
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/AC262AE896E011F1AACCC6D55B11F970.roa
File: AC262AE896E011F1AACCC6D55B11F970.roa (raw, json)
Hash identifier: VFreQWvwqoUHhufjMC+/zSTILelzYSaJo4dghHUSpM4=
Subject key identifier: A0:B5:B9:11:FA:B4:A1:EA:08:38:C3:02:44:EB:7A:9A:E7:BE:D8:39
Certificate issuer: /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565
Certificate serial: 0AF9
Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/AC262AE896E011F1AACCC6D55B11F970.roa
Signing time: Thu 13 Aug 2026 06:34:05 +0000
ROA not before: Thu 13 Aug 2026 06:34:05 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 134995
IP address blocks: 2402:6640::/32 maxlen: 32
2402:6640:5::/48 maxlen: 48
2402:6640:10::/48 maxlen: 48
2402:6640:11::/48 maxlen: 48
2402:6640:17::/48 maxlen: 48
2402:6640:18::/48 maxlen: 48
2402:6640:19::/48 maxlen: 48
2402:6640:20::/48 maxlen: 48
2402:6640:21::/48 maxlen: 48
2402:6640:22::/48 maxlen: 48
2402:6640:23::/48 maxlen: 48
2402:6640:24::/48 maxlen: 48
2402:6640:25::/48 maxlen: 48
2402:6640:26::/48 maxlen: 48
2402:6640:30::/48 maxlen: 48
2402:6640:200::/48 maxlen: 48
2402:6640:fce::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl
rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 17:38:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2809 (0xaf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167F0C, serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565
Validity
Not Before: Aug 13 06:34:05 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6a7d655d-3343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7c:a9:45:99:8c:4d:39:aa:66:eb:ae:c6:c6:
fc:72:2e:25:f3:c6:e4:97:71:2d:e3:80:3c:37:ac:
62:ff:40:fc:f4:cb:db:a5:33:51:24:eb:cf:27:6c:
88:f3:f5:64:5a:30:16:46:11:ff:2d:a8:98:eb:4c:
66:e1:6a:c1:37:cc:b7:81:39:56:95:52:42:eb:41:
f6:92:62:7c:18:ca:f1:c7:8e:ff:76:3d:c6:98:19:
4a:b7:7e:c2:d5:57:89:42:08:49:6f:2b:15:2d:bb:
20:32:7e:20:f3:0f:a6:89:93:83:b5:83:e9:6e:21:
41:a2:7e:0c:ca:40:23:81:f7:30:06:96:a0:f4:0b:
31:7d:e8:07:f9:fc:29:b1:05:54:85:00:1c:45:53:
91:76:53:3e:56:8c:19:1a:e8:47:1e:bc:a3:52:fa:
8f:7c:22:d4:3d:31:cf:2b:2f:5a:08:bd:04:03:e2:
aa:eb:f3:9a:07:e7:0b:0e:66:f4:3f:38:76:11:05:
fc:00:49:36:1d:07:c3:3d:3c:37:a7:bf:3f:7e:3e:
c3:15:8f:74:7a:04:f9:a1:dc:c3:ec:b3:21:53:8a:
e1:43:3d:95:55:9f:0c:9d:9f:51:4b:8f:b2:39:b7:
61:7d:9e:c8:ee:aa:d7:c6:a5:44:1b:db:30:4c:59:
13:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B5:B9:11:FA:B4:A1:EA:08:38:C3:02:44:EB:7A:9A:E7:BE:D8:39
X509v3 Authority Key Identifier:
keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/AC262AE896E011F1AACCC6D55B11F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:6640::/32
Signature Algorithm: sha256WithRSAEncryption
8b:54:4d:f9:7f:f2:48:db:f5:a2:28:cd:6d:06:0c:3d:69:b4:
49:57:e4:aa:52:32:75:02:37:c8:9b:6f:e8:04:5a:b6:63:63:
6d:88:54:fc:6d:43:70:74:3c:e5:fb:62:fa:59:a5:88:98:d3:
26:78:c3:bd:27:3c:bd:87:c0:d6:d9:0d:69:1a:42:16:4e:b0:
49:df:92:d1:b4:30:a2:ec:20:1d:b1:46:c8:28:e9:3a:d4:2c:
f5:dc:36:46:63:6b:97:da:59:ab:83:c6:ef:a9:1f:2b:cf:7a:
ef:5f:8d:71:83:ec:5f:be:a6:b8:11:4c:54:0d:6c:09:21:ca:
01:05:d6:45:96:11:55:a4:9c:06:9c:04:95:78:c1:15:fc:b0:
f6:1c:fa:ff:78:8f:5b:00:73:84:5e:27:f9:96:f2:2f:c2:97:
b4:40:f5:9f:aa:b7:a1:f9:a7:2b:cd:49:15:f1:d6:1a:0f:de:
59:38:fe:1e:93:ed:8d:4a:c5:07:85:56:3f:9a:74:a0:52:b9:
d6:61:ac:8d:82:70:06:1d:b0:c8:a8:bc:3c:c8:a2:cd:33:39:
be:fa:21:3f:44:85:35:3d:98:eb:f3:a5:a4:27:cd:73:7c:fd:
c7:92:21:e7:d1:f5:17:d6:d1:b6:1c:ac:f5:d0:49:d5:28:17:
56:bb:72:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:37:05 2026 by rpki-client