
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/094ECC9A9DB311EEA5CE2852C4F9AE02.roa
File: 094ECC9A9DB311EEA5CE2852C4F9AE02.roa (raw, json)
Hash identifier: 3q66unEtiXx6jKcOQRNMynBbEHvMb38v7KWWr1AaGpQ=
Subject key identifier: C9:DB:F1:80:A2:A8:0A:9C:C1:CB:21:DD:46:91:48:E4:02:57:D7:4E
Certificate issuer: /CN=A919DC74/serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE
Certificate serial: 029F
Authority key identifier: 8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/094ECC9A9DB311EEA5CE2852C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:29:26 +0000
ROA not before: Thu 27 Nov 2025 00:17:47 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 132204
IP address blocks: 206.131.192.0/24 maxlen: 24
206.131.199.0/24 maxlen: 24
206.131.200.0/24 maxlen: 24
206.131.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl
rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:40:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 671 (0x29f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DC74, serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE
Validity
Not Before: Nov 27 00:17:47 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a44d46-2a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ec:b6:c0:22:94:ec:34:58:e9:af:45:8c:ea:
e5:bd:6f:f3:b9:15:31:d3:07:68:00:ae:bc:26:2e:
6a:cb:f9:b0:d9:5c:b2:94:84:6e:f9:c1:42:00:92:
4c:7e:df:75:46:d3:a5:85:d5:63:21:72:1b:71:9c:
e9:de:0e:89:0e:ef:f0:6d:f8:6c:95:cb:13:7f:7b:
04:72:ca:0f:9c:23:23:e4:cb:6e:c2:46:b2:67:d0:
d6:10:42:ff:ad:dd:e9:0c:42:e3:b7:c5:0b:6a:72:
12:8d:09:5e:ae:da:c8:93:e2:bf:ac:fe:78:b1:17:
59:b4:c1:e8:ca:9b:14:9e:45:3b:1f:c2:87:83:2f:
3c:66:9d:e9:01:d3:8c:38:df:5f:71:35:ea:7a:17:
fd:48:32:28:df:cb:de:77:0c:0e:25:2a:9b:f7:62:
9e:eb:6a:59:c9:e5:5a:2d:9e:15:1f:47:ca:15:37:
0f:4d:13:e2:01:bf:df:4a:6b:7a:c1:00:bf:a2:c5:
43:73:7a:8b:e3:8c:e9:47:d2:e7:c7:01:d3:fa:cd:
71:64:84:73:1b:97:47:01:74:60:4f:13:65:61:66:
82:c3:f9:3d:fe:5d:69:89:81:51:b9:5f:d2:15:fd:
ab:ef:95:e5:b3:73:12:47:b6:82:1e:bf:8d:36:4f:
54:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DB:F1:80:A2:A8:0A:9C:C1:CB:21:DD:46:91:48:E4:02:57:D7:4E
X509v3 Authority Key Identifier:
keyid:8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/094ECC9A9DB311EEA5CE2852C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
206.131.192.0/24
206.131.199.0-206.131.201.255
Signature Algorithm: sha256WithRSAEncryption
31:7e:a4:ab:48:69:6f:16:d6:b6:4d:c2:93:69:74:32:a0:20:
34:5e:ee:53:b8:b6:29:85:3a:6c:ca:21:45:6d:a3:cf:4a:25:
e3:96:f9:6e:53:3f:87:b4:b6:a0:05:24:20:a7:4c:79:f6:7c:
a9:dc:71:1b:9d:33:af:48:16:5b:7a:56:ee:75:62:9b:4f:6e:
c0:55:85:54:22:bd:a5:bd:2e:e3:58:ac:53:cb:2b:12:0c:b0:
9a:03:66:97:78:e0:37:03:7d:ac:fb:c0:99:72:f2:4a:bf:a1:
a9:da:aa:90:72:86:91:03:e6:7f:a3:aa:e8:75:66:c4:cf:7e:
16:51:92:5d:7c:45:82:cb:14:42:7e:f4:5d:20:bb:1f:8b:6c:
44:9e:78:c6:1f:7e:5f:4d:7b:17:e7:f1:56:5d:58:70:5c:0c:
f8:39:9c:d7:dc:ae:61:0b:d6:e5:15:90:aa:83:3a:fc:f1:67:
a3:21:4d:7a:fd:cf:a6:20:08:fa:3b:d4:9f:fe:4a:b3:f6:20:
2d:b8:b0:0f:59:a7:b0:0f:2d:cd:8b:03:e4:d4:14:c7:2d:84:
f1:1e:64:7f:10:61:91:63:d7:01:10:ea:cc:2a:26:75:e6:2b:
e5:45:e4:fd:6d:21:f4:30:de:06:13:b3:ae:7e:6a:8d:ee:2a:
4d:16:6e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:14:12 2026 by rpki-client