
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/6DB991F222A311F195E5C95EB3833773.roa
File: 6DB991F222A311F195E5C95EB3833773.roa (raw, json)
Hash identifier: TsyRSdpcyqdq/9uv13YmYRvIQSMzrZWYt0RWLEVXB0g=
Subject key identifier: 1E:7B:42:8D:E2:65:22:81:2F:BF:A5:00:B3:34:03:07:69:8E:E6:31
Certificate issuer: /CN=A9187BAC/serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D
Certificate serial: F5
Authority key identifier: 7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/6DB991F222A311F195E5C95EB3833773.roa
Signing time: Wed 18 Mar 2026 08:21:14 +0000
ROA not before: Wed 18 Mar 2026 08:21:14 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 51031
IP address blocks: 161.248.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl
rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 05:35:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187BAC, serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D
Validity
Not Before: Mar 18 08:21:14 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69ba607a-4709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1b:48:6d:a5:01:3a:73:40:e3:8c:e1:c9:5a:
a1:50:27:2c:04:86:dd:78:ec:5d:8b:c2:35:65:3f:
7c:82:76:57:a5:f4:18:3d:85:ac:fe:a1:fb:7f:ff:
c4:3c:fd:82:99:78:b6:39:f6:d7:5a:b2:de:18:65:
75:a6:b0:8b:76:9e:a0:e2:35:bf:5b:13:50:ec:88:
10:05:5d:59:3f:fc:92:b6:fe:9f:a1:6d:49:40:4c:
24:04:65:87:4d:f7:63:95:57:09:9e:85:ff:5b:37:
8b:2e:98:36:d6:aa:76:53:95:b5:5a:ba:75:33:b2:
f2:51:71:73:c5:ea:64:9e:30:83:ed:dc:78:83:46:
58:a3:6f:01:77:8d:17:80:72:74:a2:0e:53:97:9d:
8f:00:48:3d:8a:ea:e7:13:10:05:0e:e7:bc:3b:da:
7e:32:68:99:c3:42:ae:a9:3c:d7:86:12:fb:56:cf:
31:b3:9b:e8:b0:4b:44:26:6f:94:f1:51:83:6f:8e:
7e:40:74:94:90:5e:cb:23:2c:40:d8:5a:06:e9:ea:
de:0d:c4:11:87:a8:3e:5a:70:bd:42:ab:78:ff:ae:
ac:38:58:a6:d1:f4:e2:32:a7:df:af:c4:06:fa:06:
75:67:02:bc:de:25:d4:38:1a:40:ad:1f:10:e1:d5:
e1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7B:42:8D:E2:65:22:81:2F:BF:A5:00:B3:34:03:07:69:8E:E6:31
X509v3 Authority Key Identifier:
keyid:7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/6DB991F222A311F195E5C95EB3833773.roa
sbgp-ipAddrBlock: critical
IPv4:
161.248.136.0/23
Signature Algorithm: sha256WithRSAEncryption
00:86:01:90:d6:70:26:19:5c:83:db:8e:0f:ac:0b:d2:df:94:
e2:05:56:f0:54:a1:dd:2f:a8:fc:f7:5a:f5:16:e1:b2:6f:60:
16:10:ab:26:0c:40:5f:c9:fe:7c:a3:0f:57:99:1a:b3:42:1b:
56:e5:40:bf:e1:73:e0:d7:3d:19:7d:04:c7:a8:d8:41:2d:55:
08:7f:c1:f9:7d:ca:a9:1e:ed:80:6e:f4:60:2e:5a:34:8c:7c:
63:ec:f0:74:21:30:c1:20:f6:8f:ab:c3:db:bd:b2:23:a5:8c:
4e:35:61:9b:59:72:a9:2c:68:c4:77:61:bd:52:b4:9a:12:62:
2d:92:b6:61:10:b8:f0:47:85:f2:c4:a9:66:82:dc:39:5d:ed:
cf:88:fd:ff:f3:f6:23:99:a2:8e:77:86:6a:1b:d9:f4:4c:75:
b2:3a:81:59:49:d6:66:84:b4:af:e6:ef:3b:76:cf:8d:9c:2b:
de:f9:94:80:2c:f9:00:af:c3:6f:78:63:94:58:b2:e2:e0:61:
f5:f3:d6:29:d6:77:2b:c7:84:29:81:ca:67:83:d9:ac:e6:6f:
40:65:b0:58:ab:4a:c2:ed:5b:52:29:50:42:0d:b4:1d:80:cc:
d8:6c:7c:95:36:93:09:14:32:a6:9f:69:3d:46:45:7d:69:0a:
e6:96:b8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 18:49:27 2026 by rpki-client