
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139D67/9BB78B5E8BC111F1A5204D886C11F970/84D40CCC8BC211F19A8217C56C11F970.roa
File: 84D40CCC8BC211F19A8217C56C11F970.roa (raw, json)
Hash identifier: kVTmugesJPhb77pfF6FXBrJrEBcGm4sTpsJbN+PuYF0=
Subject key identifier: C2:A3:6A:D0:78:31:D9:A4:E8:A8:FE:47:CE:A1:0D:BE:76:8E:35:1B
Certificate issuer: /CN=A9139D67/serialNumber=3FE8A25506F3220C82A968E2A7DE68FBEFBF77F5
Certificate serial: 02
Authority key identifier: 3F:E8:A2:55:06:F3:22:0C:82:A9:68:E2:A7:DE:68:FB:EF:BF:77:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-iiVQbzIgyCqWjip95o---_d_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139D67/9BB78B5E8BC111F1A5204D886C11F970/84D40CCC8BC211F19A8217C56C11F970.roa
Signing time: Thu 30 Jul 2026 02:58:19 +0000
ROA not before: Thu 30 Jul 2026 02:58:19 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 140322
IP address blocks: 2001:df7:4940::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139D67/9BB78B5E8BC111F1A5204D886C11F970/P-iiVQbzIgyCqWjip95o---_d_U.crl
rsync://rpki.apnic.net/member_repository/A9139D67/9BB78B5E8BC111F1A5204D886C11F970/P-iiVQbzIgyCqWjip95o---_d_U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-iiVQbzIgyCqWjip95o---_d_U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:52:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139D67, serialNumber=3FE8A25506F3220C82A968E2A7DE68FBEFBF77F5
Validity
Not Before: Jul 30 02:58:19 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a6abdcb-9458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:75:ee:49:85:6d:6a:47:7a:35:5d:64:dd:95:
2b:45:dc:5b:49:4f:b0:13:09:a1:08:5e:8d:59:20:
98:2b:89:65:9e:3d:2e:e0:62:b5:2b:67:26:bd:d8:
b0:c0:45:07:31:22:08:03:94:a4:61:7f:0d:b2:06:
08:46:0a:d2:9c:f5:3c:00:ef:71:37:35:e5:08:5a:
3a:6c:21:ab:2a:8b:1d:ee:9a:64:81:3a:d0:00:a1:
4b:f4:11:c9:08:99:f9:fd:79:1e:aa:92:5a:be:f7:
d4:16:d1:cd:06:31:3a:0a:7c:c5:39:8e:76:b1:27:
63:80:2a:80:1d:b9:1d:d4:de:1b:ad:fb:4d:01:ab:
7f:bf:30:1e:5e:f6:0c:ac:11:09:0f:2b:79:38:c8:
ab:cc:71:44:e5:5b:59:29:2d:a4:71:a9:05:ae:5d:
6c:0b:e3:86:79:64:16:64:e3:cd:1c:f1:73:9c:de:
6f:7a:0e:73:7f:4a:5f:a2:b4:63:4e:2e:d2:ed:d1:
04:b4:af:43:3f:ad:3d:90:8f:c3:ba:1f:51:81:ed:
f1:c5:12:fc:54:b3:da:bc:5b:bb:e3:ea:15:9d:c0:
eb:73:d5:23:b7:58:7c:0d:9f:1c:1c:b5:03:41:f7:
80:71:38:06:61:1e:91:60:9e:5a:83:77:b3:42:0e:
b1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A3:6A:D0:78:31:D9:A4:E8:A8:FE:47:CE:A1:0D:BE:76:8E:35:1B
X509v3 Authority Key Identifier:
keyid:3F:E8:A2:55:06:F3:22:0C:82:A9:68:E2:A7:DE:68:FB:EF:BF:77:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139D67/9BB78B5E8BC111F1A5204D886C11F970/P-iiVQbzIgyCqWjip95o---_d_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-iiVQbzIgyCqWjip95o---_d_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139D67/9BB78B5E8BC111F1A5204D886C11F970/84D40CCC8BC211F19A8217C56C11F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:4940::/48
Signature Algorithm: sha256WithRSAEncryption
82:14:2f:7c:6b:56:04:95:dd:0a:ca:24:03:64:c1:21:29:8c:
f8:59:2b:3b:2a:4e:66:c9:76:ac:e0:6e:7d:ba:2c:5d:10:6e:
32:2c:97:72:cc:ce:22:98:a4:80:89:a4:76:fb:be:66:fe:66:
8e:55:16:4a:02:d1:40:34:c6:78:54:66:93:0a:ef:fb:85:de:
cc:0d:cd:b9:01:c5:d2:21:7a:35:9c:d6:7e:b2:d1:8a:46:40:
54:43:f5:44:00:7e:6f:f8:ce:00:45:f0:79:18:2f:08:5f:e2:
b2:81:d7:32:ba:fb:db:df:09:1e:c5:1b:84:12:ab:16:38:86:
86:b0:b0:a0:07:9c:b2:4c:92:e9:bb:c7:18:40:de:cd:e8:b0:
f5:3c:8c:c3:a1:0c:be:41:20:1e:bd:29:69:cf:91:73:10:14:
25:29:d2:98:85:37:c6:ca:52:04:e7:95:33:1e:89:b6:34:9c:
c4:58:a4:51:e3:dd:fc:01:89:fe:d5:27:e4:dd:20:30:f1:a3:
01:e8:9b:ce:3a:a1:16:0c:ca:67:83:e4:87:19:3d:09:56:48:
e3:77:f5:1f:01:02:ce:6a:f2:7a:27:0e:48:d8:6e:95:df:a2:
4b:56:8e:ee:b0:92:8e:1a:e0:98:2a:6a:c1:8e:b6:0f:43:a2:
ea:1f:1b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:44:32 2026 by rpki-client