
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/AB96EF3852CD11ECAB209C5FC4F9AE02.roa
File: AB96EF3852CD11ECAB209C5FC4F9AE02.roa (raw, json)
Hash identifier: 85+2M9Vs4x314HZvI0caNzpi2LtY+oROBZP1Q2xf7GM=
Subject key identifier: 21:BE:16:56:D6:8B:79:32:1C:28:B6:AB:03:05:5E:35:9C:ED:7A:E9
Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Certificate serial: 0C96
Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/AB96EF3852CD11ECAB209C5FC4F9AE02.roa
Signing time: Thu 16 Jul 2026 22:22:56 +0000
ROA not before: Thu 16 Jul 2026 22:22:56 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 132591
IP address blocks: 240d:c010:50::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:56:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3222 (0xc96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D67, serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Validity
Not Before: Jul 16 22:22:56 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a5959c0-0e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a5:74:f8:d9:bc:6b:a4:aa:5e:44:35:6e:94:
09:a0:71:b4:08:99:dc:cd:5d:e6:51:5a:af:f6:6a:
34:7d:56:89:56:7b:f3:b8:8d:7f:3f:26:da:67:99:
38:b5:6a:eb:ea:97:09:2e:df:95:ab:b4:67:af:f4:
bc:8b:d3:c6:5a:6b:25:26:98:ed:76:0e:9f:a4:3c:
f7:83:0f:18:8f:3e:0f:41:aa:ac:15:0d:1e:c3:10:
95:7c:4a:0d:79:46:60:b6:65:e8:50:e5:eb:c3:d9:
d1:99:4e:05:2f:05:fa:95:a5:86:e0:a2:0a:8c:93:
00:59:f6:e3:dd:54:6d:13:97:5b:07:44:bc:41:2e:
4d:49:ce:f2:2b:b4:da:2f:34:51:2a:94:99:0e:ad:
8b:3f:29:c9:e4:be:14:ec:e3:f2:d8:7b:eb:27:b9:
e6:6f:cc:d9:4f:6b:59:04:ee:78:68:da:60:08:64:
cd:ac:84:5f:76:69:1c:24:00:85:ba:a0:93:9c:10:
ad:97:29:49:92:13:f6:0e:f7:6f:88:33:87:f3:62:
a5:5d:9f:3c:79:b9:29:db:54:96:a8:1d:2e:2a:0a:
5d:ce:7f:4c:84:af:93:59:6d:6a:2b:d5:54:5e:a2:
09:96:b8:49:c5:f4:a6:9c:a2:2e:3c:a8:5c:bd:dd:
bd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BE:16:56:D6:8B:79:32:1C:28:B6:AB:03:05:5E:35:9C:ED:7A:E9
X509v3 Authority Key Identifier:
keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/AB96EF3852CD11ECAB209C5FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
240d:c010:50::/48
Signature Algorithm: sha256WithRSAEncryption
0b:dd:b8:f5:cb:56:da:8d:3c:e0:ea:15:04:e3:b4:52:8d:24:
0f:9e:0a:06:16:ea:66:09:e9:38:c4:c5:aa:b7:7e:82:3d:9b:
a1:b6:c9:a2:78:0e:a4:b2:25:50:f6:f6:c7:d6:10:3b:18:0f:
49:fa:5a:5e:12:ad:d9:c4:fc:98:de:c4:09:18:56:33:95:a7:
8d:d4:74:9e:37:6e:d0:20:32:ba:92:3c:55:e4:2a:05:3a:8d:
24:75:a0:aa:f8:25:58:1b:36:87:a2:d4:40:63:b3:fd:8c:af:
24:73:57:5e:22:48:f2:75:10:17:4b:d9:99:2a:4b:0c:da:99:
88:28:12:c7:f2:96:7e:75:d1:b8:ea:b4:02:df:12:9f:99:a3:
bd:22:c0:ec:a3:b7:69:b3:cc:30:27:75:8b:d3:6e:37:b2:c8:
9a:ca:44:b7:64:78:51:45:d6:c6:02:87:aa:c9:da:98:0b:4f:
47:8d:40:eb:92:87:a5:93:84:49:c2:98:9c:db:e1:e0:52:9d:
8f:3e:8f:72:85:71:4c:d9:30:80:d4:d7:e6:67:62:9d:d4:9a:
e4:29:7f:df:bb:b4:4e:da:45:c8:01:2c:38:28:39:11:1a:fa:
84:31:73:3b:e7:4e:63:88:78:e6:5e:0e:ac:54:c7:bc:d2:5f:
04:a3:63:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:13:55 2026 by rpki-client