
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/64B67878AE7711EA98E12731C4F9AE02.roa
File: 64B67878AE7711EA98E12731C4F9AE02.roa (raw, json)
Hash identifier: FSDVyAO7ku9OlFpBuuGsvn65dxJw/I6Sh44G8o9Hakw=
Subject key identifier: 83:CB:7E:07:07:5A:DC:F3:71:0C:27:5C:1C:47:6A:C3:78:9D:54:4D
Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Certificate serial: 0C66
Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/64B67878AE7711EA98E12731C4F9AE02.roa
Signing time: Tue 28 Jul 2026 19:41:25 +0000
ROA not before: Tue 28 Jul 2026 19:41:24 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 7262
IP address blocks: 116.66.218.0/24 maxlen: 24
116.66.219.0/24 maxlen: 24
2400:8800:1e82::/48 maxlen: 48
2400:8800:1e8f::/48 maxlen: 48
2400:8800:9e11::/48 maxlen: 48
2400:8800:9e12::/48 maxlen: 48
2400:8800:9e13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:41:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3174 (0xc66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Validity
Not Before: Jul 28 19:41:24 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a6905e4-fa5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:43:7f:8b:d9:c1:c0:0a:89:84:2d:13:31:7f:
17:4f:2e:12:98:8b:b2:63:34:6a:8b:ee:a6:78:c8:
03:3f:56:06:38:8d:fe:22:89:b1:a4:e9:e3:dc:c7:
2d:fa:02:4f:39:f0:e9:e5:7b:ae:49:ad:73:5a:eb:
b9:65:71:32:9a:3a:9f:c1:ea:ea:7b:64:7f:d3:ae:
1d:4b:20:50:9c:80:a3:e0:9c:d3:90:58:c6:4e:ca:
83:ef:a6:4f:b0:ed:08:55:33:63:0f:ba:a9:dd:fb:
13:31:18:17:bd:a9:b6:a7:55:2e:cb:71:8c:cc:a0:
b8:0c:3f:9b:46:40:de:82:fe:5d:3b:eb:fc:48:97:
8c:b5:60:39:db:ef:be:01:ed:29:c2:1e:b1:94:9e:
cf:73:26:f3:3a:94:d6:75:98:7b:ce:52:c0:31:af:
1a:e3:6e:91:40:52:11:1e:55:9a:9c:99:85:1e:44:
d3:47:b0:25:d6:68:00:1e:fa:1e:7b:d6:29:89:04:
97:d0:90:65:5c:e3:5b:c7:ef:fd:2b:17:f8:4e:58:
85:7a:39:a2:6f:d9:8b:05:6c:4e:b1:43:04:84:18:
ee:de:0d:a7:d1:ce:61:b4:3d:c7:9d:3e:ca:81:4a:
28:b1:78:07:55:0a:7f:49:b6:72:f1:7c:81:54:12:
6c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CB:7E:07:07:5A:DC:F3:71:0C:27:5C:1C:47:6A:C3:78:9D:54:4D
X509v3 Authority Key Identifier:
keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/64B67878AE7711EA98E12731C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
116.66.218.0/23
IPv6:
2400:8800:1e82::/48
2400:8800:1e8f::/48
2400:8800:9e11::-2400:8800:9e13:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a7:20:b6:bc:7f:e0:db:11:20:74:0d:57:af:c0:9c:0e:dd:5a:
22:c3:39:eb:d7:04:72:51:bf:03:4a:09:a2:4b:c4:d1:7f:44:
0f:25:73:4a:b8:76:1b:92:4a:1c:a9:45:36:48:fd:72:e7:aa:
47:cb:b4:52:7d:26:95:04:14:44:a9:e5:4a:b9:4b:75:9c:de:
db:dd:95:9b:6a:74:05:f2:f0:c0:f7:1e:01:7c:53:bd:87:09:
a4:a6:34:d6:19:a4:98:50:93:07:a4:5c:af:19:9a:1b:0c:06:
31:6a:7f:d4:e0:9d:bc:da:bb:a0:22:b2:27:f3:fc:b9:74:34:
fb:37:a2:82:28:ac:fe:35:fd:13:fe:14:19:1d:99:d1:14:d8:
d3:1b:3d:6e:0b:ad:46:bd:43:ba:38:e9:9c:aa:e3:1e:15:bb:
55:62:81:96:23:09:7d:98:42:87:0a:4c:51:df:29:31:f8:b5:
aa:ac:c5:ee:88:5c:05:6a:f6:86:18:08:60:fd:1f:76:ff:6d:
fe:fc:d0:a4:a8:83:85:ea:58:23:ce:53:1c:6c:a9:97:c5:c6:
b9:e1:f9:89:e9:1f:9c:39:26:56:d4:e6:4a:62:8e:83:d7:5b:
83:41:6f:60:c6:e7:00:36:ba:ee:98:dd:6b:31:a7:c7:32:3f:
e1:96:1f:01
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:19:19 2026 by rpki-client