
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/6A44AF9A1AC711F191E10968393D8C67.roa
File: 6A44AF9A1AC711F191E10968393D8C67.roa (raw, json)
Hash identifier: RB+erqG+XmR03HPaW893e5ncuWrZ91RUCBgWmmNGCLs=
Subject key identifier: 5E:EE:0C:68:22:1E:5B:9C:A2:CB:0E:3F:0F:E7:AD:66:65:4A:B5:C2
Certificate issuer: /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
Certificate serial: 35F5
Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/6A44AF9A1AC711F191E10968393D8C67.roa
Signing time: Fri 02 Oct 2026 15:41:22 +0000
ROA not before: Fri 02 Oct 2026 15:41:21 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 197537
IP address blocks: 101.0.17.0/24 maxlen: 24
101.0.18.0/24 maxlen: 24
101.0.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl
rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13813 (0x35f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
Validity
Not Before: Oct 2 15:41:21 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6abfd0a1-9f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d0:e9:3f:d9:85:f7:44:dc:e9:67:23:e8:57:
bc:78:4e:c2:70:36:9a:51:b8:a4:76:14:85:c7:0c:
4f:3d:ed:b5:f1:77:02:56:c7:5d:47:d4:3b:d7:43:
36:36:a4:a9:35:da:90:75:ac:92:1d:60:36:3b:7a:
4e:ed:cd:60:f4:44:7b:20:10:2c:8e:79:0d:bd:cb:
34:a8:e6:db:87:1b:d9:5a:16:0e:57:08:e4:14:4c:
17:f4:ed:64:38:c4:c5:e4:e1:a4:43:d8:3f:97:0b:
25:de:fb:91:28:e2:df:3b:0b:4f:b5:41:ec:c6:c3:
e5:ad:dc:06:0e:f2:bf:3c:f9:8b:17:7a:a7:47:30:
6d:bb:0c:dc:da:37:c8:af:f8:19:ce:4a:92:79:9e:
b9:6d:16:c2:6b:f8:39:8e:3f:e5:55:44:e9:59:b9:
7c:a2:bc:a8:0d:03:93:5a:35:80:69:fb:f8:02:38:
ef:aa:90:a8:b4:54:4f:7c:43:27:da:ec:db:7b:c8:
b7:84:4b:98:36:da:46:05:3b:be:ff:c7:f2:8d:66:
41:01:c8:ce:29:b1:39:76:74:f0:15:f8:d4:81:e7:
ec:33:d5:b5:65:28:63:79:20:63:b9:e0:89:fd:2b:
37:e6:6b:8b:ec:57:ea:5c:43:4e:78:33:d5:29:ef:
b5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:EE:0C:68:22:1E:5B:9C:A2:CB:0E:3F:0F:E7:AD:66:65:4A:B5:C2
X509v3 Authority Key Identifier:
keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/6A44AF9A1AC711F191E10968393D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
101.0.17.0-101.0.19.255
Signature Algorithm: sha256WithRSAEncryption
67:a5:20:26:84:59:c6:aa:3d:db:08:88:ef:ba:44:32:4d:b2:
89:28:81:3f:31:da:77:be:0a:ff:44:ec:95:d1:a6:88:88:d7:
3e:40:9c:61:b4:a7:cf:85:73:72:c3:05:fd:96:6b:d4:f1:d1:
ba:27:62:db:95:9e:19:2e:e8:a3:da:61:0b:5d:5c:6e:e8:9a:
39:8b:dd:aa:9f:22:f5:2b:fd:24:74:8d:1c:d1:30:db:87:6a:
77:ac:2b:59:0c:46:f5:7d:f9:82:b4:6b:5d:83:d6:84:5e:80:
a4:d5:5f:90:99:5e:c6:52:5e:13:4a:7b:83:54:52:8f:48:7f:
01:de:9a:39:22:e5:49:0c:82:e0:5d:5b:14:57:35:a0:db:02:
99:75:b4:0d:d4:88:21:e9:83:5f:d2:fb:da:b4:c4:2b:a0:8e:
0c:de:6c:d9:94:68:61:86:af:e8:a2:8e:3e:2e:64:cf:e8:a1:
6d:af:3d:a1:96:53:57:5f:7a:09:ba:a9:65:19:18:f2:19:05:
5c:ac:42:72:95:2a:70:40:c2:b3:18:f9:97:80:8f:fa:49:e7:
58:5f:7e:ef:c9:64:69:fc:d3:26:55:8d:27:ba:c3:5f:9a:2b:
8a:b1:6f:e8:f8:65:90:bd:5e:2a:f8:b8:97:9c:6b:c5:8a:b2:
ad:f4:7a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:37:38 2026 by rpki-client