
$ rpki-client -vvf rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/ACE7F9985DF711F084BC8A50C4F9AE02.roa
File: ACE7F9985DF711F084BC8A50C4F9AE02.roa (raw, json)
Hash identifier: BcNgGbp9R5muzvSnB/YVBhMpcVEZktWqP0cVBxkO3vw=
Subject key identifier: A9:2E:A9:31:AF:69:D3:A5:BF:6D:F3:1F:2E:2E:AC:F6:51:11:B4:AA
Certificate issuer: /CN=A918ABAC/serialNumber=B4038AB64039F3145622A20FF70ED7BE1D4E7F91
Certificate serial: CA
Authority key identifier: B4:03:8A:B6:40:39:F3:14:56:22:A2:0F:F7:0E:D7:BE:1D:4E:7F:91
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/ACE7F9985DF711F084BC8A50C4F9AE02.roa
Signing time: Wed 27 May 2026 07:40:07 +0000
ROA not before: Wed 27 May 2026 07:40:07 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 13335
IP address blocks: 165.101.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl
rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 07:52:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202 (0xca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918ABAC, serialNumber=B4038AB64039F3145622A20FF70ED7BE1D4E7F91
Validity
Not Before: May 27 07:40:07 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a169fd7-4e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:e2:15:5e:ca:05:37:30:77:58:96:60:a9:
3a:ce:10:5d:63:5a:c8:05:37:85:16:27:55:25:40:
64:e9:49:78:d0:41:0f:a0:14:d5:fd:f9:f1:d8:90:
48:87:f3:14:c4:fd:66:fb:70:86:48:20:b8:cc:8c:
1f:dc:19:7b:79:e8:5c:46:76:61:83:c3:02:10:dd:
b9:aa:7b:70:00:50:d7:a1:67:dd:71:e8:e3:fc:73:
e8:1f:58:54:b1:6e:99:5d:22:ee:8d:61:6e:d0:a9:
94:54:60:2c:25:cf:72:73:68:a7:41:de:c7:26:bc:
49:f0:0a:68:c7:7e:da:0b:7b:bf:5f:32:45:a7:cf:
94:e6:63:1f:23:e9:09:eb:82:c7:2e:ee:a7:fd:a7:
93:c7:36:03:2b:ed:e7:41:5b:01:a8:be:c0:6d:ef:
bb:39:b6:99:b4:25:43:1c:7e:fb:5a:70:d4:7a:09:
e2:0e:e1:d7:8f:92:04:cc:cd:69:ee:dc:9a:89:70:
b9:b6:d1:58:2f:87:dd:33:ce:c9:89:49:64:87:a9:
e0:03:ed:e4:85:6a:54:38:2d:0c:5b:37:7a:9a:90:
c3:df:da:7b:3f:b6:85:30:c6:32:2e:31:ab:b8:ee:
32:30:d7:1d:b4:27:7f:44:3d:d2:71:81:9a:cf:e3:
d4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2E:A9:31:AF:69:D3:A5:BF:6D:F3:1F:2E:2E:AC:F6:51:11:B4:AA
X509v3 Authority Key Identifier:
keyid:B4:03:8A:B6:40:39:F3:14:56:22:A2:0F:F7:0E:D7:BE:1D:4E:7F:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/ACE7F9985DF711F084BC8A50C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.60.0/23
Signature Algorithm: sha256WithRSAEncryption
73:31:fd:5a:cb:7a:13:19:28:c8:da:29:d6:81:52:18:df:21:
3d:f9:a6:e8:a3:0e:9b:cd:fa:fe:f2:13:bd:c9:0b:34:e7:1c:
eb:24:a6:c5:f7:30:6b:9a:88:66:7e:12:5e:88:40:8b:f1:05:
2d:48:0f:e3:3d:e5:11:5d:d2:82:fb:c4:9e:d0:e1:a5:27:b9:
89:77:02:de:e1:c0:fe:2f:bb:b6:0d:e3:db:3f:95:98:23:ac:
a5:2e:a7:59:15:fc:8b:d2:69:47:2e:03:5d:92:f7:20:b2:e9:
6d:c3:a9:0e:cd:a7:64:40:cf:b7:21:a6:2e:92:f8:1a:7c:10:
31:92:36:32:92:ae:5b:1e:41:83:80:31:a3:21:49:a4:4b:02:
46:54:ba:c7:4d:01:31:ac:90:f9:83:ca:9e:f9:f2:16:e1:64:
21:2e:b4:c1:88:8c:72:a2:91:66:57:55:d1:ec:42:5b:75:c4:
23:7b:2d:cd:fe:5b:c0:89:1a:3e:d7:f7:f9:2f:ff:51:9d:ce:
ac:d3:75:b5:30:8f:e6:1f:5c:a0:fa:9d:b1:a8:24:0e:ed:ab:
65:ed:e8:1e:be:54:26:59:c4:af:bc:64:72:53:e3:63:11:2a:
74:fd:66:ea:68:ec:33:20:42:6c:53:69:84:4b:00:3c:5f:d7:
24:4d:4e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:04:48 2026 by rpki-client