
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/2E91B188D2E011F1A52EACC50E66CEF9.roa
File: 2E91B188D2E011F1A52EACC50E66CEF9.roa (raw, json)
Hash identifier: A2Q8TkEotUvlDQq1bQxbDxLsZN7j/XiTy2FHWVuCe3c=
Subject key identifier: AC:D8:46:D8:AF:52:35:0F:11:28:70:59:F6:05:E6:19:8A:69:88:80
Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320
Certificate serial: 08F6
Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/2E91B188D2E011F1A52EACC50E66CEF9.roa
Signing time: Mon 02 Nov 2026 21:39:29 +0000
ROA not before: Mon 02 Nov 2026 21:39:29 +0000
ROA not after: Mon 31 Jan 2028 00:00:00 +0000
asID: 133033
IP address blocks: 2404:3881::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl
rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Nov 2026 21:39:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2294 (0x8f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175F18, serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320
Validity
Not Before: Nov 2 21:39:29 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=6ae90311-f8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:17:6f:26:42:60:73:ab:88:05:96:b0:38:74:
b3:41:04:85:a3:b7:97:03:45:8a:cd:67:ec:12:08:
15:95:07:b8:61:1d:99:fa:74:38:9e:39:ec:68:3f:
cc:8d:1f:a0:5c:7d:79:dc:12:b2:18:68:d5:8c:1d:
49:82:f8:55:06:85:1d:6c:51:7a:1d:90:f9:c1:6e:
4a:5d:fb:5a:53:4c:ed:09:29:4f:0f:15:6d:1d:ea:
01:11:7d:86:fa:11:28:ae:af:24:c4:83:87:af:aa:
ba:76:18:5d:37:ff:89:2f:ba:d2:29:29:81:92:51:
51:21:f5:f1:dc:0a:b9:a5:6d:d5:97:43:bf:0c:5b:
93:83:63:18:a3:ac:5f:a3:68:23:a9:d6:b0:6d:81:
45:4b:c0:53:95:7b:93:a7:f9:cf:6b:83:ba:7a:9d:
6e:c7:d1:d4:3d:6d:9b:02:33:b1:97:d1:1b:02:9f:
49:8a:02:76:f1:12:81:ec:08:8e:b5:22:bd:c3:ee:
ee:ec:c8:f6:8c:e0:07:d7:83:8f:79:66:02:7d:77:
1a:cd:47:c5:44:81:c0:02:d7:ed:47:6a:78:08:38:
d7:04:0a:aa:95:ae:08:60:9d:f8:24:e9:3e:c0:97:
0d:5a:6b:68:ef:f3:6a:02:48:c5:56:50:ee:c5:c3:
3a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D8:46:D8:AF:52:35:0F:11:28:70:59:F6:05:E6:19:8A:69:88:80
X509v3 Authority Key Identifier:
keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/2E91B188D2E011F1A52EACC50E66CEF9.roa
sbgp-ipAddrBlock: critical
IPv6:
2404:3881::/32
Signature Algorithm: sha256WithRSAEncryption
0e:94:26:14:01:f9:84:c6:5f:dd:1b:a6:3a:bf:65:af:9c:92:
55:76:16:b1:86:8b:1b:d0:7e:ea:56:73:4f:f7:a3:3d:4d:06:
2e:fc:cb:68:a8:a7:52:a5:d2:03:07:a9:06:99:e4:bb:94:2f:
51:a0:ef:2b:bc:a8:e3:74:ef:7d:fa:a5:7c:a7:b7:e8:6c:e7:
10:e3:7f:03:5b:ef:d8:57:51:f6:3d:28:26:db:c6:e9:50:06:
90:25:97:68:b8:53:f6:67:94:e1:b7:f5:ee:8e:cf:11:10:9d:
2f:66:61:74:3e:5b:cb:ac:b9:a5:bc:24:93:8e:b4:29:4c:67:
93:66:7d:97:47:8f:18:29:5c:30:c4:ee:89:6c:29:6e:bb:82:
07:11:31:90:11:88:a3:b2:df:9c:2c:51:d2:4e:bf:87:17:5c:
12:0b:b4:fa:e9:8d:00:b5:a7:31:37:e6:c2:e8:b9:cb:1a:ff:
d4:ec:f5:da:cd:1f:60:55:e3:05:f8:e4:1c:50:4b:6a:31:5d:
44:fc:76:33:87:8a:d8:3c:cc:bd:c0:eb:80:1c:73:18:b8:84:
71:9f:e4:be:16:2d:33:90:29:6c:9d:db:a3:7e:e3:35:16:b3:
5d:f1:5a:66:61:f7:33:ad:13:72:18:2b:aa:03:c5:43:2f:80:
cf:d4:0a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 22:25:25 2026 by rpki-client