
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/DF8D07E8FB7E11EFA25DF775C4F9AE02.roa
File: DF8D07E8FB7E11EFA25DF775C4F9AE02.roa (raw, json)
Hash identifier: ZsEUMIVjzFVUMpYghqJxPHIHlWGqgjtA3XVgf6lM9TM=
Subject key identifier: E2:AD:FB:40:62:5B:04:40:44:0C:39:96:5E:EF:0A:C5:3A:88:92:89
Certificate issuer: /CN=A9166C39/serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C
Certificate serial: 09D1
Authority key identifier: 07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/DF8D07E8FB7E11EFA25DF775C4F9AE02.roa
Signing time: Tue 08 Sep 2026 20:40:56 +0000
ROA not before: Tue 08 Sep 2026 20:40:56 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 400105
IP address blocks: 2001:df4:d80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl
rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 19:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2513 (0x9d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166C39, serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C
Validity
Not Before: Sep 8 20:40:56 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6aa072d8-8018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:81:2c:7f:a2:99:8f:0a:0f:aa:19:aa:e3:50:
0d:91:d6:cf:81:9b:b9:54:0e:46:ba:a7:4f:26:24:
81:92:c4:3d:51:5d:34:61:c1:fc:b9:37:f9:e1:e0:
c1:98:c7:4e:f4:8c:95:5a:26:f1:62:dd:b2:20:01:
c2:3c:43:2b:24:55:c3:5b:46:a2:f0:d5:b9:71:c8:
ce:c8:9b:a8:dc:f0:74:e5:da:e8:d5:bf:4a:40:26:
68:45:9c:a8:c9:e4:7c:fc:87:7e:bd:68:ce:df:0d:
dd:d3:a0:22:59:7f:bd:b6:34:f9:bf:f5:09:80:c0:
08:39:19:e9:e5:f0:2f:63:ca:1e:17:5a:12:a0:6d:
80:49:79:9a:a1:c3:c8:c9:ef:0a:23:7f:ba:d7:fe:
81:31:f4:b2:3f:45:82:38:a9:ea:5f:0b:d2:b7:9d:
06:d0:12:14:9e:ef:5a:94:9c:0f:9d:3e:f9:d6:b9:
c5:48:2e:5e:1d:a3:ed:b0:34:50:4a:8a:68:1c:cd:
29:3e:93:04:b9:dc:97:c7:e3:b1:aa:88:e4:0e:d5:
af:73:c4:86:25:92:f3:18:3f:f2:24:dd:c4:c3:aa:
36:0a:f4:2c:9b:74:51:b6:30:93:55:d5:41:0a:12:
36:83:82:24:2e:6c:18:c5:3c:03:2b:11:94:b3:c1:
10:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AD:FB:40:62:5B:04:40:44:0C:39:96:5E:EF:0A:C5:3A:88:92:89
X509v3 Authority Key Identifier:
keyid:07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/DF8D07E8FB7E11EFA25DF775C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:d80::/48
Signature Algorithm: sha256WithRSAEncryption
00:83:77:e1:d0:f9:a9:e7:40:ff:65:3d:c7:58:9f:55:48:df:
a8:35:ec:38:ba:c2:12:08:63:b3:25:3d:3d:15:8e:7c:67:f7:
58:b1:92:2e:19:d6:b2:f4:c7:e9:44:91:fa:14:66:ef:0a:b1:
1d:a9:29:4f:35:8b:d4:b9:d2:b8:7f:26:5d:27:b8:6d:f5:fc:
6a:c6:bf:3c:4e:f5:50:91:f4:a1:bd:f2:66:23:32:63:83:88:
dc:b2:42:66:89:54:97:69:06:86:9c:41:c4:e9:a3:8f:7e:78:
87:7e:38:30:08:a7:fe:7d:e4:e9:7a:43:e8:26:ba:00:99:f4:
e8:d0:44:e9:d0:f6:6f:d5:a9:75:74:be:9a:77:d4:bd:f5:09:
4d:9b:00:45:73:7d:65:42:9e:d4:33:f1:28:ea:ef:82:f2:35:
be:5c:55:99:e6:91:d0:e0:c7:0c:d8:1d:9a:e9:4d:c9:71:54:
e8:65:3b:51:fd:cd:6e:60:74:82:91:ff:10:a3:39:f0:b1:ef:
64:9a:53:45:8f:e9:f1:e9:13:88:09:9c:c6:40:67:36:5f:41:
bf:e7:bb:75:45:b8:75:1b:de:e6:7b:bc:cd:e3:ff:3d:17:8e:
6f:98:5c:d8:c4:35:99:22:e3:e5:02:e9:08:fe:04:2e:e9:14:
70:f1:d7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:08:11 2026 by rpki-client