
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/BDE83950CFFD11F182A913972A66CEF9.roa
File: BDE83950CFFD11F182A913972A66CEF9.roa (raw, json)
Hash identifier: Vznvyba3uAECaYRIKCI61Fn0vWkY6h6lEUmOw1zuINs=
Subject key identifier: B1:2B:3E:43:08:06:00:88:CD:3E:BA:16:52:E3:A4:DF:03:7E:C7:51
Certificate issuer: /CN=A9194AE2/serialNumber=1BA6FF236DFFEE960969AA45D995D96FE4D298F1
Certificate serial: 01BA
Authority key identifier: 1B:A6:FF:23:6D:FF:EE:96:09:69:AA:45:D9:95:D9:6F:E4:D2:98:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6b_I23_7pYJaapF2ZXZb-TSmPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/BDE83950CFFD11F182A913972A66CEF9.roa
Signing time: Sat 24 Oct 2026 22:53:35 +0000
ROA not before: Sat 24 Oct 2026 22:53:35 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 24499
IP address blocks: 2402:7fe0::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.crl
rsync://rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6b_I23_7pYJaapF2ZXZb-TSmPE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 04:08:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442 (0x1ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194AE2, serialNumber=1BA6FF236DFFEE960969AA45D995D96FE4D298F1
Validity
Not Before: Oct 24 22:53:35 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6add36ee-6d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:22:bb:50:a2:a0:e2:59:4e:ea:4f:10:ec:ff:
2d:57:02:5d:5a:f0:b9:df:60:21:2d:50:21:38:4f:
8f:51:6f:da:c0:53:af:a6:e0:c5:9d:99:63:9b:5b:
06:bb:48:d1:cd:2b:da:f2:06:fd:4d:74:b7:bb:73:
c6:36:67:dc:c5:af:93:6a:dc:d6:c0:32:9d:6d:c2:
9b:c4:96:fe:ca:be:3f:71:35:2f:32:8e:c6:87:db:
98:8c:46:76:91:b9:fc:e9:37:6e:34:e4:4b:48:ed:
28:9a:54:80:1b:aa:c6:38:61:f4:85:50:cf:bb:c1:
7b:aa:6b:cc:1b:05:1b:21:cf:6d:56:d5:16:cf:8b:
6f:7e:e3:ff:27:73:78:7d:48:f1:cc:04:6a:bb:c9:
b9:78:49:22:4d:3e:1c:b1:e4:9b:6f:98:93:fc:43:
b9:2e:18:77:5e:0c:7b:fe:2b:84:40:09:ec:0d:f3:
71:55:5c:87:3f:e2:3c:92:a1:1a:09:b2:69:7c:7d:
80:2c:6d:82:d7:8d:49:79:40:49:50:0a:50:7c:89:
90:9a:85:f7:73:cd:97:96:45:36:69:ff:6b:54:a1:
70:5f:fd:f2:d4:ec:c2:fe:6b:9e:b2:24:87:45:38:
06:56:bf:0f:48:ef:ec:bf:a9:94:f5:0a:d8:34:d0:
2c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2B:3E:43:08:06:00:88:CD:3E:BA:16:52:E3:A4:DF:03:7E:C7:51
X509v3 Authority Key Identifier:
keyid:1B:A6:FF:23:6D:FF:EE:96:09:69:AA:45:D9:95:D9:6F:E4:D2:98:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6b_I23_7pYJaapF2ZXZb-TSmPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/BDE83950CFFD11F182A913972A66CEF9.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:7fe0::/36
Signature Algorithm: sha256WithRSAEncryption
af:95:5b:5d:b0:aa:34:bf:0b:d3:35:7f:28:42:2d:82:79:03:
df:26:70:70:7f:e8:08:25:be:0d:e7:fe:8c:4f:0d:fa:56:59:
bf:54:16:92:f4:e1:cc:9e:60:6b:20:cb:0a:db:46:3f:4f:da:
57:00:68:91:70:bc:47:a6:28:67:a4:68:7c:84:df:e5:20:2d:
a5:d2:c4:8f:69:d4:47:13:90:a5:9b:50:f6:cc:88:61:60:a8:
b5:0a:95:13:ff:6f:5e:be:87:93:5c:36:30:f1:62:f9:e9:31:
22:76:7f:06:2a:e4:d4:78:c4:82:fd:b0:d9:83:c2:d4:5f:75:
2f:2a:21:00:bc:8f:20:36:4d:57:1e:1b:cb:8f:33:d9:7b:58:
06:15:92:4b:ea:7c:b0:3b:72:0b:79:e4:5a:8e:f6:a5:62:55:
8f:77:7a:5b:16:40:9c:7a:b7:d6:97:8d:9d:c1:ae:4f:ea:c6:
b4:4e:3b:bc:ff:68:6d:22:ad:c0:7c:10:57:3b:82:48:55:25:
77:8a:19:44:b3:11:4d:f8:2b:81:91:73:21:92:cf:0c:c1:4d:
9a:44:2d:14:ce:44:92:5e:e9:66:bc:39:e1:39:9b:15:a7:4b:
4b:77:8e:0d:a9:2d:63:23:b5:e8:2a:48:da:c3:ad:76:d8:c5:
0d:d3:80:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:41:56 2026 by rpki-client