
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/37F43E66A27311EFA8731822C4F9AE02.roa
File: 37F43E66A27311EFA8731822C4F9AE02.roa (raw, json)
Hash identifier: uvL2gNEthqGV41KwTfLQpnni0nIuRN7IKI+1/XnuE+o=
Subject key identifier: C9:FB:53:E2:14:F9:40:A6:5D:A3:26:16:FC:7A:8F:1D:DA:C0:9B:9D
Certificate issuer: /CN=A9185D6E/serialNumber=9524EA9B823C20FA78923BE6667E14F6C4C3B47E
Certificate serial: 0623
Authority key identifier: 95:24:EA:9B:82:3C:20:FA:78:92:3B:E6:66:7E:14:F6:C4:C3:B4:7E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/37F43E66A27311EFA8731822C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:49:32 +0000
ROA not before: Thu 02 Oct 2025 23:24:35 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 16509
IP address blocks: 104.161.192.0/20 maxlen: 24
104.161.208.0/20 maxlen: 24
161.32.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl
rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 22:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1571 (0x623)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185D6E, serialNumber=9524EA9B823C20FA78923BE6667E14F6C4C3B47E
Validity
Not Before: Oct 2 23:24:35 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a46e1c-92d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9f:2d:fd:13:07:61:5d:d2:05:33:c6:ce:81:
36:00:e8:14:87:09:0b:3f:be:88:08:7c:50:bb:e8:
12:f5:81:24:05:98:0e:bb:bb:82:e0:be:a2:c7:85:
07:af:d4:df:8e:1b:df:f2:a6:4a:24:af:4c:b0:f5:
82:1b:4d:90:8e:ff:62:ef:37:1d:df:71:f4:85:79:
ea:ee:9a:22:ce:56:96:14:4f:f4:4f:8c:6c:7b:2c:
19:b0:83:f3:0d:56:40:00:5f:f2:af:01:84:f7:61:
4c:78:9e:a9:69:14:b4:4a:8f:5c:a9:2e:a0:6e:3c:
86:31:b7:09:14:15:5e:f9:d9:92:c3:35:e6:40:ea:
e6:33:e3:ee:4a:14:50:e1:9a:f4:8b:be:51:f5:0d:
40:11:97:97:03:cf:d3:8d:c0:c0:2a:01:ea:39:0f:
29:8a:36:4c:83:6e:ec:53:02:01:d4:d1:c0:78:0c:
35:04:d7:3c:01:b9:0b:8d:35:aa:17:9b:e6:9f:e0:
da:34:a5:8e:b7:5d:3a:e4:84:60:ee:0c:84:55:99:
6f:fc:ae:b5:62:14:41:90:48:be:a6:e7:a9:cb:b0:
0d:0e:62:eb:40:9b:d6:c7:a2:dc:20:72:e3:9a:d4:
1c:57:1c:bd:8e:30:46:42:7c:e7:ab:e9:15:15:3c:
c7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FB:53:E2:14:F9:40:A6:5D:A3:26:16:FC:7A:8F:1D:DA:C0:9B:9D
X509v3 Authority Key Identifier:
keyid:95:24:EA:9B:82:3C:20:FA:78:92:3B:E6:66:7E:14:F6:C4:C3:B4:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/37F43E66A27311EFA8731822C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
104.161.192.0/19
161.32.64.0/20
Signature Algorithm: sha256WithRSAEncryption
88:44:20:ed:cf:af:39:59:b9:11:db:74:67:16:e3:a2:73:69:
bc:87:a4:54:a6:11:a1:97:11:df:9a:8d:dc:32:7b:6b:af:fc:
35:33:80:d2:be:a8:71:07:d5:88:6e:19:98:d9:32:01:0f:85:
9c:46:36:20:0a:d3:79:34:95:89:f7:3e:a4:b4:62:e0:2c:a6:
3e:43:6f:f2:ae:97:ba:60:8f:fa:99:ba:cb:a3:f6:ee:dc:87:
9e:6a:94:7b:0e:e5:1a:a6:7f:74:31:41:c3:01:ef:c5:33:12:
75:42:15:77:1b:d9:76:b6:c6:ed:22:1c:0c:34:42:e7:f2:63:
2e:5f:5c:57:c9:76:f1:dd:86:3d:af:cd:5d:ac:46:94:15:1b:
2c:12:b5:df:f6:45:0c:ee:d0:f4:a7:33:d0:22:51:a7:18:0a:
19:b4:76:a5:2b:98:1d:c3:6e:32:33:06:49:6c:db:eb:80:cd:
e8:25:0d:c5:5b:42:d9:37:6d:fa:72:99:2b:68:63:77:db:bc:
84:ca:52:76:f7:25:5c:65:b5:30:5c:4b:24:76:78:b6:8a:b9:
f2:c8:0e:62:1a:4c:5a:7f:3d:0e:07:dc:63:38:eb:3f:e0:94:
e0:6d:2f:b5:60:67:ec:e7:e4:fe:db:b3:82:3d:00:92:37:b6:
9a:c8:89:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 22:19:34 2026 by rpki-client