
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/6B1B75BC756311EFB6C7E64CC4F9AE02.roa
File: 6B1B75BC756311EFB6C7E64CC4F9AE02.roa (raw, json)
Hash identifier: WWV+AXT9KRM+NeyyM01jQfzYP5MZSPood17P/nM3ijc=
Subject key identifier: F9:23:FD:D8:21:51:5B:24:C7:4A:F6:5E:C9:1F:B1:DC:0A:AF:DC:C3
Certificate issuer: /CN=A9120974/serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145
Certificate serial: 1127
Authority key identifier: AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/6B1B75BC756311EFB6C7E64CC4F9AE02.roa
Signing time: Thu 28 May 2026 17:21:41 +0000
ROA not before: Thu 28 May 2026 17:21:41 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 132203
IP address blocks: 161.120.192.0/19 maxlen: 19
161.120.224.0/19 maxlen: 19
162.14.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl
rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 17:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4391 (0x1127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120974, serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145
Validity
Not Before: May 28 17:21:41 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a1879a5-c910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1b:3d:e6:2b:ae:56:44:42:d9:48:fb:9b:23:
56:23:55:d7:4f:a2:6c:b5:15:92:42:20:9b:ba:a2:
bc:2a:c1:cb:77:3a:68:50:00:d7:05:49:70:66:f2:
3c:51:be:77:11:2b:ad:a1:ee:f3:80:83:ba:9b:01:
17:56:2e:93:79:73:57:f1:d0:f6:41:f6:07:0c:07:
95:f7:db:31:7c:f7:59:91:d3:55:62:ed:8a:77:69:
74:fd:de:70:b0:74:e4:08:0a:3d:d1:ed:12:e1:6a:
f9:4e:5b:9b:6e:35:3e:54:62:2d:91:52:e5:69:a9:
b6:62:9b:ae:95:98:c4:6a:5b:97:dc:0e:e5:b0:9e:
b4:72:04:bd:34:03:d1:c4:42:50:af:11:00:ea:fc:
9c:d6:b2:8d:04:00:6b:cb:53:61:45:9a:d0:a3:79:
16:4c:24:c0:ad:63:7a:71:9f:99:52:68:ce:58:cd:
58:4c:7b:6a:df:ba:7a:19:aa:fa:57:08:d8:6a:51:
1b:0a:66:8d:00:06:4f:98:e4:cd:fc:1f:72:70:96:
f8:f8:c4:37:e2:a7:89:14:a7:92:0b:14:5d:81:1f:
04:5b:bc:1f:df:18:fa:83:d9:9c:6a:0e:de:b3:72:
ea:50:cb:f8:93:ed:9a:27:80:a9:b9:0b:3c:48:de:
a4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:23:FD:D8:21:51:5B:24:C7:4A:F6:5E:C9:1F:B1:DC:0A:AF:DC:C3
X509v3 Authority Key Identifier:
keyid:AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/6B1B75BC756311EFB6C7E64CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
161.120.192.0/18
162.14.60.0/22
Signature Algorithm: sha256WithRSAEncryption
28:20:ee:6c:76:44:72:fc:e0:3b:d5:b6:75:b7:91:04:31:0d:
bb:50:84:66:eb:3a:9b:2d:80:d5:2a:2c:cd:10:fe:06:d1:0d:
59:0b:3d:4e:12:79:9a:59:fb:58:44:39:f2:8c:14:06:58:41:
39:43:a7:ab:cb:11:a4:cc:d4:8e:10:01:07:c0:6c:3f:f4:0d:
d5:8f:a6:6f:18:ce:65:a2:1c:c2:90:f8:e1:f6:f0:78:77:4a:
a8:17:dc:df:ae:67:9c:3b:39:7a:b9:db:ab:9e:e6:07:7c:32:
2a:e9:6e:3f:ce:22:cc:70:46:5f:69:84:00:82:ba:26:38:48:
30:c8:ea:54:e9:a7:d8:63:78:65:4e:42:3c:25:33:37:b9:a6:
6f:cb:b8:fa:03:17:97:47:53:12:b2:67:3c:28:d7:0f:e3:db:
0d:43:17:e0:d1:8c:f6:16:84:a4:51:32:07:c0:8f:4f:86:31:
cd:8e:8e:9a:9b:f3:60:e7:d7:31:8b:f4:4f:1d:53:02:eb:94:
ea:3c:27:c4:f8:fe:96:39:38:2b:4c:e4:b2:8c:67:bb:51:93:
a4:5a:ad:da:37:04:41:3d:02:62:e2:7b:60:71:2c:56:86:10:
22:5d:c8:75:f8:f4:84:0f:a6:cf:a8:b2:1b:1a:bc:f3:b1:0c:
5b:e7:39:00
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICEScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjA5NzQxMTAvBgNVBAUTKEFDODg2NDI2MzgyNEVERTM2NTVCOTk3NDJERkIzOUU4
ODNCQjkxNDUwHhcNMjYwNTI4MTcyMTQxWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTE4NzlhNS1jOTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAshs95iuuVkRC2Uj7myNWI1XXT6JstRWSQiCbuqK8KsHLdzpoUADXBUlwZvI8
Ub53ESutoe7zgIO6mwEXVi6TeXNX8dD2QfYHDAeV99sxfPdZkdNVYu2Kd2l0/d5w
sHTkCAo90e0S4Wr5TlubbjU+VGItkVLlaam2YpuulZjEaluX3A7lsJ60cgS9NAPR
xEJQrxEA6vyc1rKNBABry1NhRZrQo3kWTCTArWN6cZ+ZUmjOWM1YTHtq37p6Gar6
VwjYalEbCmaNAAZPmOTN/B9ycJb4+MQ34qeJFKeSCxRdgR8EW7wf3xj6g9mcag7e
s3LqUMv4k+2aJ4CpuQs8SN6kMQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFPkj/dgh
UVskx0r2XskfsdwKr9zDMB8GA1UdIwQYMBaAFKyIZCY4JO3jZVuZdC37OeiDu5FF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9FMTA1QjNCQTNB
NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdlTmxXNWwwTGZzNTZJTzdr
VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3JJaGtKamdrN2VObFc1bDBMZnM1NklPN2tVVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjA5NzQvRTEwNUIzQkEzQTQ5MTFFOTk0MEYyRDE2QzRGOUFFMDIvNkIxQjc1QkM3
NTYzMTFFRkI2QzdFNjRDQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQGoXjAAwQCog48MA0GCSqGSIb3DQEBCwUAA4IBAQAoIO5sdkRy/OA7
1bZ1t5EEMQ27UIRm6zqbLYDVKizNEP4G0Q1ZCz1OEnmaWftYRDnyjBQGWEE5Q6er
yxGkzNSOEAEHwGw/9A3Vj6ZvGM5lohzCkPjh9vB4d0qoF9zfrmecOzl6udurnuYH
fDIq6W4/ziLMcEZfaYQAgromOEgwyOpU6afYY3hlTkI8JTM3uaZvy7j6AxeXR1MS
smc8KNcP49sNQxfg0Yz2FoSkUTIHwI9PhjHNjo6am/Ng59cxi/RPHVMC65TqPCfE
+P6WOTgrTOSyjGe7UZOkWq3aNwRBPQJi4ntgcSxWhhAiXch1+PSED6bPqLIbGrzz
sQxb5zkA
-----END CERTIFICATE-----
Generated at Sat Jun 6 18:05:56 2026 by rpki-client