
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/F84FF96A493911ED805EB686C4F9AE02.roa
File: F84FF96A493911ED805EB686C4F9AE02.roa (raw, json)
Hash identifier: w7KG/J1TWQ+E1Y4LjZmHHZjsfxjI1eg2+nxK+rAoyBg=
Subject key identifier: A9:56:2A:7E:7C:18:27:21:DA:2D:AB:8B:7E:31:66:B9:5D:B3:9B:3D
Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157
Certificate serial: 0370
Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/F84FF96A493911ED805EB686C4F9AE02.roa
Signing time: Mon 15 Jun 2026 01:30:20 +0000
ROA not before: Mon 15 Jun 2026 01:30:20 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 32787
IP address blocks: 140.168.240.0/24 maxlen: 24
140.168.241.0/24 maxlen: 24
140.168.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl
rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 02:20:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 880 (0x370)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADB98, serialNumber=661C64E293B87F473AF61D89DE48FC4538570157
Validity
Not Before: Jun 15 01:30:20 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a2f55ac-c2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:df:a3:0f:e4:71:c3:ba:59:e5:98:84:7e:c3:
6f:25:65:42:1f:f5:ed:97:bf:03:c8:b6:b9:88:c9:
c9:34:71:8d:0d:0e:0e:16:d4:a1:ab:83:e8:01:5b:
25:ef:73:07:73:ab:ee:fe:31:de:50:f9:b0:cf:29:
d6:ed:c2:02:1d:1f:ef:97:e1:1d:b3:90:ef:da:f6:
2e:2c:35:a5:79:bd:ce:d7:70:d5:4e:94:d4:4b:f9:
f5:03:1b:a9:92:da:75:e0:69:d0:f1:66:d0:bd:43:
4d:a1:d2:f2:71:61:65:c7:53:dc:cc:38:6f:0c:4d:
c5:75:d4:52:da:6c:8c:98:72:f9:d2:52:d6:b3:80:
5d:29:5d:41:0d:75:43:93:65:0f:06:ba:6f:47:15:
17:b5:0a:dc:e9:e7:70:57:ee:9b:0f:53:80:92:1f:
5f:77:51:6a:94:66:ca:20:08:e4:b8:b1:cb:fd:3c:
0d:85:94:9d:58:99:e3:38:a7:86:7f:a1:ae:a2:8c:
86:ff:aa:99:04:97:8f:30:6c:c6:be:c2:e5:99:a0:
bc:65:50:10:63:50:b9:b7:08:d4:62:95:fc:e3:49:
58:f0:c3:ef:4f:db:46:7d:57:44:91:30:73:5e:c9:
3c:fe:5a:af:3c:11:0a:5e:63:db:6c:91:e0:c6:98:
d4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:56:2A:7E:7C:18:27:21:DA:2D:AB:8B:7E:31:66:B9:5D:B3:9B:3D
X509v3 Authority Key Identifier:
keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/F84FF96A493911ED805EB686C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
140.168.240.0/23
140.168.243.0/24
Signature Algorithm: sha256WithRSAEncryption
91:28:e0:06:15:d8:3c:aa:72:74:92:1f:57:fb:32:28:62:8a:
76:72:12:16:bf:bd:8c:6d:ff:44:19:ed:8c:e4:39:50:9e:c3:
15:84:bb:bc:9d:07:d8:84:46:c3:11:81:57:71:90:85:0f:c5:
d3:9a:aa:69:ef:06:e7:07:5d:19:d3:d7:7e:e5:84:84:12:9c:
11:29:e7:78:8b:f9:86:04:87:a5:b9:b1:2d:b7:c6:93:97:32:
d8:d4:87:b9:c0:06:f0:c4:f9:38:a2:3c:f8:fe:f8:d0:dc:3e:
9c:6f:0c:d4:f0:45:aa:a1:a3:80:da:fc:e6:41:67:35:7a:67:
52:39:54:db:6b:ed:9d:b6:44:6d:4e:99:b1:9e:7d:0e:73:e7:
a7:18:0e:41:d0:f6:7e:e4:b5:c6:d9:06:19:cd:2f:e1:e4:8f:
87:2b:96:2b:b4:76:fd:e7:2e:ab:67:80:46:b6:b5:3f:0c:3f:
db:3a:1f:e6:9f:6e:e3:44:55:54:8f:d2:93:da:1b:c5:1a:bf:
68:3b:01:38:96:6c:23:85:a1:a2:ae:2c:01:3a:39:50:8a:e4:
25:38:3c:78:24:3d:41:35:fa:68:82:4f:6d:3f:26:cd:30:d0:
6b:50:2e:c9:75:4c:2d:93:0a:04:d8:22:4d:85:58:ff:20:3e:
41:c2:21:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:21:02 2026 by rpki-client