
$ rpki-client -vvf rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/61BCB5467F5F11F1BEA7A26F5FA30FBC.roa
File: 61BCB5467F5F11F1BEA7A26F5FA30FBC.roa (raw, json)
Hash identifier: SeQUnFSLQHOFUsaseN6yWVAw0Pri/I36or2wIB3les8=
Subject key identifier: 60:94:6D:D0:9E:0F:5B:2B:D5:DF:65:55:7A:3B:2C:17:93:45:C9:55
Certificate issuer: /CN=A91185B8/serialNumber=0F90692A1EEFE7F0A1AC68B5E1AC09F7026971CC
Certificate serial: 0279
Authority key identifier: 0F:90:69:2A:1E:EF:E7:F0:A1:AC:68:B5:E1:AC:09:F7:02:69:71:CC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5BpKh7v5_ChrGi14awJ9wJpccw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/61BCB5467F5F11F1BEA7A26F5FA30FBC.roa
Signing time: Wed 15 Jul 2026 08:07:41 +0000
ROA not before: Wed 15 Jul 2026 08:07:41 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 63983
IP address blocks: 165.86.40.0/22 maxlen: 22
165.86.44.0/22 maxlen: 22
165.86.71.0/24 maxlen: 24
165.86.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.crl
rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5BpKh7v5_ChrGi14awJ9wJpccw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 02:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 633 (0x279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91185B8, serialNumber=0F90692A1EEFE7F0A1AC68B5E1AC09F7026971CC
Validity
Not Before: Jul 15 08:07:41 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a573fcd-6e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:95:b2:d0:27:d9:4c:9c:ba:fc:10:c7:96:
ff:8e:96:7c:27:bc:ef:1a:28:5c:63:9a:ea:09:a5:
f1:fc:26:97:77:64:19:c2:2c:6c:a7:e0:bb:74:84:
91:e5:42:e3:0f:8f:71:56:8a:fe:96:ac:92:67:91:
7b:61:d1:40:27:51:ae:59:05:22:de:16:30:a3:c0:
7e:2c:c0:b4:b6:c2:c9:89:55:61:06:6a:8b:f5:cd:
8f:29:27:69:db:62:21:ab:a1:dc:3f:33:91:2c:a5:
e9:ef:00:a4:e4:44:27:d5:53:c7:52:3f:e4:c2:ab:
05:0f:b9:40:e9:a5:48:d0:e3:c6:d7:17:ba:eb:1a:
79:d7:f0:9e:d4:44:75:0f:29:91:f8:6e:e3:c5:f3:
3e:0c:5f:e4:1c:94:be:48:b2:c8:03:7a:86:f2:f5:
c9:cc:52:60:35:40:b5:8b:27:b3:f6:a1:ab:41:8a:
4d:06:9a:37:89:3b:a9:a0:d7:e0:ee:fd:e3:e2:0e:
1e:6a:01:e5:b0:e1:73:35:c5:ca:a0:ac:78:47:94:
14:12:60:77:b0:3d:bd:86:7a:a1:6e:65:b8:00:0b:
31:22:a3:b4:86:c9:f0:b8:9f:fb:27:d8:50:8f:2a:
44:b6:a4:09:36:d5:fb:45:8f:bd:d5:1b:88:b9:d2:
41:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:94:6D:D0:9E:0F:5B:2B:D5:DF:65:55:7A:3B:2C:17:93:45:C9:55
X509v3 Authority Key Identifier:
keyid:0F:90:69:2A:1E:EF:E7:F0:A1:AC:68:B5:E1:AC:09:F7:02:69:71:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5BpKh7v5_ChrGi14awJ9wJpccw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/61BCB5467F5F11F1BEA7A26F5FA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
165.86.40.0/21
165.86.71.0/24
165.86.81.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:68:4b:7d:f2:14:67:1b:7b:bf:c5:29:53:ab:1c:1b:81:c7:
60:f5:74:49:ff:01:05:49:2b:02:ca:70:16:4e:8c:bc:0b:37:
80:c5:06:2f:32:58:2d:ed:5f:53:ee:ab:14:cd:cf:2c:81:d5:
f1:aa:29:49:ef:a8:46:d7:fb:fa:a3:1c:46:d4:91:3b:17:be:
dd:f9:46:2b:c2:18:f0:9d:42:be:01:c5:7a:fb:a6:64:1d:c5:
ad:f2:21:be:59:47:43:98:bc:6e:a5:86:d3:6a:03:97:3f:fe:
e8:7b:9d:69:6f:86:81:97:f5:ac:26:28:a8:7c:4b:51:46:a5:
e5:02:eb:4c:dc:af:8b:0a:c9:b7:97:f3:5d:9c:fb:58:da:0c:
0e:67:6e:fe:a2:ef:ae:a7:de:3a:89:14:de:2c:66:d8:4e:20:
22:b9:b3:45:f2:2c:42:0f:ec:70:6d:10:75:13:cd:1d:3a:9e:
8b:bd:52:7d:b2:94:64:59:06:df:9c:4e:bc:64:03:f0:d4:5e:
fb:67:23:2f:fc:2e:ca:99:09:19:1a:b4:9b:50:20:a3:c4:04:
c2:b3:bb:c9:0e:01:bc:8e:50:1e:7e:34:9b:e1:95:09:f2:d3:
88:c7:f0:9c:f6:17:8c:fe:92:a7:9f:88:18:98:4c:52:81:63:
08:0f:f8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 06:08:41 2026 by rpki-client