:77:cc:ee:b7:75:2e:81:1f:
40:8f:61:18:e4:48:c2:64:30:a3:7a:b5:6e:35:9b:
7b:bf:ed:6e:fb:38:21:fd:ec:a4:4c:e1:8a:1f:ec:
50:ef:24:7d:3b:0e:eb:47:d1:cf:e1:2a:60:97:c7:
e3:ca:87:73:e1:7d:72:f8:ec:ba:1c:e3:03:6e:0f:
da:90:47:00:0c:41:de:0d:d7:9a:29:a4:33:db:48:
6d:64:96:19:e8:50:96:a1:de:65:fa:40:3c:78:5e:
80:9b:d8:aa:81:42:fb:a0:07:55:32:2d:db:06:43:
f7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9D:19:D8:3B:2C:63:7C:68:B5:85:5F:81:72:70:59:A3:0C:F4:24
X509v3 Authority Key Identifier:
keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/9CA607DA3C8411F0BDA85229C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:e3e0:c000::/36
2400:e3e0:e000::/36
Signature Algorithm: sha256WithRSAEncryption
ad:77:f3:4a:a5:f6:0f:34:49:1b:62:ad:25:9d:24:55:c8:3d:
cf:06:84:6c:7a:0f:b8:d2:83:d3:04:f9:32:16:a5:1c:a1:9c:
33:59:39:9f:e2:42:f2:66:c5:23:7d:77:44:8b:b2:33:23:5c:
86:d7:72:d2:04:22:dd:be:01:53:3f:a4:40:98:c1:5c:bf:b0:
03:12:1a:55:53:3e:ea:e3:c2:b8:f7:32:5c:5e:21:9f:cd:fa:
73:fa:80:c1:d3:52:fe:ba:37:44:5a:d0:e2:c1:ce:0e:d0:9c:
42:7b:75:a1:e2:b6:e2:4a:38:27:67:fd:60:b7:c8:3b:1e:6c:
5e:02:a1:88:a4:6c:21:be:8d:4f:8f:04:23:40:13:e1:02:45:
b7:e7:b5:dd:a4:bc:f2:fb:06:64:7a:05:f6:57:5f:12:6c:2a:
ad:39:96:13:c1:2b:e0:96:7e:38:64:fd:60:7d:d9:80:a7:3e:
40:d7:88:9e:f0:dc:1c:c7:fb:cb:c7:a6:ae:3f:f5:e1:f7:e3:
f9:da:ea:6e:cc:d3:19:1b:14:e4:ee:90:ca:8d:f6:83:ab:1a:
99:b7:b6:55:a6:e8:a5:ac:e3:c5:5c:b6:b4:1b:e9:c9:7f:2a:
5a:44:e7:9f:45:60:ed:aa:64:30:a6:69:3f:da:f0:17:d4:c4:
5c:c0:00:ae
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgICAnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUJFOUExMTAvBgNVBAUTKEE3OUI4Mjg4NzAzMTQ0MTk5MEIxOEQxQTA1RjlFMjcx
RTdFN0I4RTYwHhcNMjUxMjA4MDgwNDI0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0N2NkNi01NTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArHj49IdmwQRIULx/Glor9J3ietqjkv0ER6NWhD2bTwCxySlgAMNVWz/W6MXz
C4avnGd7Z2qtYsYE8MrI8QkiB9uzdQGXo8LjTcPCvOdhJ0twkg8RJxhteiGOS7xM
OHiHYe/+4k1XRTSJq/BqRl7ulLdVNt8/iTAtmuHug5vKEXnpGtX56VF2yZSzXPc8
d8zut3UugR9Aj2EY5EjCZDCjerVuNZt7v+1u+zgh/eykTOGKH+xQ7yR9Ow7rR9HP
4Spgl8fjyodz4X1y+Oy6HOMDbg/akEcADEHeDdeaKaQz20htZJYZ6FCWod5l+kA8
eF6Am9iqgUL7oAdVMi3bBkP3pQIDAQABo4ICajCCAmYwHQYDVR0OBBYEFFmdGdg7
LGN8aLWFX4FycFmjDPQkMB8GA1UdIwQYMBaAFKebgohwMUQZkLGNGgX54nHn57jm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkU5QS84RkExRjU2RUI4
NUUxMUVEOEU2RjQyMTNDNEY5QUUwMi9wNXVDaUhBeFJCbVFzWTBhQmZuaWNlZm51
T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3A1dUNpSEF4UkJtUXNZMGFCZm5pY2VmbnVPWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUJFOUEvOEZBMUY1NkVCODVFMTFFRDhFNkY0MjEzQzRGOUFFMDIvOUNBNjA3REEz
Qzg0MTFGMEJEQTg1MjI5QzRGOUFFMDIucm9hMCkGCCsGAQUFBwEHAQH/BBowGDAW
BAIAAjAQAwYEJADj4MADBgQkAOPg4DANBgkqhkiG9w0BAQsFAAOCAQEArXfzSqX2
DzRJG2KtJZ0kVcg9zwaEbHoPuNKD0wT5MhalHKGcM1k5n+JC8mbFI313RIuyMyNc
htdy0gQi3b4BUz+kQJjBXL+wAxIaVVM+6uPCuPcyXF4hn836c/qAwdNS/ro3RFrQ
4sHODtCcQnt1oeK24ko4J2f9YLfIOx5sXgKhiKRsIb6NT48EI0AT4QJFt+e13aS8
8vsGZHoF9ldfEmwqrTmWE8Er4JZ+OGT9YH3ZgKc+QNeInvDcHMf7y8emrj/14ffj
+drqbszTGRsU5O6Qyo32g6sambe2VabopazjxVy2tBvpyX8qWkTnn0Vg7apkMKZp
P9rwF9TEXMAArg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:43 2026 by rpki-client