
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/B9E472609C0411F19B0A551E6B11F970.roa
File: B9E472609C0411F19B0A551E6B11F970.roa (raw, json)
Hash identifier: W9ajXAaa/aJ/h3Z8yYRoZBKfYFtDP2fJjqDya4amGXs=
Subject key identifier: BD:ED:AC:D1:5E:C9:34:30:16:6A:86:08:2C:F7:F5:58:FD:0E:C3:78
Certificate issuer: /CN=A9110DC8/serialNumber=DE17FEB19AEC4DF57EB2B578ACFB9E1031396F20
Certificate serial: 04
Authority key identifier: DE:17:FE:B1:9A:EC:4D:F5:7E:B2:B5:78:AC:FB:9E:10:31:39:6F:20
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3hf-sZrsTfV-srV4rPueEDE5byA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/B9E472609C0411F19B0A551E6B11F970.roa
Signing time: Wed 19 Aug 2026 19:33:46 +0000
ROA not before: Wed 19 Aug 2026 19:33:46 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 154805
IP address blocks: 160.236.238.0/24 maxlen: 24
160.236.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3hf-sZrsTfV-srV4rPueEDE5byA.crl
rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3hf-sZrsTfV-srV4rPueEDE5byA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3hf-sZrsTfV-srV4rPueEDE5byA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 09:36:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110DC8, serialNumber=DE17FEB19AEC4DF57EB2B578ACFB9E1031396F20
Validity
Not Before: Aug 19 19:33:46 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a86051a-26c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:13:0c:83:88:df:de:55:ec:ec:0a:8b:f7:07:
6d:6b:94:d9:1a:4b:e7:ad:d1:6d:51:35:d8:11:fc:
42:e0:ef:05:f6:ad:80:71:6f:3e:85:74:89:5a:fc:
c1:5d:24:7e:18:af:eb:1c:e1:3e:31:f6:fd:31:ba:
b9:9b:15:e1:96:e6:25:96:db:bf:73:8e:e6:a3:fd:
bd:9e:46:f6:9a:30:91:23:78:58:5d:30:92:11:92:
53:bb:74:2a:70:fd:3a:51:af:8f:b3:58:19:e5:07:
b5:d4:6b:13:52:43:d8:87:94:8e:b0:9e:27:91:ca:
4c:95:b0:04:01:1d:9f:fe:fe:19:40:d7:33:f8:9b:
47:c9:93:54:81:04:95:24:45:71:c2:1d:9a:bd:d5:
7d:7a:e5:96:97:d4:9b:06:37:05:70:a9:2f:5e:30:
4d:aa:2b:ea:4f:02:28:fd:33:a5:5a:b4:f4:70:0d:
fa:71:e8:97:aa:d3:5f:33:b5:d0:87:bc:a2:c8:47:
62:21:77:20:ee:60:e8:ac:9a:9f:d9:8c:32:fe:49:
16:91:51:c0:9f:0a:1f:78:56:4b:03:32:ea:6d:f9:
d8:da:be:b8:8f:b8:6b:71:e4:22:a6:cb:fc:19:b9:
e4:8e:fd:a6:ee:f7:c3:c4:d2:cb:95:6c:1b:05:aa:
3a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:ED:AC:D1:5E:C9:34:30:16:6A:86:08:2C:F7:F5:58:FD:0E:C3:78
X509v3 Authority Key Identifier:
keyid:DE:17:FE:B1:9A:EC:4D:F5:7E:B2:B5:78:AC:FB:9E:10:31:39:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3hf-sZrsTfV-srV4rPueEDE5byA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3hf-sZrsTfV-srV4rPueEDE5byA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/B9E472609C0411F19B0A551E6B11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
160.236.238.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:6a:7c:86:e0:52:3e:fe:54:81:a0:91:b3:46:4a:82:96:07:
d6:f1:30:e6:9e:1e:1e:b4:07:80:fa:62:63:44:ae:52:b9:4e:
1a:e9:4e:77:c2:9e:4f:04:26:e0:6e:50:00:3c:3a:dc:f9:dd:
2b:0d:84:b2:28:3a:f9:c6:10:bb:a2:54:95:fd:d2:07:37:ec:
8e:b5:4b:60:32:ee:83:59:52:bc:1a:45:4c:f5:3c:b3:5f:88:
0a:8a:85:bb:b9:34:2a:ff:6b:86:71:ff:15:27:61:4e:f0:ed:
69:c8:f4:75:8c:01:b6:c8:b2:a2:10:0b:16:ec:f8:80:b6:6f:
1f:a2:8e:41:e4:ae:35:c9:ff:e9:27:71:60:7e:fd:a5:5a:a7:
22:42:0b:50:77:65:05:d1:43:2d:f3:ed:de:48:15:b8:f3:e8:
1e:20:d5:3b:33:67:7b:aa:74:95:c2:ef:fb:15:d4:da:0d:ac:
d9:44:62:55:8c:92:1b:5d:b5:e6:f8:58:78:e8:de:61:27:3a:
d5:b6:e7:f2:32:2d:16:69:8d:c3:a1:73:4a:73:3c:c3:e2:2b:
52:5b:92:f3:08:ac:5a:ac:91:d7:6f:b4:00:6a:d1:99:7d:b9:
5c:3f:5a:0f:a7:42:b7:db:2c:c7:5f:63:8c:01:25:79:5e:65:
26:a1:8b:10
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:41:23 2026 by rpki-client