
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/B46F501C994D11EBB61C0C71C4F9AE02.roa
File: B46F501C994D11EBB61C0C71C4F9AE02.roa (raw, json)
Hash identifier: P9Uven0A31OGxoXzcKV6cpGLmheaduCJtgkM3S29AZs=
Subject key identifier: 34:C9:89:81:A3:B5:B6:47:EF:E6:FF:E4:AC:54:AF:F6:FE:CB:91:FA
Certificate issuer: /CN=A9126AFE/serialNumber=F7263875E8209FBA2547FB8E387D803F7580BED6
Certificate serial: 0738
Authority key identifier: F7:26:38:75:E8:20:9F:BA:25:47:FB:8E:38:7D:80:3F:75:80:BE:D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/B46F501C994D11EBB61C0C71C4F9AE02.roa
Signing time: Tue 06 Oct 2026 13:32:27 +0000
ROA not before: Tue 06 Oct 2026 13:32:27 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 10138
IP address blocks: 202.63.30.0/24 maxlen: 24
202.63.31.0/24 maxlen: 24
2401:d980:1000::/36 maxlen: 36
2401:d980:1100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.crl
rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 22:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1848 (0x738)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126AFE, serialNumber=F7263875E8209FBA2547FB8E387D803F7580BED6
Validity
Not Before: Oct 6 13:32:27 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6ac4f86b-0630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:99:b9:61:82:9b:d3:1c:94:3f:82:dc:91:b7:
d0:ec:4c:1b:86:b3:d0:34:80:a7:51:ee:d0:08:3b:
7b:ed:c2:ae:f4:f7:02:bc:56:da:3b:7f:1f:41:bc:
bc:36:dc:99:85:d1:e3:cd:59:e7:27:d2:c4:9d:81:
d6:53:7d:be:ca:31:4d:ff:c5:32:d0:b7:03:c8:4c:
94:e7:78:e0:9f:a3:c9:e8:d3:6f:e7:45:28:27:88:
ef:ef:1e:18:09:d6:40:83:dd:4c:85:83:1a:4f:1b:
19:18:98:5a:87:d9:26:c4:ff:78:3b:63:bd:f6:3a:
79:ee:53:f9:a1:8a:1f:f3:93:e2:be:76:5b:aa:c5:
55:0c:6c:d8:f3:fb:ff:d0:e5:02:b0:dc:20:2c:5e:
f6:ac:a8:c2:c7:a3:4b:4c:40:db:2a:1b:e0:07:54:
de:bf:eb:3d:58:60:dd:61:1e:4f:5c:b3:31:1f:7c:
17:d2:e4:ed:0d:06:f6:a3:07:9e:f3:ba:88:2a:06:
ef:7c:7d:23:23:d4:c7:3e:06:e9:dd:79:39:d5:6c:
24:9a:2e:61:22:12:05:8a:82:a4:d9:ab:8d:f8:f4:
ee:ef:20:6a:3e:a1:3c:47:b2:c3:70:c6:2a:4f:9a:
ae:06:85:3f:b3:bc:31:bc:e4:8f:a3:86:17:6f:64:
0f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C9:89:81:A3:B5:B6:47:EF:E6:FF:E4:AC:54:AF:F6:FE:CB:91:FA
X509v3 Authority Key Identifier:
keyid:F7:26:38:75:E8:20:9F:BA:25:47:FB:8E:38:7D:80:3F:75:80:BE:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/B46F501C994D11EBB61C0C71C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.63.30.0/23
IPv6:
2401:d980:1000::/36
Signature Algorithm: sha256WithRSAEncryption
34:ca:36:45:31:69:f2:9f:19:b6:6f:69:be:9a:5e:1f:82:a7:
b4:14:8e:b5:8c:16:ca:0a:29:90:0d:b5:45:2a:07:0a:56:aa:
89:cc:25:b5:49:ec:2f:bd:9b:c6:6f:bd:8e:a0:7e:fe:94:54:
cf:30:e2:9f:dc:a6:a4:4c:14:34:c2:3e:46:4b:2d:da:aa:0f:
a1:dc:94:f0:b0:a4:cd:a3:01:c2:7a:a8:9a:9d:a4:30:b1:1b:
f7:53:03:7c:da:33:81:0c:bf:0f:46:44:6f:f3:71:37:8a:47:
c9:6c:72:b5:17:dd:ba:5d:5c:a9:dc:76:f9:94:d6:a2:c8:06:
7c:40:13:57:b3:0f:d1:5d:ef:3c:53:65:ad:92:9c:cd:3d:12:
d1:88:5a:fe:13:a6:de:a5:73:c5:b0:3d:07:45:39:ae:8a:cd:
7e:69:fd:58:9b:c4:0e:9e:62:dd:48:aa:5a:ca:61:9b:e7:fc:
61:a6:5b:e9:4e:09:57:5f:98:b3:55:c6:7e:9f:ce:97:43:96:
23:bf:5c:ec:38:ae:17:9b:98:fb:2d:00:bb:e8:d4:d1:93:b4:
7f:46:3c:f9:81:30:00:10:f7:04:d0:d7:d5:29:49:4f:22:d5:
5d:5b:c3:ff:0a:c8:b1:09:34:ff:a7:23:10:14:9b:f0:91:83:
89:e3:0b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:53:06 2026 by rpki-client