
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/87FEDB446B9B11F1A0F959156D47A888.roa
File: 87FEDB446B9B11F1A0F959156D47A888.roa (raw, json)
Hash identifier: puaYmraHKaDMLjz2a7HMedJgxaZ/2MzUtX95c64CBvw=
Subject key identifier: 32:14:34:ED:75:C9:F4:C4:F6:8F:1B:7A:65:D1:AD:91:23:B7:CB:2E
Certificate issuer: /CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312
Certificate serial: 0163
Authority key identifier: 97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/87FEDB446B9B11F1A0F959156D47A888.roa
Signing time: Fri 19 Jun 2026 04:58:37 +0000
ROA not before: Fri 19 Jun 2026 04:58:37 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 136461
IP address blocks: 2401:b6a0::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl
rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 05:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133BB0, serialNumber=9706BF1219354D018C15858CE97679FE43E6B312
Validity
Not Before: Jun 19 04:58:37 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a34cc7d-a937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:64:d8:e7:97:38:b4:13:bf:2c:ce:26:38:67:
90:b2:9b:51:79:8a:7b:61:e4:91:60:78:e2:8f:8d:
0d:7e:4f:e2:13:1c:38:7b:6c:f0:a6:6d:47:5a:2a:
e5:c2:d3:34:d8:5c:1a:66:68:ff:7d:62:57:8b:29:
cb:56:e7:7d:04:70:0a:9e:5e:2e:9b:0c:93:6c:44:
0c:3b:0b:4b:a1:38:d9:2e:0b:95:24:b1:6c:e9:d2:
be:c9:ca:e6:09:f1:3a:84:28:cb:cc:89:5b:09:71:
42:a0:25:de:be:b1:bd:29:ee:29:b1:2b:b9:47:42:
b0:3a:aa:51:b1:24:45:fe:4c:f5:0f:f1:15:9c:6d:
05:7d:a6:98:73:d5:81:67:ec:13:68:e3:80:da:5f:
3f:df:53:49:22:5d:1e:f4:c7:5a:68:15:f3:1e:69:
a2:d0:12:57:2d:69:6f:af:94:db:36:f4:ec:48:05:
91:91:aa:a6:af:1a:63:70:2c:8f:a1:09:50:a4:2c:
52:c0:df:f7:ca:3b:f3:85:e9:c9:78:38:4a:3f:0e:
df:b3:d5:6a:8a:3e:28:e6:dd:ca:1a:01:f6:b8:19:
f8:94:3b:73:45:87:c8:80:47:07:ae:90:26:45:43:
e4:a7:36:56:79:f0:2c:9a:dd:2c:11:00:1e:e6:fd:
ae:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:14:34:ED:75:C9:F4:C4:F6:8F:1B:7A:65:D1:AD:91:23:B7:CB:2E
X509v3 Authority Key Identifier:
keyid:97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/87FEDB446B9B11F1A0F959156D47A888.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:b6a0::/32
Signature Algorithm: sha256WithRSAEncryption
87:00:a9:b1:da:e7:e4:8b:b8:61:18:86:76:9c:55:c6:61:a1:
e6:c9:d9:ae:46:27:47:a2:9f:59:fa:21:a7:8c:42:be:34:9c:
e3:18:08:bf:ef:37:9b:04:94:f2:6e:2b:ed:63:42:8b:6f:cf:
0f:5e:b1:a0:4e:52:82:99:e1:1a:4c:35:33:62:3f:8e:f4:04:
7f:cc:3b:36:ed:ec:c6:79:8c:d3:e6:c7:f9:0a:75:5e:55:11:
1c:bf:48:5c:4c:41:60:2f:af:94:4d:d1:fd:20:f1:a8:5d:8c:
aa:73:87:1d:2c:fe:40:8e:57:c7:ff:b9:82:29:4e:66:69:2b:
c3:0d:58:df:08:b9:92:f6:50:42:a6:85:99:f6:2d:4b:a1:8f:
66:fa:9b:68:e5:25:72:aa:04:73:49:f9:dc:7f:69:08:ab:a2:
b2:97:c7:83:46:fe:41:55:43:bb:a6:23:a3:0d:0e:25:85:1f:
1f:0c:22:30:a8:64:1d:92:03:af:73:5d:92:c8:d8:84:c2:4c:
da:d7:50:9d:d4:18:1f:3d:a1:7a:b1:78:a0:fa:04:b9:6d:34:
82:ac:68:a8:56:67:41:85:5c:0b:68:bb:30:08:3b:8c:53:52:
90:79:b2:54:7d:a0:4c:41:98:13:5b:73:b4:70:fa:01:be:7b:
6d:39:74:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:17:58 2026 by rpki-client