
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/87FEDB446B9B11F1A0F959156D47A888.roa
File: 87FEDB446B9B11F1A0F959156D47A888.roa (raw, json)
Hash identifier: AYMk45b6CL8KReePrtbWEzoQNuf96ZiI29X04jKh5iY=
Subject key identifier: FD:6D:10:C0:37:BB:DE:31:94:A0:55:6C:7D:93:D2:FA:2F:CE:CA:D4
Certificate issuer: /CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312
Certificate serial: 018A
Authority key identifier: 97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/87FEDB446B9B11F1A0F959156D47A888.roa
Signing time: Thu 27 Aug 2026 04:56:02 +0000
ROA not before: Thu 27 Aug 2026 04:56:02 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 136461
IP address blocks: 2401:b6a0::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl
rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 04:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394 (0x18a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133BB0, serialNumber=9706BF1219354D018C15858CE97679FE43E6B312
Validity
Not Before: Aug 27 04:56:02 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a8fc362-8999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a2:66:fa:9c:4d:8c:d9:53:90:bc:42:a2:ec:
eb:c3:6c:24:bf:91:1c:c5:ec:f4:64:df:55:06:6f:
b4:f4:fa:e7:d0:c9:c1:15:5d:1b:45:b1:9e:02:aa:
8b:d6:68:71:3b:7b:e7:27:b2:44:c0:82:cf:6f:9f:
d2:88:08:30:75:2d:6d:ec:a5:b9:91:00:ea:a4:40:
b8:b7:4b:cc:c8:d9:e3:c2:e3:47:b6:aa:56:35:0c:
dd:c3:f1:a4:28:30:cb:83:c7:67:78:8a:eb:c8:7d:
11:6b:0a:70:28:2d:81:d5:b3:78:06:69:9e:48:d2:
c2:f3:3c:da:63:fb:99:98:50:da:41:61:62:d2:e5:
c3:66:49:1d:2e:56:a3:f6:d5:fc:64:be:25:e6:74:
b6:58:2f:1b:cd:17:1b:9f:b2:c8:e0:d0:b6:e8:0a:
85:9a:8f:f6:b8:49:8c:a4:d2:7d:f9:d9:bf:56:32:
b6:c5:54:f1:da:86:bf:01:29:27:70:3a:63:a7:5e:
1d:2a:c7:6c:74:b3:9f:f2:f1:6a:23:a6:4c:17:f8:
c8:cb:dc:29:c3:20:3a:a5:07:70:3e:29:30:c0:18:
18:3b:cf:a0:47:ec:56:f4:25:bc:73:be:8c:1b:66:
01:47:11:dd:51:e2:6e:cf:20:14:1d:a1:54:ae:06:
4e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6D:10:C0:37:BB:DE:31:94:A0:55:6C:7D:93:D2:FA:2F:CE:CA:D4
X509v3 Authority Key Identifier:
keyid:97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/87FEDB446B9B11F1A0F959156D47A888.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:b6a0::/32
Signature Algorithm: sha256WithRSAEncryption
c3:65:18:c3:28:fa:f0:23:68:1b:63:1a:1d:00:99:9c:c6:20:
cb:5d:ad:4a:8a:4e:92:5b:a6:7f:35:34:40:4d:b3:16:04:df:
bf:13:6b:8a:b8:24:5a:18:9c:51:bb:fb:1a:3b:07:f6:e8:0d:
7f:57:cb:4a:2f:84:66:d8:1d:d9:24:ec:58:1d:ec:3b:a2:67:
77:52:d6:f2:98:5f:5a:40:29:ba:2d:af:1f:4d:44:4d:45:cb:
8c:df:f3:13:df:cf:e0:37:74:c2:ed:65:08:92:4b:5a:83:5b:
7b:51:2a:46:a1:6c:c4:87:bc:05:00:66:a0:3b:3c:ea:95:33:
53:93:96:ff:b7:ab:05:82:68:8c:f8:f0:fe:20:7c:dd:ee:17:
b4:02:d5:f2:02:fb:f5:6b:a3:fd:23:22:81:04:00:de:ac:4f:
c9:e1:20:1f:b3:07:f0:4f:c1:52:f1:50:f1:8e:59:7e:9d:26:
31:e8:d2:46:92:5d:95:ac:a8:31:0f:57:97:f2:6f:78:85:0c:
03:5a:f8:23:a2:50:d9:58:27:ac:79:4c:0c:af:77:32:11:15:
e5:f7:33:6a:6a:06:89:0f:09:f4:91:b4:d7:82:13:27:89:29:
0b:cd:fe:1e:70:83:67:c9:c6:fa:1e:68:55:37:72:5e:e3:61:
c3:71:86:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:22:45 2026 by rpki-client