
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/ACA405589E7011F083978F1AC4F9AE02.roa
File: ACA405589E7011F083978F1AC4F9AE02.roa (raw, json)
Hash identifier: 0tN4Gj5sk7CFRdHhGb+Lg4sMucT1D275bB7PbKONwhA=
Subject key identifier: 48:41:E6:BD:BA:1D:40:BE:4D:FE:85:A1:30:A9:53:A8:09:C8:44:78
Certificate issuer: /CN=A91678AA/serialNumber=9850EAFFED3DA2845D51F095AC11245088D5623F
Certificate serial: C4
Authority key identifier: 98:50:EA:FF:ED:3D:A2:84:5D:51:F0:95:AC:11:24:50:88:D5:62:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/ACA405589E7011F083978F1AC4F9AE02.roa
Signing time: Wed 23 Sep 2026 06:57:16 +0000
ROA not before: Wed 23 Sep 2026 06:57:16 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 136914
IP address blocks: 202.133.64.0/23 maxlen: 24
2402:26a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.crl
rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:57:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91678AA, serialNumber=9850EAFFED3DA2845D51F095AC11245088D5623F
Validity
Not Before: Sep 23 06:57:16 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ab3784c-946d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6e:3b:ed:03:59:bf:62:46:f0:8c:f5:22:bd:
6b:27:8d:b7:e6:dc:3f:7f:a7:72:9f:4b:ce:94:db:
6a:e2:cf:58:3d:73:42:6f:f7:a9:3f:95:c2:3f:35:
ca:8f:3c:9d:0c:fc:ad:29:f8:f4:7e:e0:92:13:0c:
aa:56:a3:7b:d0:2f:b3:e4:c7:6e:26:fd:71:cd:06:
98:24:7b:09:26:2d:e6:08:71:78:9d:1b:57:e0:99:
40:0a:a8:b8:0b:08:de:79:08:f4:3d:f1:51:b0:59:
3b:1f:15:5b:8d:7f:45:2b:01:4e:02:e4:db:2c:fc:
fc:93:15:f3:46:62:67:70:05:c5:61:77:74:c4:d5:
3c:1e:1d:de:ea:94:6f:87:d2:f3:8a:0e:db:7b:cf:
6d:b5:a6:3b:71:03:3a:de:02:fd:fc:8b:14:01:c1:
52:98:3a:8d:a9:30:d1:40:78:2e:21:1c:81:26:e0:
c6:51:33:47:86:80:a6:10:25:ba:4f:03:2d:b8:b4:
fd:34:06:76:6f:27:91:21:4f:f1:94:54:3a:7a:3f:
33:bb:55:a2:60:04:b5:c8:a0:7c:99:d5:fe:fd:f2:
b9:6d:42:98:99:05:95:0f:fd:72:a3:1c:25:cc:39:
56:81:b8:3f:5f:50:4f:c4:d8:6b:ab:f1:44:24:ce:
09:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:41:E6:BD:BA:1D:40:BE:4D:FE:85:A1:30:A9:53:A8:09:C8:44:78
X509v3 Authority Key Identifier:
keyid:98:50:EA:FF:ED:3D:A2:84:5D:51:F0:95:AC:11:24:50:88:D5:62:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/ACA405589E7011F083978F1AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.133.64.0/23
IPv6:
2402:26a0::/32
Signature Algorithm: sha256WithRSAEncryption
a6:89:37:ef:64:70:d3:61:cc:81:4d:b2:52:55:23:d0:e4:79:
6c:4a:1f:d9:5e:c2:21:4a:60:c7:23:80:66:09:94:76:4c:d6:
c7:02:28:3b:c4:b8:cf:ad:0a:04:29:e0:68:54:00:7d:99:04:
bd:58:a3:c4:c4:d2:57:1c:b3:67:aa:46:ab:21:22:ae:af:7a:
16:40:ca:42:0c:e4:8d:da:84:aa:f1:25:24:60:fd:0e:ce:ba:
eb:18:50:71:61:5f:b8:54:66:f8:24:08:a5:c8:12:5d:b1:89:
98:ec:23:ec:76:20:72:a3:6b:e6:8a:d5:76:16:ee:8c:94:bc:
26:87:fb:b8:9e:36:3c:aa:d4:ac:45:69:51:9b:12:2f:fb:68:
31:0d:f1:35:97:9b:5b:38:c4:ba:d5:55:3a:cd:e4:f2:72:27:
9e:60:7b:64:40:4d:69:36:f7:af:53:33:1a:62:d1:2b:d2:09:
00:18:ad:2b:47:07:e7:66:aa:25:2a:94:72:07:b1:00:29:23:
a9:15:f6:0f:d7:b2:77:fd:68:32:36:02:a7:73:be:f2:d2:5a:
bb:b1:a2:49:26:7d:cf:03:0d:50:da:85:c0:69:9d:41:9f:e9:
59:ec:a7:34:a8:00:16:d2:ca:d1:19:cc:79:52:24:74:ef:50:
db:e4:dd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:35:46 2026 by rpki-client