
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/140D52F2854B11EAACB2FE39C4F9AE02.roa
File: 140D52F2854B11EAACB2FE39C4F9AE02.roa (raw, json)
Hash identifier: SJ0rwtcLp6Z9RDMVKXqQF+WK3B1+aC8nrvKpfPQnrkw=
Subject key identifier: D3:DE:DC:53:B3:11:00:65:82:6C:58:81:85:CD:0F:27:0F:65:55:59
Certificate issuer: /CN=A91274A4/serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5
Certificate serial: 0CF3
Authority key identifier: 59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/140D52F2854B11EAACB2FE39C4F9AE02.roa
Signing time: Mon 12 Oct 2026 08:36:20 +0000
ROA not before: Mon 12 Oct 2026 08:36:20 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 139883
IP address blocks: 61.13.236.0/24 maxlen: 24
61.16.51.0/24 maxlen: 24
61.16.52.0/24 maxlen: 24
61.16.55.0/24 maxlen: 24
61.16.101.0/24 maxlen: 24
61.16.105.0/24 maxlen: 24
61.16.110.0/24 maxlen: 24
61.16.119.0/24 maxlen: 24
2407:9880:8101::/48 maxlen: 48
2407:9880:8111::/48 maxlen: 48
2407:9880:8112::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl
rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 08:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3315 (0xcf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91274A4, serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5
Validity
Not Before: Oct 12 08:36:20 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6acc9c04-79d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ac:fc:87:0f:88:87:88:b4:5e:51:ad:a0:dd:
9e:bd:c5:15:24:c7:dc:c0:fe:7f:d7:89:5a:6b:8d:
56:f7:96:44:5e:60:b6:b2:60:2a:05:ba:99:77:17:
e9:9c:60:04:8a:fa:07:ab:ae:12:cb:ce:99:37:41:
d1:c5:e0:b5:01:f2:b8:31:02:29:11:db:7b:c3:96:
ad:54:f8:9e:f8:e2:15:ff:30:6b:ef:ee:f5:c4:66:
1b:67:1e:45:12:19:74:82:f3:87:cd:ea:98:cf:9e:
7a:da:72:21:1b:9a:c6:7f:3b:1b:a0:10:5d:ff:e9:
fa:13:f5:7d:ec:0d:49:d7:61:4b:c2:0b:95:5a:db:
ce:fa:0e:a5:4b:62:34:be:5a:cd:0e:f7:39:66:0e:
8b:6a:59:d3:1d:da:8f:81:a9:fe:45:25:dd:65:23:
67:43:f7:7e:2d:91:82:4d:f5:a1:7a:b4:7a:44:b2:
6b:de:f4:8c:a8:85:61:9a:e5:39:1c:ae:6d:2d:4e:
05:ee:22:0f:b7:98:80:65:2c:3f:ec:dc:9e:51:f9:
78:c5:be:25:5b:a5:dd:79:ae:7e:60:c6:94:bb:81:
f9:d9:b7:26:3a:e7:f3:de:be:65:4b:b7:77:57:34:
c5:c7:7c:e0:a2:bb:79:8a:39:43:66:1c:91:60:d7:
e2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DE:DC:53:B3:11:00:65:82:6C:58:81:85:CD:0F:27:0F:65:55:59
X509v3 Authority Key Identifier:
keyid:59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/140D52F2854B11EAACB2FE39C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.13.236.0/24
61.16.51.0-61.16.52.255
61.16.55.0/24
61.16.101.0/24
61.16.105.0/24
61.16.110.0/24
61.16.119.0/24
IPv6:
2407:9880:8101::/48
2407:9880:8111::-2407:9880:8112:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
59:0b:19:1a:72:1f:0b:00:0a:59:44:42:3e:03:91:1b:b7:78:
29:2e:e6:f0:14:1a:36:19:54:d8:80:b7:f0:d7:6b:9f:a6:0a:
1a:f0:46:f8:c7:40:0b:da:f5:20:41:7c:4e:35:b7:7c:8b:45:
23:3e:d5:4d:20:bc:83:a7:51:f3:eb:55:60:15:78:5c:ca:4b:
29:b0:7b:a3:9e:0a:96:0b:56:7f:bb:e3:0e:2b:ab:3c:0d:1f:
f3:16:92:0b:68:69:66:c9:f3:21:23:ed:f7:c4:4c:0f:de:ad:
09:40:f3:07:9a:f6:81:1b:7f:6b:f9:f3:bd:33:83:2c:21:da:
f2:41:df:c9:67:c7:95:20:cf:7a:d8:3e:40:80:35:dd:b6:82:
59:65:39:ae:54:41:5a:7d:b2:80:ab:5e:f8:43:5f:95:77:a8:
54:bc:cf:77:45:e6:94:6f:1c:ec:bd:ad:a2:bf:b1:fb:cb:b4:
d7:bb:d2:fd:59:a8:66:6f:1e:e1:4f:db:58:95:41:26:99:d6:
10:2c:37:27:28:a0:ea:1a:e2:12:39:86:a6:0c:32:60:eb:f3:
d2:b0:13:d6:76:fa:2e:a1:ed:31:a7:07:2e:18:11:89:b4:3f:
32:0e:4c:f1:a8:b2:dd:98:3a:5e:ce:1b:9e:3e:67:40:c9:ea:
65:7f:bb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:05:29 2026 by rpki-client